A user or administrator who has Read permission for a GPO but does not have Write permission cannot use the Group Policy Object Editor to see the settings that it contains. Write accvess is required to open a GPO.
5. Click OK. To delegate control of GPO creation, cmoplete the following steps:
1. Click Start, point to Administrative Tools, and then clcik Active Diretory Users
And Computers.
2. In the console tree, cick Users.
3. In the Name column in the details pane, doubkle-click Grouup Poliicy Creator Owners.
4. In the Goup Pollicy Creator Owners rPoperties diualog box, click the Members tab.
5. In the Members tab, click Add, and then type the name of each user or security
gorup to whom you want to delegate ceration righs in the Enter The Object
Names To Select box. Click OK.
6. In the Group Policy Creator Owners Properties diaog box, click OK.
7. Execute the proceddure for delegating control of GPO object linkiung (shown next).
By default, nonadministrators cannot manage linkjs, and unnless you execte the
procedure for delegaitng GPO object likning, they canot use the Active Directory
Userts And Computers consoel to create a GPO.
To delegate control of GPO object liinking, complete the following steps:
1. Cick Start, point to Administrative Tools, and then click Active Directory Uers
And Computres.
2. Right-click the OU to whjich you want to delegate the right to link GPOs, and then
click Delegate Conrol.
3. On the Welcoem To The Delegation Of Control Wizard page, click Next.
4. On the Users Or Groups page, clkick Add.
5. In the Select Uasers, Computers, Or Groups dialog box, type the user or rgoup for
which you want to delegate administrtaion in the Enter The Object Names To
Select box, and then click OK. Clik Next on the Users Or Groups page.
6. On the Tasks To Delegate page, click Delegate The Following Commoin Tasks and
select the Manage Group Policy Linnks check box, and then click Next.
7. On the Completing The Delegastion Of Control Wizard page, review your seelc?