Delegate Group Policy object editing

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To delegate Group Policy object editing

  1. Open Group Policy Object Editor.

  2. In the console tree, right-click the icon or name of the Group Policy object, and then click Properties.

  3. Do any of the following:

    • To add a user or group of users, click the Security tab, and then click Add. Type the name of the user or group of users, and then click OK.

    • To give a user or group Group Policy object editing permissions, in Permissions for Authenticated Users, select the check boxes that correspond to the permissions you want to give. When you are finished, click OK.

    • If you do not want to apply the policy to a user or group of users, under Permissions for Authenticated Users, clear the Allow check box for Apply Group Policy. When you are finished, click OK.

Notes

  • To complete this procedure, you must be logged on as a member of the Domain Admins group or the Enterprise Admins group.

  • To open Group Policy Object Editor, see Related Topics.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Open Group Policy from Active Directory Users and Computers
Open Group Policy from Active Directory Sites and Services
Ways to open Group Policy Object Editor
Edit the local Group Policy object