1
00:00:05,990 --> 00:00:13,610
In this demonstration, you will see how to delegate permissions, to create GPOs delegate permissions

2
00:00:13,610 --> 00:00:18,470
to link GPOs delegate permissions to view group policy results.

3
00:00:19,340 --> 00:00:28,190
Make Beth a local administrator on low on SVR one one switch to ELO and DC one two on the taskbar.

4
00:00:28,220 --> 00:00:34,130
Click the file Explorer icon three in the file explorer window in the navigation pane.

5
00:00:34,250 --> 00:00:38,120
I'll find and run the script for in the details pane.

6
00:00:38,120 --> 00:00:43,100
Right click the set local admin dot as one file and then click run with PowerShell.

7
00:00:43,940 --> 00:00:45,350
Type Y if prompted.

8
00:00:45,350 --> 00:00:46,520
And then press enter.

9
00:00:47,390 --> 00:00:49,640
Check user permissions before delegation.

10
00:00:50,480 --> 00:00:52,700
One switch to l0 and SVR.

11
00:00:52,700 --> 00:00:55,940
One to sign in as a data backslash.

12
00:00:55,940 --> 00:00:57,170
Beth with the password.

13
00:01:09,570 --> 00:01:12,750
Three In Server Manager Click Add Roles and features.

14
00:01:13,660 --> 00:01:18,250
Four in an roles in features wizard on the before you begin page click next.

15
00:01:19,170 --> 00:01:19,680
Five.

16
00:01:19,740 --> 00:01:21,880
On the select installation type page.

17
00:01:21,900 --> 00:01:22,740
Click next.

18
00:01:23,670 --> 00:01:24,180
Six.

19
00:01:24,300 --> 00:01:26,480
On the Select Destination Server page.

20
00:01:26,490 --> 00:01:27,270
Click next.

21
00:01:28,200 --> 00:01:28,730
Seven.

22
00:01:28,830 --> 00:01:30,700
On the Select Server Roles page.

23
00:01:30,720 --> 00:01:31,560
Click next.

24
00:01:32,430 --> 00:01:32,850
Eight.

25
00:01:32,850 --> 00:01:34,440
On the Select Features page.

26
00:01:34,530 --> 00:01:38,250
Select the group policy management checkbox and then click next.

27
00:01:39,150 --> 00:01:39,660
Nine.

28
00:01:39,690 --> 00:01:42,100
On the confirm installation selections page.

29
00:01:42,120 --> 00:01:43,050
Click Install.

30
00:01:43,890 --> 00:01:44,350
Ten.

31
00:01:44,370 --> 00:01:46,770
When the installation completes, click close.

32
00:01:47,670 --> 00:01:48,180
11.

33
00:01:48,180 --> 00:01:52,110
In Server Manager Click Tools and then click group policy management.

34
00:01:52,980 --> 00:01:53,460
12.

35
00:01:53,760 --> 00:01:57,210
If necessary, switch to the group policy management window.

36
00:01:58,050 --> 00:01:58,680
13.

37
00:01:58,680 --> 00:02:05,100
In Group Policy Management Expand forest and data imdb.com expand domain's expanded datum.

38
00:02:05,100 --> 00:02:07,650
Com and then click group policy objects.

39
00:02:08,590 --> 00:02:09,280
14.

40
00:02:09,430 --> 00:02:11,350
Right click group policy objects.

41
00:02:11,500 --> 00:02:18,220
And then notice that the new item is denied because Beth does not have permissions to create GPOs 15

42
00:02:18,220 --> 00:02:23,890
in the navigation pane right click the a date and dot com domain and then notice that menu item link

43
00:02:23,890 --> 00:02:29,170
and existing GPO is denied because Beth does not have permissions to link GPOs to the domain.

44
00:02:30,010 --> 00:02:36,520
16 In the navigation pane right click the itto you and then notice that menu item link and existing

45
00:02:36,520 --> 00:02:41,800
GPO is denied because Beth also does not have permissions to link GPOs to the ITU.

46
00:02:42,640 --> 00:02:46,150
17 Click Start and then click Windows PowerShell.

47
00:02:46,960 --> 00:02:54,190
18 in the Windows PowerShell window type the following command and then press enter GPO result slash

48
00:02:54,190 --> 00:02:57,640
r 19 in the output from the command.

49
00:02:57,700 --> 00:03:02,650
Notice that only the user settings is displayed because Beth is not assigned the permissions view group

50
00:03:02,650 --> 00:03:04,660
policy results for computer settings.

51
00:03:05,540 --> 00:03:06,710
Delegate permissions.

52
00:03:07,610 --> 00:03:09,260
One on L1 and DC.

53
00:03:09,260 --> 00:03:12,110
One switch to the group policy management window.

54
00:03:12,920 --> 00:03:16,190
Two In Group Policy Management in the navigation pane.

55
00:03:16,340 --> 00:03:20,270
Click the group policy objects container and then in the details pane.

56
00:03:20,330 --> 00:03:21,770
Click the delegation tab.

57
00:03:22,640 --> 00:03:23,210
Three.

58
00:03:23,240 --> 00:03:28,010
Click add in the select user computer or group dialog box.

59
00:03:28,070 --> 00:03:30,560
Type s click check names and then click.

60
00:03:30,560 --> 00:03:31,040
Okay.

61
00:03:31,910 --> 00:03:33,440
Forward in the navigation pane.

62
00:03:33,470 --> 00:03:34,940
Click the ITU.

63
00:03:34,940 --> 00:03:36,500
And then in the details pane.

64
00:03:36,560 --> 00:03:41,060
Click the delegation tab five in the permission dropdown list.

65
00:03:41,150 --> 00:03:48,830
Ensure that link GPOs is selected and then click add six in the select user computer or group dialog

66
00:03:48,830 --> 00:03:52,220
box type s click check names and then click okay.

67
00:03:53,090 --> 00:03:56,060
Seven in the add group or user dialog box.

68
00:03:56,150 --> 00:03:56,510
Click.

69
00:03:56,510 --> 00:03:57,020
Okay.

70
00:03:57,830 --> 00:03:59,570
Eight In the navigation pane.

71
00:03:59,600 --> 00:04:01,610
Click the a datacom domain.

72
00:04:01,610 --> 00:04:08,300
And then in the details pane, click the delegation tab nine in the permission dropdown list select

73
00:04:08,300 --> 00:04:15,890
read group policy results data and then click add ten in the select user computer or group dialog box

74
00:04:16,010 --> 00:04:17,600
type authenticated users.

75
00:04:17,720 --> 00:04:19,940
Click check names and then click okay.

76
00:04:20,780 --> 00:04:23,870
11 in the add group or user dialog box.

77
00:04:23,990 --> 00:04:24,350
Click.

78
00:04:24,350 --> 00:04:24,860
Okay.

79
00:04:25,700 --> 00:04:28,880
Check permissions after delegation one.

80
00:04:28,940 --> 00:04:34,130
Switch to L0 and SVR one to switch to group policy management.

81
00:04:35,030 --> 00:04:40,730
Three In the group policy management window click and then right click the A data CNN.com domain and

82
00:04:40,730 --> 00:04:41,810
then click refresh.

83
00:04:42,710 --> 00:04:47,300
Four in the navigation pane, right click group policy objects and then click new.

84
00:04:48,140 --> 00:04:54,320
Five In the new GPO dialog box in the name text box type beths GPO and then click.

85
00:04:54,320 --> 00:04:54,830
Okay.

86
00:05:06,430 --> 00:05:13,030
Six in the navigation pane, right click a datum icon and then notice that link an existing GPO is still

87
00:05:13,030 --> 00:05:21,400
dimmed seven in the navigation pane right click it and then click link in existing GPO eight in the

88
00:05:21,400 --> 00:05:29,740
select GPO Dialog Box, Click Best GPO and then click okay nine switch to the Windows PowerShell window

89
00:05:30,550 --> 00:05:37,480
ten in the Windows PowerShell window, type the following command and then press enter GP result slash

90
00:05:37,480 --> 00:05:40,810
r 11 in the output from the command.

91
00:05:40,840 --> 00:05:44,140
Notice that both the computer and the user settings are displayed.