In this demonstration, you will see how to delegate permissions, to create GPOs delegate permissions
to link GPOs delegate permissions to view group policy results.
Make Beth a local administrator on low on SVR one one switch to ELO and DC one two on the taskbar.
Click the file Explorer icon three in the file explorer window in the navigation pane.
I'll find and run the script for in the details pane.
Right click the set local admin dot as one file and then click run with PowerShell.
Type Y if prompted.
And then press enter.
Check user permissions before delegation.
One switch to l0 and SVR.
One to sign in as a data backslash.
Beth with the password.
Three In Server Manager Click Add Roles and features.
Four in an roles in features wizard on the before you begin page click next.
Five.
On the select installation type page.
Click next.
Six.
On the Select Destination Server page.
Click next.
Seven.
On the Select Server Roles page.
Click next.
Eight.
On the Select Features page.
Select the group policy management checkbox and then click next.
Nine.
On the confirm installation selections page.
Click Install.
Ten.
When the installation completes, click close.
11.
In Server Manager Click Tools and then click group policy management.
12.
If necessary, switch to the group policy management window.
13.
In Group Policy Management Expand forest and data imdb.com expand domain's expanded datum.
Com and then click group policy objects.
14.
Right click group policy objects.
And then notice that the new item is denied because Beth does not have permissions to create GPOs 15
in the navigation pane right click the a date and dot com domain and then notice that menu item link
and existing GPO is denied because Beth does not have permissions to link GPOs to the domain.
16 In the navigation pane right click the itto you and then notice that menu item link and existing
GPO is denied because Beth also does not have permissions to link GPOs to the ITU.
17 Click Start and then click Windows PowerShell.
18 in the Windows PowerShell window type the following command and then press enter GPO result slash
r 19 in the output from the command.
Notice that only the user settings is displayed because Beth is not assigned the permissions view group
policy results for computer settings.
Delegate permissions.
One on L1 and DC.
One switch to the group policy management window.
Two In Group Policy Management in the navigation pane.
Click the group policy objects container and then in the details pane.
Click the delegation tab.
Three.
Click add in the select user computer or group dialog box.
Type s click check names and then click.
Okay.
Forward in the navigation pane.
Click the ITU.
And then in the details pane.
Click the delegation tab five in the permission dropdown list.
Ensure that link GPOs is selected and then click add six in the select user computer or group dialog
box type s click check names and then click okay.
Seven in the add group or user dialog box.
Click.
Okay.
Eight In the navigation pane.
Click the a datacom domain.
And then in the details pane, click the delegation tab nine in the permission dropdown list select
read group policy results data and then click add ten in the select user computer or group dialog box
type authenticated users.
Click check names and then click okay.
11 in the add group or user dialog box.
Click.
Okay.
Check permissions after delegation one.
Switch to L0 and SVR one to switch to group policy management.
Three In the group policy management window click and then right click the A data CNN.com domain and
then click refresh.
Four in the navigation pane, right click group policy objects and then click new.
Five In the new GPO dialog box in the name text box type beths GPO and then click.
Okay.
Six in the navigation pane, right click a datum icon and then notice that link an existing GPO is still
dimmed seven in the navigation pane right click it and then click link in existing GPO eight in the
select GPO Dialog Box, Click Best GPO and then click okay nine switch to the Windows PowerShell window
ten in the Windows PowerShell window, type the following command and then press enter GP result slash
r 11 in the output from the command.
Notice that both the computer and the user settings are displayed.