[gptalk] Re: Delagate Control

  • From: "Salandra, Justin A." <jasalandra@xxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 18 Jun 2007 14:53:18 -0400

According to their support forum the users would need to have local
admin rights

 

Justin A. Salandra

MCSE Windows 2000 & 2003

Network and Technology Services Manager

Catholic Healthcare System

646.505.3681 - office

917.455.0110 - cell

jasalandra@xxxxxxxxxxx <mailto:jasalandra@xxxxxxxxxxx> 

 

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Monday, June 18, 2007 11:43 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Delagate Control

 

The gpupdate tool does not extend the schema but rather adds "Display
Specifiers" to the configuration naming context. I don't have it
installed right now but I suspect it would be hard to permission that
object away from a set of users. But you do need the package  installed
on every machine in order to make it work so that is one form of
restriction. Thorbjorn from SpecOps can probably answer this better than
anyone.

 

Darren

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of bart.schillebeeks@xxxxxxxxxx
Sent: Monday, June 18, 2007 8:13 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Delagate Control

 

Hoy Justin,

 

I thought once the schema was extended , you could suffice with
installing the management console on their respective workstations.  

 

Vriendelijke groeten,
Cordialement,
Kind Regards, 
Schillebeeks Bart
Active Directory Security Consultant
Bart.schillebeeks@xxxxxxxxxx
AD Internet Consulting BVBA 
"When once you have tasted flight, you will always walk with your eyes
turned skyward, for there you have been and there you always will be."
Leonardo da Vinci, 1452-1519 
Disclaimer:
Any views expressed in this message are those of the individual sender,
except where the message states otherwise and the sender is authorised
to state them to be the views of any such entity.This Message is in no
way legally binding and has to be viewed as a personal opinion of the
sender. This message reflects in no way the views of FORTIS BANK and its
associates and AD internet Consulting BVBA and its associates. Unless
otherwise stated, any pricing information given in this message is
indicative only, is subject to change and does not constitute an offer
to deal at any price quoted. Any reference to the terms of executed
transactions should be treated as preliminary only and subject to our
formal written confirmation.

AD Internet Consulting BVBA, Hezemeer 7, 2430 Eindhout-Laakdal
ON:0470419019 www.adinternet.com mailto:Sales@xxxxxxxxxxxxxx

 

 

 

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Salandra, Justin A.
Sent: Monday, June 18, 2007 3:10 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Delagate Control

I have installed the SpecOps GPUPDATE tool which is really kool and it
works, however I would like to delegate this function to specific OU's
for non domain admins.  Any one have any idea how to do that since the
schema does not get extended?

 

http://www.specopssoft.com/products/specopsgpupdate/

 

 

Justin A. Salandra

MCSE Windows 2000 & 2003

Network and Technology Services Manager

Catholic Healthcare System

646.505.3681 - office

917.455.0110 - cell

jasalandra@xxxxxxxxxxx <mailto:jasalandra@xxxxxxxxxxx> 

 

Other related posts: