Delegate Permissions for WMI Filters
|
Scenario/Problem: A team requires the capability to create WMI filters, which will be used to filter the application of GPOs.
|
Solution: Delegate the permissions to create WMI filters.
To delegate permissions for WMI filters, perform the following steps:
1. | Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
|
2. | Click Start, click Administrative Tools, and then click Group Policy Management.
|
3. | In the console tree, select the WMI Filters node.
|
4. | In the details pane, click the Delegation tab.
|
5. | Click Add.
|
6. | On
the Select User, Computer, or Group window, enter the name of the group
to which you want to delegate the capability to create WMI filters and
click OK.
|
7. | On the Add Group or User window, select the Full Control or Creator Owner permission and click OK. |
Modify Delegated Permissions for WMI Filters
|
Scenario/Problem:
A team was previously granted the Creator Owner permission on WMI
filters in your domain. They now need the Full Control permission.
|
Solution: Modify delegated permissions on WMI filters.
To modify delegated permissions for WMI filters, perform the following steps:
1. | Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
|
2. | Click Start, click Administrative Tools, and then click Group Policy Management.
|
3. | In the console tree, select the WMI Filters node.
|
4. | In the details pane, click the Delegation tab.
|
5. | In
the details pane, right-click the group for which you want to modify
delegated permissions; then select Full Control or Creator Owner.
|
6. | Click OK on the confirmation screen to change inheritance.
|
Remove Delegated Permissions for WMI Filters
|
Scenario/Problem: A team was previously granted the capability to create WMI filters. They no longer require this permission.
|
Solution: Remove delegated permissions for WMI filters.
To remove delegated permissions for WMI filters, perform the following steps:
1. | Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
|
2. | Click Start, click Administrative Tools, and then click Group Policy Management.
|
3. | In the console tree, select the WMI Filters node.
|
4. | In the details pane, click the Delegation tab.
|
5. | In the details pane, right-click the group for which you want to remove delegated permissions and select Remove.
|
6. | Click OK on the confirmation screen to remove the delegated permissions.
|
