Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Role

Available Actions

How Someone Falls into Scope of the Role

Status
subtletrue
colourBlue
titleOU Owner

When a Department OU is created, the requestor provides a list of the initial OU Owners.

Department OU Owners can edit (add/remove) owners of the Department OU.

If a Department falls in the scenario where there are no valid OU Owners (for example, all of the owners are former staff), the owners can be updated by one of the following processes:

  • The Head of the Department submits a request to the AD team, specifying the EIDs of the new OU Owners.

  • IT staff member from the department contacts the ISO who will review it and then submit a request to the AD team, specifying the EIDs of the new OU Owners.

Status
colourGreen
titleGPO Administrator

GPO Administrators can create, delete, and manage a Department’s GPOs.

A Department OU Owner sets the GPO Administrators.

Status
colourYellow
titleGPO EdITOR

GPO Editors have permission to edit a Department’s GPOs.

GPO Editors have no permissions within the Department GPO Tools.

GPO Editors must be Departmental user accounts (Not EIDs.)

A Department OU Owner sets the GPO Editors.

...

  1. Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.

  2. From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.

  3. Select the desired Department OU from the Select a Department OU drop down list.

  4. The current GPO Administrators are listed under Current GPO Administrators.

Add GPO Administrators
Status
subtletrue
colourBlue
titleOU Owner

...

  1. Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.

  2. From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.

  3. Select the desired Department OU from the Select a Department OU drop down list.

  4. Under Current GPO Administrators, select the user that you want to remove.

  5. Click the Remove Selected Admin button.

View GPO Editors
Status
subtletrue
colourBlue
titleOU Owner

  1. Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.

  2. From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.

  3. Select the desired Department OU from the Select a Department OU drop down list.

  4. The current GPO Editors are listed under Current GPO Editors.

Add GPO Editors
Status
subtletrue
colourBlue
titleOU Owner

...

Reset GPO Permissions
Status
colourGreen
titleGPO Administrator

Note

Reset GPO Permissions will restore the Tool’s default departmental permissions. This will provide your Department’s GPO Editors with GpoEditDeleteModifySecurity rights. Permissions for other departmental users and groups will be removed!
This is handy where someone created a GPO outside of the tools, did not set permissions for others in your department, and is no longer around to adjust permissions, leaving GPO where no one in your department can edit it.

  1. Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.

  2. From the menu on the left side of the page, under the GPO Administrators section, click on Reset GPO Permissions.

  3. Select the desired Department OU from the Select a Department OU drop down list.

  4. Next to Select a GPO, select the GPO that you want to reset the permissions on.
    Optionally check the Find all GPOs with <DEPT>Trustee's checkbox to include GPOs where permissions exist for a <DEPT>- user, indicating the GPO was likely created outside the Department GPO Tools. These GPOs may not have the desired permissions set.

  5. Click the Reset Permissions button.

...