1. | Open the Group Policy snap-in. |
2. | In the console tree, right-click the icon or the name of the Group Policy object for which you want to set permissions, which appears as follows: |
3. | Click the Security tab, select the following options that you want, and then click OK: Add: Opens the Select Users, Computers, or Groups dialog box, where you can specify the users and groups for whom you want to assign permissions. Remove: In the Group or user names box, removes selected users or groups and their associated permissions from this object. Permissions for Authenticated Users: Lists the standard permissions that you can allow or deny to users, for example, Full Control, Read, Write, and so on. Advanced: Use this option to set special permissions, auditing information, and owner information for the selected object. |
| • | To open the Group Policy snap-in, see Related Topics. |
| • | You can only set permissions on a nonlocal Group Policy object. |
Ways to open the Group Policy snap-in
Open Group Policy from Active Directory Users and Computers
Open Group Policy from Active Directory Sites and Services
Open Group Policy as a stand-alone MMC snap-in
Edit the local Group Policy object
Filter the scope of Group Policy according to security group membership