To set permissions on a Group Policy object

1.

Open the Group Policy snap-in.

2.

In the console tree, right-click the icon or the name of the Group Policy object for which you want to set permissions, which appears as follows:
Group Policy object name [domain_name] Policy,
and then click Properties.

3.

Click the Security tab, select the following options that you want, and then click OK:

Add: Opens the Select Users, Computers, or Groups dialog box, where you can specify the users and groups for whom you want to assign permissions.

Remove: In the Group or user names box, removes selected users or groups and their associated permissions from this object.

Permissions for Authenticated Users: Lists the standard permissions that you can allow or deny to users, for example, Full Control, Read, Write, and so on.

Advanced: Use this option to set special permissions, auditing information, and owner information for the selected object.

 Note

To open the Group Policy snap-in, see Related Topics.

You can only set permissions on a nonlocal Group Policy object.

Ways to open the Group Policy snap-in

Open Group Policy from Active Directory Users and Computers

Open Group Policy from Active Directory Sites and Services

Open Group Policy as a stand-alone MMC snap-in

Edit the local Group Policy object

Filter the scope of Group Policy according to security group membership


Top of pageTop of page