2.2. Advanced Security and Delegation with the GPMC

Mere mortals' access to Group Policy can be and, indeed, should be controlled. Users' access to all things Group Policy related is judged in many forms. However, the first question you'll want to answer and understand well is basic: To whom should Group Policy be applied, and to whom should it not be applied?

Once we can answer that, we can move on to some more advanced topics:

  • What kind of access can I grant to mere mortals to manipulate the GPO itself? That is, can a user read or modify the GPO's settings or security?

  • How can I grant a mere mortal access to create GPOs in the domain?

  • Can a user perform special Group Policy–related stuff, such as the creation and management of WMI filters or ...

Get Group Policy: Fundamentals, Security, and Troubleshooting now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.