Mastering Windows Group Policy

GPO permissions via PowerShell

The application of GPOs is all about permissions. When Group Policy processes on a computer or a user, it basically tries to apply everything all the time, and the only reason you don't receive every setting from every GPO on your machine is because the permissions surrounding that GPO have been stacked in a way that you only receive the items that your Group Policy admins have deemed necessary to your user account or your workstation. We have already worked with a myriad of different permission tiers through the GPMC, now let's take a peek into the GPPermissions cmdlets that are available inside PowerShell in order to modify GPO permissions from a command-line interface.