Export (0) Print
Expand All

Set permissions on a Group Policy object

Updated: January 21, 2005

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To set permissions on a Group Policy object

  1. Open Group Policy Object Editor.

  2. In the console tree, right-click the icon or the name of the Group Policy object for which you want to set permissions, and then click Properties.

  3. Click the Security tab, and then specify the following options:

    • Add--Opens the Select Users, Computers, or Groups dialog box, where you can specify the users and groups for whom you want to assign permissions.

    • Remove--In the Group or user names box, removes selected users or groups and their associated permissions from this object.

    • Permissions for Authenticated Users--Lists the standard permissions that you can allow or deny to users, for example, Full Control, Read, Write, and so on.

    • Advanced--Use this option to set special permissions, auditing information, and owner information for the selected object.


  • To complete this procedure, you must be logged on as a member of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group.

  • To open Group Policy Object Editor, see Related Topics.

  • You can only set permissions on a nonlocal Group Policy object.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2015 Microsoft