Cross-Domain Editing of a Group Policy Object
Before you can edit a Group Policy object, the following two conditions must be met:
You have Read/write permissions (or Full Control) of the Group Policy object.
You are either logged on to the storage domain of the Group Policy object, or logged on to a domain that is trusted by the storage domain.