[gptalk] GPO Permissions

  • From: Neil Berry <neil@xxxxxxxxxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Fri, 01 Feb 2008 10:29:41 +0000

Hi all,

I wonder if anyone could help me with this. I am trying to reduce access to the GPOs in a specific environment and want to trim the permissions to a minimum without breaking anything !

I was intending to reduce permissions to the following

Authenticated Users : Read
Domain Admins: Full control
Enterprise Admins: Full Control
Group Policy Creator: Edit, delete, modify

But it looks like the following might be required ?

System : Full control
Enterprise Domain controllers: read

Are there any other specific permission requirements that anyone knows about for particular policies ?

Thanks for any thoughts.

You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/

Other related posts: