Setting GPO permissions

If you can view permissions via PowerShell, you should be able to configure new GPO permissions via PowerShell as well, correct? Absolutely right. While this is slightly more difficult than viewing permissions because you need to know the special syntax for which permission type is going to accomplish what you are looking for, permissions are added into GPO Delegation by simple, single PowerShell cmdlets. This is akin to configuring permissions for users or groups via the Delegation tab inside GPMC.

Before jumping into a sample command, let's discuss what the various PermissionLevel settings are when working with Group Policy permissions inside PowerShell:

  • None: No permissions. As we experienced earlier when removing ...

Get Mastering Windows Group Policy now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.