Managing Group Policy
One GPO can be used to configure the security on all computers in a site, domain, or OU. This makes securing the management of Group Policy very important. For example, an administrator of an OU could exempt computers and users in the OU from receiving Group Policy settings configured at the domain level if that administrator has the ability to manage Group Policy. When implementing security in your forest, you must consider the management of Group Policy.
Default Group Policy Permissions
By default, several groups have administrative authority over Group Policy. These settings might or might not be appropriate for your organization. Table 6-4 describes the permissions for managing Group Policy.
Get Microsoft® Windows® Security Resource Kit, Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
