Set permissions on a Group Policy object

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To set permissions on a Group Policy object

Open Group Policy Object Editor.
In the console tree, right-click the icon or the name of the Group Policy object for which you want to set permissions, and then click Properties.
Click the Security tab, and then specify the following options:
- Add--Opens the Select Users, Computers, or Groups dialog box, where you can specify the users and groups for whom you want to assign permissions.
- Remove--In the Group or user names box, removes selected users or groups and their associated permissions from this object.
- Permissions for Authenticated Users--Lists the standard permissions that you can allow or deny to users, for example, Full Control, Read, Write, and so on.
- Advanced--Use this option to set special permissions, auditing information, and owner information for the selected object.

Notes

To complete this procedure, you must be logged on as a member of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group.
To open Group Policy Object Editor, see Related Topics.
You can only set permissions on a nonlocal Group Policy object.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.