Re: Read security policy



For domain or OU one can delegate use of resultant set of policy
but must combine this with Read on the involved GPOs.

"Ilya" <Ilya@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:545C13FB-DD66-441E-8C60-79A319E638CD@xxxxxxxxxxxxxxxx
Hi All!

Is it possible to grant ordinary user permission to read (not edit)
security
policy on specified object (local, domain, OU)?

Thanks
Ilya


.



Relevant Pages

  • Re: My Documents redirect stopped working on one user profile.
    ... So I'm guessing that My Documents redirection Group Policy is not getting ... When something is disabled usually means the some group policy is ... Resultant Set of Policy or run gpresult from cmd. ... There is also a registry setting for folder redirection. ...
    (microsoft.public.windows.server.sbs)
  • Re: At this point, Im wondering if GPOs even work?
    ... what is set in a policy does not bubble up into the user interface. ... Pop-up Blocker" box on one and checked it on the other. ... ensured no GPOs nor local policy were superseding my Test GPO ... Config (so why do these settings even exist in Computer Config if they ...
    (microsoft.public.windows.group_policy)
  • Re: Authentication issue preventing Group Policy from applying to
    ... Linking a GPO to a container other than the one where the ... or the one for the Computer when the policy was for Users ... >>What are the permissions on the GPOs? ... > and the policy is set to apply to Authenticated Users. ...
    (microsoft.public.win2000.active_directory)
  • Re: Manage Vista via group policy on Server 2003 SP1
    ... The key is that in order to manage Vista policy, you need to be on a Vista system while you're editing GPOs. ... wanted to push out a GPO from the domain controller to manage BitLocker ...
    (microsoft.public.windows.group_policy)
  • Re: Unable to access \domainSYSVOL but able to access \serverSYSVO
    ... Long before you fix this issue, you'll need to fix the other issue. ... The permissions are correct on the GPOs. ... When I attempt to edit any GPO, including the Default Domain Policy, I get ... Configuration information could not be read from the domain controller, ...
    (microsoft.public.windows.server.active_directory)