Guide: Modifying Permissions on a GPO

This guide explains how to modify the permissions of a Group Policy Object (GPO) for groups or users in Active Directory. You will learn how to assign different permission levels, verify permissions, and apply permissions based on specific criteria.

Prerequisites

To run these commands, make sure you have administrator rights in Active Directory and that you are running PowerShell as an administrator.

1. Grant a group read-only access to a GPO: Set-GPPermission -Name test -TargetName "GroupeTest1" -TargetType Group -PermissionLevel GpoRead

Set-GPPermission -Name test -TargetName "GroupeTest1" -TargetType Group -PermissionLevel GpoRead

This command gives the group named GroupeTest1 read-only permissions on the test GPO. The GpoRead permission level allows group members to view the GPO without being able to modify it.

• Parameters:
  • -Name: name of the GPO.
  • -TargetName: name of the target (here, the GroupeTest1 group).
  • -TargetType: type of the target (here, Group).
  • -PermissionLevel: permission level, here GpoRead for read-only access.