Response Feedback: For users to receive GPO settings, they must have Allow Read and Allow Apply Group Policy permissions to the GPO. Question 2 1 out of 1 points Which utility do you use to set up loopback policies?
So yes, if you want someone to create GPOs, either put them in the GP Creator Owners group, or delegate the permission to create and link GPOs to another group of your choosing. Set-GPPermission does not really concern you.
Instead of granting direct access to the user, think about creating a dedicated GPO editing group for each GPO. This would enable you to grant access to different users by only adding each user to a specific security group. You would have to touch the GPO ACL just one time.
By default, only Domain Administrators, Enterprise Administrators, Group Policy Creator Owners, and SYSTEM can create new Group Policy objects. If the domain administrator wants a non-administrator or non-administrative group to be able to create GPOs, that user or group can be added to the Group Policy Creator Owners security group.
Hello, I am looking for a way to allow a user (standard domain user account) to have the ability to edit exisiting group policies. The only way I can see is to change permissions on each individual policy to allow the user to modify the GPO.
the only solution is to extendn the permissions of each GPO you want to give the user access.