Working with Group Policy permissions

System administrators often need to work with Group Policy permissions. Sometimes, we modify Group Policy permissions to deploy the GPO settings to new users/computers/groups. Similarly, we modify permissions to allow other teams to manage the Group Policy. These operations are easy if you are granting permissions to one or two users on a single GPO; however, as the volume increases, it is difficult to perform this manually and automation makes things easy in this case.

The Group Policy module has two cmdlets that can ease Group Policy permission management. They are as follows:

• Get-GPPermission: This is used to query the permissions that are set on a GPO

• Set-GPPermission: This is used to apply a new set of permissions or modify existing permissions on a GPO

  Note

  If you are trying to query GPO permissions from a Windows Server 2008 or later, use the Get-GPPermissions and Set-GPPermissions cmdlets. Notice the additional 's' at the end of these cmdlets. In...