Is there a way to allow a non-administrator to "read" (as in browse and look at the settings) of domain gpo's?

I see in GPMC there is an option to allow delegation of "Read Group Policy Results data" but I'm not solid on whether that will provide the type of access requested. Any input would be appreciated.


1 Answer 1


I've check gpo read permissions. I'm use gpmc.msc tool for grant permission. There is a Delegation tab under the each GP object. I think that is the place, where you need to grant permissions.

But by default Authenticated users has read access for all GP objects, i.e. all users in whole AD forest and trusted domains have read access.

  • Thanks. The latter part of your answer is what is what I was looking for. I looked at the delegation option but decided that for this purpose it wasn't a good fit.
    – Mitch
    Mar 4, 2010 at 14:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.