Domain Admins could run Group Policy Results Wizard in domain but another user with delegated permission on "Read Group Policy Results Data" couldn't run the wizard for the same clients.The user have full control permission on clients OU (modify permission is necessary) but he encounters "You don't have permission to perform this operation. Access is denied "

enter image description here

Is being Domain Admins or local Administrator necessary for running the wizard?


From this link it appears you need to grant Generate Resultant Set of Policy (Logging) right.

  • The user already has that permission on clients OU.
    – harsini
    Nov 2 '17 at 4:10

I added the user to the client Administrators which he wants to run RSOP wizard on and it worked.So yes it needs to be local admin on clients which you want to remotely run RSOP wizard.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.