No Option to Read Group Policy for Admin?

Question

Hi All
Can someone please confirm how to grant Read Access to Group Policy.
This is for existing Admins, who can create new Policies.( I have also added the Read only permission on the Delegation tab).
When we were on Server 2008r2 we could just right click and edit, this would open the policy but values for changes were greyed out....this is what I want to have again.
Since we have updated to Server 2019, the edit option is greyed out?
I need to have read option for certain users and read / writes for specific users, the read/write access works fine.

For the Read Only....the only way to see the details for the policy, is to select the Settings section.

Help appreciated.
Thanks.

Source link:
https://social.technet.microsoft.com/Forums/en-US/a2d262a4-2a53-4073-905b-1cd38d0aada4/no-option-to-read-group-policy-for-admin?forum=winserverGP

Answer 1

Hi,

Even you don't assign read permission to the users directly, they have read and apply permission , since users are in the authenticated user group.And all the authenticated uses have read and apply permissions on the GPOs by default.

If you deny the read permission to the specific users, the users won't be able to read the GPO settings.The group policy management console was as following screenshot showing: