Set permissions for Group Policy Software Installation

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To set permissions for Group Policy Software Installation

  1. Open the Group Policy object that you want to edit.

  2. In the console tree, right-click the icon or name of the Group Policy object, and then click Properties.

  3. Click the Security tab, and in the Group or user names box, click the security group for which you want to set permissions.

  4. Do any of the following:

    • To change the set of security groups that have permissions on this Group Policy object, click Add or Remove to add or remove security groups.

    • If the security group represents administrators (who manage software for users and computers in the organization), in the Permissions box for the selected security group, select the Allow check box for Full Control, and then click OK.

    • If the security group represents users (who use software that is assigned or published by an administrator), in the Permissions box for the selected security group, select the Allow check box for both Apply Group Policy and Read, and then click OK.

Notes

  • To complete this procedure, you must be logged on as a member of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group.

  • To open Group Policy Object Editor, see Related Topics.

  • The permissions that you set in this procedure pertain only to the Group Policy object. In addition, the network must have a shared folder (a software distribution point) containing the packages to be installed. Administrators must have Full Control of the software distribution point, and users must have Read permission. For information about permissions and how to set them, see Related Topics.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Open Group Policy from Active Directory Users and Computers
Open Group Policy from Active Directory Sites and Services
Ways to open Group Policy Object Editor
Edit the local Group Policy object
Access Control