GPMPermissionType enumeration (gpmgmt.h)
GPMPermissionType defines the categories, permissions included in the categories, and the object to which they can be applied.
Syntax
typedef enum __MIDL___MIDL_itf_gpmgmt_0000_0000_0002 {
permGPOApply = 0x10000,
permGPORead = 0x10100,
permGPOEdit = 0x10101,
permGPOEditSecurityAndDelete = 0x10102,
permGPOCustom = 0x10103,
permWMIFilterEdit = 0x20000,
permWMIFilterFullControl = 0x20001,
permWMIFilterCustom = 0x20002,
permSOMLink = 0x1c0000,
permSOMLogging = 0x180100,
permSOMPlanning = 0x180200,
permSOMWMICreate = 0x100300,
permSOMWMIFullControl = 0x100301,
permSOMGPOCreate = 0x100400,
permStarterGPORead = 0x30500,
permStarterGPOEdit = 0x30501,
permStarterGPOFullControl = 0x30502,
permStarterGPOCustom = 0x30503,
permSOMStarterGPOCreate = 0x100500
} GPMPermissionType;
Constants
permGPOApply Value: 0x10000 The trustee can apply the GPO; corresponds to the READ and APPLY Group Policy access rights being set to "Allow" for a user. |
permGPORead Value: 0x10100 The trustee can read the GPO; corresponds to the READ Group Policy access right set to "Allow" for a user. |
permGPOEdit Value: 0x10101 The trustee can read and edit the policy settings for the GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user. |
permGPOEditSecurityAndDelete Value: 0x10102 The trustee can read, edit and delete the permissions for the GPO; corresponds to the Group Policy access rights specified by permGPOEdit plus the DELETE, MODIFY PERMISSIONS, and MODIFY OWNER access rights set to "Allow" for a user. |
permGPOCustom Value: 0x10103 The trustee has custom permissions for the GPO. |
permWMIFilterEdit Value: 0x20000 The trustee can edit the WMI filter. |
permWMIFilterFullControl Value: 0x20001 The trustee has full control over the WMI filter. |
permWMIFilterCustom Value: 0x20002 The trustee has custom permissions for the WMI filter. |
permSOMLink Value: 0x1c0000 he trustee can link GPOs to the SOM. Applies to sites, domains and OUs. |
permSOMLogging Value: 0x180100 The trustee can generate RSoP logging data for the SOM. Applies to domains and OUs. |
permSOMPlanning Value: 0x180200 The trustee can generate RSoP planning data for the SOM. Applies to domains and OUs. |
permSOMWMICreate Value: 0x100300 The trustee can create WMI filters in the domain. Applies to domains only. |
permSOMWMIFullControl Value: 0x100301 The trustee has full control over all WMI filters in the domain. Applies to domains only. |
permSOMGPOCreate Value: 0x100400 The trustee can create GPOs in the domain. Applies to domains only. |
permStarterGPORead Value: 0x30500 The trustee can read the Starter GPO; corresponds to the READ Group Policy access right set to "Allow" for a user. |
permStarterGPOEdit Value: 0x30501 The trustee can read and edit the administrative template policy settings for the Starter GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user. |
permStarterGPOFullControl Value: 0x30502 The trustee has full control for the Starter GPO. Applies to domains only. |
permStarterGPOCustom Value: 0x30503 The trustee has custom permissions for the Starter GPO. |
permSOMStarterGPOCreate Value: 0x100500 The trustee can create Starter GPOs in the domain. Applies to domains only. |
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows Vista |
Minimum supported server | Windows Server 2008 |
Header | gpmgmt.h |
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for