Hello,

We have 5 departments in our single domain forest and some departments do not want other departments to see their Group Policies, which makes delegation complicated. Is it possible to create sub OUs under the System\Policies folder and assign permission to departmental admins to their folder and deny them read to the other folders? Central IT would control linking of policies.

If anyone knows another way to allow departments to see only their own GPOs or a useful 3rd party tool, I'd love to know.

Thanks,

Robert

Hello,

We have 5 departments in our single domain forest and some departments do not want other departments to see their Group Policies, which makes delegation complicated. Is it possible to create sub OUs under the System\Policies folder and assign permission to departmental admins to their folder and deny them read to the other folders? Central IT would control linking of policies.

If anyone knows another way to allow departments to see only their own GPOs or a useful 3rd party tool, I'd love to know.

Thanks,

Robert

seems no... 

why you want to do this? Didnt find others configure as this may ask in gp forum

https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP

Best,

Howtodo

• Edited by How to do 4 hours 15 minutes ago
• Proposed as answer by RobertT76 4 hours 5 minutes ago