Edit

GPMPermissionType enumeration (gpmgmt.h)

  • Article

GPMPermissionType defines the categories, permissions included in the categories, and the object to which they can be applied.

Syntax

typedef enum __MIDL___MIDL_itf_gpmgmt_0000_0000_0002 {
  permGPOApply = 0x10000,
  permGPORead = 0x10100,
  permGPOEdit = 0x10101,
  permGPOEditSecurityAndDelete = 0x10102,
  permGPOCustom = 0x10103,
  permWMIFilterEdit = 0x20000,
  permWMIFilterFullControl = 0x20001,
  permWMIFilterCustom = 0x20002,
  permSOMLink = 0x1c0000,
  permSOMLogging = 0x180100,
  permSOMPlanning = 0x180200,
  permSOMWMICreate = 0x100300,
  permSOMWMIFullControl = 0x100301,
  permSOMGPOCreate = 0x100400,
  permStarterGPORead = 0x30500,
  permStarterGPOEdit = 0x30501,
  permStarterGPOFullControl = 0x30502,
  permStarterGPOCustom = 0x30503,
  permSOMStarterGPOCreate = 0x100500
} GPMPermissionType;

Constants

 
permGPOApply
Value: 0x10000
The trustee can apply the GPO; corresponds to the READ and APPLY Group Policy access rights being set to "Allow" for a user.
permGPORead
Value: 0x10100
The trustee can read the GPO; corresponds to the READ Group Policy access right set to "Allow" for a user.
permGPOEdit
Value: 0x10101
The trustee can read and edit the policy settings for the GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user.
permGPOEditSecurityAndDelete
Value: 0x10102
The trustee can read, edit and delete the permissions for the GPO; corresponds to the Group Policy access rights specified by permGPOEdit plus the DELETE, MODIFY PERMISSIONS, and MODIFY OWNER access rights set to "Allow" for a user.
permGPOCustom
Value: 0x10103
The trustee has custom permissions for the GPO.
permWMIFilterEdit
Value: 0x20000
The trustee can edit the WMI filter.
permWMIFilterFullControl
Value: 0x20001
The trustee has full control over the WMI filter.
permWMIFilterCustom
Value: 0x20002
The trustee has custom permissions for the WMI filter.
permSOMLink
Value: 0x1c0000
he trustee can link GPOs to the SOM. Applies to sites, domains and OUs.
permSOMLogging
Value: 0x180100
The trustee can generate RSoP logging data for the SOM. Applies to domains and OUs.
permSOMPlanning
Value: 0x180200
The trustee can generate RSoP planning data for the SOM. Applies to domains and OUs.
permSOMWMICreate
Value: 0x100300
The trustee can create WMI filters in the domain. Applies to domains only.
permSOMWMIFullControl
Value: 0x100301
The trustee has full control over all WMI filters in the domain. Applies to domains only.
permSOMGPOCreate
Value: 0x100400
The trustee can create GPOs in the domain. Applies to domains only.
permStarterGPORead
Value: 0x30500
The trustee can read the Starter GPO; corresponds to the READ Group Policy access right set to "Allow" for a user.
permStarterGPOEdit
Value: 0x30501
The trustee can read and edit the administrative template policy settings for the Starter GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user.
permStarterGPOFullControl
Value: 0x30502
The trustee has full control for the Starter GPO. Applies to domains only.
permStarterGPOCustom
Value: 0x30503
The trustee has custom permissions for the Starter GPO.
permSOMStarterGPOCreate
Value: 0x100500
The trustee can create Starter GPOs in the domain. Applies to domains only.

Requirements

Requirement Value
Minimum supported client Windows Vista
Minimum supported server Windows Server 2008
Header gpmgmt.h