Edit

IGPMPermission interface (gpmgmt.h)

  • Article

The IGPMPermission interface contains methods to retrieve permission-related properties when using the GPMC. The GPMPermission object represents the pairing of a trustee (such as a user or security group) and a policy-related permission that applies to a single object; for example, to a GPO or a WMI filter. To create a GPMPermission object, call the IGPM::CreatePermission method.

Inheritance

The IGPMPermission interface inherits from the IDispatch interface.

Remarks

The interface divides the policy-related permissions into categories. The following table lists the categories, permissions included in the categories, and the object to which they can be applied, as defined in the GPMPermissionType.

Securable object Permission category Permission level
Site GPO linking permSOMLink
OU GPO linking permSOMLink
RSoP logging permSOMLogging
RSoP planning permSOMPlanning
Domain GPO linking permSOMLink
Creating GPOs permSOMGPOCreate
RSoP logging permSOMLogging
RSoP planning permSOMPlanning
Creating WMI filters permSOMWMICreate
permSOMWMIFullControl
WMI filter Editing WMI filters permWMIFilterEdit
Full control of all WMI filters permWMIFilterFullControl
Custom control of WMI filters permWMIFilterCustom
GPO Security filtering permGPOApply
Delegation permGPORead
permGPOEdit
permGPOEditSecurityAndDelete
permGPOCustom
Starter GPO Delegation permStarterGPORead
permStarterGPOEdit
permStarterGPOFullControl
permStarterGPOCustom
permSOMStarterGPOCreate
 

For more information about predefined policy-related permissions, see IGPM::CreatePermission (GPM.CreatePermission).

For more information about security groups, see How Security Groups are Used in Access Control in the Active Directory Programmer's Guide.

Requirements

Requirement Value
Minimum supported client Windows Vista
Minimum supported server Windows Server 2008
Target Platform Windows
Header gpmgmt.h

See also

IDispatch

IGPM

IGPMSecurityInfo

IGPMTrustee