GPMPermissionType enumeration

GPMPermissionType defines the categories, permissions included in the categories, and the object to which they can be applied.

Syntax


typedef enum  { 
  permGPOApply                  = 0x00010000,
  permGPORead                   = 0x00010100,
  permGPOEdit                   = 0x00010101,
  permGPOEditSecurityAndDelete  = 0x00010102,
  permGPOCustom                 = 0x00010103,
  permWMIFilterEdit             = 0x00020000,
  permWMIFilterFullControl      = 0x00020001,
  permWMIFilterCustom           = 0x00020002,
  permSOMLink                   = 0x001C0000,
  permSOMLogging                = 0x00180100,
  permSOMPlanning               = 0x00180200,
  permSOMWMICreate              = 0x00100300,
  permSOMWMIFullControl         = 0x00100301,
  permSOMGPOCreate              = 0x00100400,
  permStarterGPORead            = 0x00030500,
  permStarterGPOEdit            = 0x00030501,
  permStarterGPOFullControl     = 0x00030502,
  permStarterGPOCustom          = 0x00030503,
  permSOMStarterGPOCreate       = 0x00100500
} GPMPermissionType;

Constants

permGPOApply

The trustee can apply the GPO; corresponds to the READ and APPLY Group Policy access rights being set to "Allow" for a user.

permGPORead

The trustee can read the GPO; corresponds to the READ Group Policy access right set to "Allow" for a user.

permGPOEdit

The trustee can read and edit the policy settings for the GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user.

permGPOEditSecurityAndDelete

The trustee can read, edit and delete the permissions for the GPO; corresponds to the Group Policy access rights specified by permGPOEdit plus the DELETE, MODIFY PERMISSIONS, and MODIFY OWNER access rights set to "Allow" for a user.

permGPOCustom

The trustee has custom permissions for the GPO.

permWMIFilterEdit

The trustee can edit the WMI filter.

permWMIFilterFullControl

The trustee has full control over the WMI filter.

permWMIFilterCustom

The trustee has custom permissions for the WMI filter.

permSOMLink

he trustee can link GPOs to the SOM. Applies to sites, domains and OUs.

permSOMLogging

The trustee can generate RSoP logging data for the SOM. Applies to domains and OUs.

permSOMPlanning

The trustee can generate RSoP planning data for the SOM. Applies to domains and OUs.

permSOMWMICreate

The trustee can create WMI filters in the domain. Applies to domains only.

permSOMWMIFullControl

The trustee has full control over all WMI filters in the domain. Applies to domains only.

permSOMGPOCreate

The trustee can create GPOs in the domain. Applies to domains only.

permStarterGPORead

The trustee can read the Starter GPO; corresponds to the READ Group Policy access right set to "Allow" for a user.

permStarterGPOEdit

The trustee can read and edit the administrative template policy settings for the Starter GPO; corresponds to the READ, WRITE, CREATE CHILD OBJECT, and DELETE CHILD OBJECT Group Policy access rights set to "Allow" for a user.

permStarterGPOFullControl

The trustee has full control for the Starter GPO. Applies to domains only.

permStarterGPOCustom

The trustee has custom permissions for the Starter GPO.

permSOMStarterGPOCreate

The trustee can create Starter GPOs in the domain. Applies to domains only.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2008

Header

Gpmgmt.h

IDL

Gpmgmt.idl

 

 

Show: