E.1 GP Repository Task Specifics
The following table lists these tasks and indicates at what levels in the GP Repository you can set permissions for each task.
|
Number |
Task |
GP Repository |
Domain |
Category |
GPO |
Notes |
|---|---|---|---|---|---|---|
|
1 |
Full Control |
|
|
|
|
Sets permissions for all tasks at all levels |
|
2 |
Full GP Repository Server Control |
|
|
|
|
Sets permissions for tasks 3‑5 |
|
3 |
Add GP Repository User |
|
|
|
|
|
|
4 |
Add Remote User |
|
|
|
|
|
|
5 |
Customize Deployment Options |
|
|
|
|
|
|
6 |
Full Domain Control |
|
|
|
|
Sets all domain‑level permissions for tasks 8, 9, 10, 12, and 14 |
|
7 |
Create New Domain |
|
|
|
|
|
|
8 |
Delete Domain |
|
|
|
|
|
|
9 |
Migrate GPO |
|
|
|
|
|
|
10 |
Import GPO from Active Directory |
|
|
|
|
|
|
11 |
Synchronize ADMX from the Central Store |
|
|
|
|
This task is directly associated with the Import GPO from Active Directory task at the GP Repository and domain levels. You cannot set permissions for this task directly. When you enable the Import GPO from Active Directory task, you also set permissions for this task. |
|
12 |
Export GPO to Active Directory |
|
|
|
|
|
|
13 |
Export ADMX to the Central Store |
|
|
|
|
This task is directly associated with the Export GPO to Active Directory and Modify Export Status tasks at the GP Repository and domain levels. You cannot set permissions for this task directly. When you enable the Export GPO to Active Directory and Modify Export Status tasks, you also set permissions for this task. |
|
14 |
Edit Domain Maps |
|
|
|
|
|
|
15 |
Full Category Control |
|
|
|
|
Sets all category‑level permissions for tasks 16‑19 |
|
16 |
Create Category |
|
|
|
|
|
|
17 |
Delete Category |
|
|
|
|
|
|
18 |
Paste GPO Category Link |
|
|
|
|
|
|
19 |
Rename Category |
|
|
|
|
|
|
20 |
Full GPO Control |
|
|
|
|
Sets all permissions below this level. |
|
21 |
Create GPO |
|
|
|
|
|
|
22 |
Add ADMX |
|
|
|
|
This task is directly associated with the Create GPO task at the GP Repository and domain levels. You cannot set permissions for this task directly. When you enable the Create GPO task, you also set permissions for this task. |
|
23 |
Modify GPO |
|
|
|
|
Sets permissions for tasks 24‑27 |
|
24 |
Modify GPO Settings |
|
|
|
|
|
|
25 |
Modify GPO Links |
|
|
|
|
|
|
26 |
Modify GPO Security |
|
|
|
|
|
|
27 |
Rename GPO |
|
|
|
|
|
|
28 |
Delete GPO |
|
|
|
|
|
|
29 |
Remove ADMX |
|
|
|
|
This task is directly associated with the Delete GPO task at the GP Repository and domain levels. You cannot set permissions for this task directly. When you enable the Delete GPO task, you also set permissions for this task. |
|
30 |
Check Out GPO |
|
|
|
|
|
|
31 |
Override Check Out |
|
|
|
|
|
|
32 |
Rollback |
|
|
|
|
|
|
33 |
Approve/Reject/Unapprove GPO |
|
|
|
|
|
|
34 |
Approve/Unapprove ADMX Files |
|
|
|
|
This task is directly associated with the Approve/Unapprove GPO task at the GP Repository and domain levels. You cannot set permissions for this task directly. When you enable the Approve/Unapprove GPO task, you also set permissions for this task. |
|
35 |
Modify Export Status |
|
|
|
|
|
|
36 |
Modify GPO Security Filters |
|
|
|
|
|
|
37 |
Modify GPO Enterprise Sync |
|
|
|
|
Enables user to designate master and controlled GPOs |
|
38 |
GPO Synchronizer |
|
|
|
|
Enables user to modify GPOs using Enterprise Synchronization |