Limit access of a certain users to edit modify a specific GPO

Yes - by default, non-privileged users do not have permissions to edit domain-based GPOs. To delegate this permission, modify the Delegation settings on the specific Group Policy Object (GPO). Here’s how you can do it in Traditional Active Directory (on-premises):

1. Open the Group Policy Management Console (GPMC):
   • Run gpmc.msc on a domain-joined machine.
2. Locate the GPO:
   • Navigate to Forest → Domains → YourDomain → Group Policy Objects.
   • Right-click the GPO you want to manage and select Edit or Delegation depending on the step.
3. Modify Delegation Settings:
   • Go to the Delegation tab of the GPO.
   • Here, you can Add a user or group and assign them specific permissions such as:
   • Read – Can view the GPO.
   • Edit settings – Can modify the GPO.
   • Delete – Can delete the GPO.
   • Modify Security – Can change GPO permissions.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin