Delegate "Read" Ability to GPO's

Question

Is there a way to allow a non-administrator to "read" (as in browse and look at the settings) of domain gpo's?

I see in GPMC there is an option to allow delegation of "Read Group Policy Results data" but I'm not solid on whether that will provide the type of access requested. Any input would be appreciated.

Thanks!

Solution

I've check gpo read permissions. I'm use gpmc.msc tool for grant permission. There is a Delegation tab under the each GP object. I think that is the place, where you need to grant permissions.

But by default Authenticated users has read access for all GP objects, i.e. all users in whole AD forest and trusted domains have read access.

Comments

[Mitch]

Thanks. The latter part of your answer is what is what I was looking for. I looked at the delegation option but decided that for this purpose it wasn't a good fit.