As an Editor, you may not have permission to complete the deletion of a Group Policy object (GPO), but you do have the permission necessary to begin the process and submit your request to an Approver.
A user account with the Editor role or necessary permissions in Advanced Group Policy Management is required to complete this procedure. Review the details in "Additional considerations" in this topic.
To request the deletion of a controlled GPO |
-
In the Group Policy Management Console tree, click Change Control in the forest and domain in which you want to manage GPOs.
-
On the Contents tab, click the Controlled tab to display the controlled GPOs.
-
Right-click the GPO to delete, and then click Delete.
- To delete the GPO from the archive while leaving the deployed
version of the GPO untouched in the production environment, click
Delete GPO from archive only (uncontrol).
- To delete the GPO from both the archive and production
environment, click Delete GPO from archive and
production.
Unless you have special permission to delete GPOs, you must submit a request for deletion of the deployed GPO. To receive a copy of the request, type your e-mail address in the Cc field. Type a comment to be displayed in the audit trail for the GPO, and then click Submit.
- To delete the GPO from the archive while leaving the deployed
version of the GPO untouched in the production environment, click
Delete GPO from archive only (uncontrol).
-
When the Progress window indicates that overall progress is complete, click Close. The GPO is displayed on the list of GPOs on the Pending tab. When an Approver has approved your request, the GPO will be moved from the Pending tab to the Recycle Bin tab, where it can be restored or destroyed.
Additional considerations
- By default, you must be an Editor to request the deletion of a
deployed GPO. Specifically, you must have List Contents and
Edit Settings permissions for the GPO.
- By default, you must be an Editor, an Approver, or an AGPM
Administrator (Full Control) to delete a GPO from the archive.
Specifically, you must have List Contents and either Edit
Settings or Delete GPO permissions for the GPO.
- To withdraw your request before it has been approved, click the
Pending tab. Right-click the GPO, and then click
Withdraw. The GPO will be returned to the Controlled
tab.
- To delete an uncontrolled GPO from the production environment
without first controlling it, in the Group Policy Management
Console, click Forest, click Domains, click
<MyDomain>, and then click Group Policy
Objects. Right-click the uncontrolled GPO, and then click
Delete.