How to remove Group policy permission with Powershell

Question

_{Friday, March 10, 2017 5:00 AM}

Just like set-gppermisions and get-gppermissions is there a command for removing permission of user on Group policy object 

something like remove-ggpermission? If not then how to remove group policy permission via powershell?

Thanks,

Aatif Kungle

All replies (4)

_{Tuesday, March 27, 2018 11:23 AM ✅Answered | 2 votes}

Set-GPPermission -Replace -PermissionLevel None -TargetName "Contoso\Some_group" -TargetType Group

Magic is setting permissionlevel to none with replace. This will delete permissions. It will remove group completely ie you don't see it in delegation tab on GPO Management.

.Marko

_{Friday, March 10, 2017 9:09 AM}

Easiest way to find out if there is such command:

PS P:\ get-help gppermission

Name                              Category  Module                    Synopsis
                                                   
Get-GPPermission                  Cmdlet    GroupPolicy               Gets the permission level for one or more secu...
Set-GPPermission                  Cmdlet    GroupPolicy               Grants a level of permissions to a security pr...

_{Monday, April 10, 2017 5:30 AM}

Hi,

Besides of other's suggestion, you could also try:

Icacls

https://technet.microsoft.com/en-us/library/cc753525(v=ws.11).aspx

Best regards,

Andy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, January 25, 2019 12:53 AM}

Thank you sir, trying to figure out how to do to all the constructors was a headache. You are awesome!