Feature Request / Register GPOs with READ Only Permissions (4377598)

We only want to capture this subset of GPO (i.e. the GPO in the Tier 0 range) and import the changes with "Incorporate Live", but never change or protect them via the GPOAdmin.

We want to use the GPOAdmin to manually check the live GPO with the version recorded in the GPOAdmin or to compare it with other GPOs or with older versions.

We have created an enhancement to consider adding a "Read Only" type of object registration in GPOADmin to allow objects to be registered to maintain history on those objects only.

 The list of criteria for this is outlined below. The enhancement ID to be considered for inclusion in a future version of GPOADmin is 527436

Criteria:

• Ability to register GPOs as read only, using only read only permissions for the GPOADmin service account.
• Ability to use the watcher service to automatically incorporate changes to these GPOs to retain a history of GPO changes.
• Ability to report on the GPOs
• Block any ability to link or edit these GPOs by any account including the service account.
• Block the change of the owner of the GPO from being set to the service account.
• Block any ability to restore the GPOs from the GPO history. History should be for auditing only.