If a user that has been granted access to a subcontainer in Version control root, eg
Editor rights to Version Control Root\Customer\users\GPOs.
In GPOadmin they will be able to browse to the folder GPOs and create a GPO etc.
However if they Do the same via the GPOAdmin GMPC Snapin, they will get a Message "Access Denied" when trying to create a GPO
This is a limitation of the GPMC Extension.
As it does not display the container hierarchy, objects can only be created in Version Control Root container.