Any repository user can edit Disable Computer Configuration Settings and Disable User Configuration (NETIQKB51000)

fact
NetIQ Group Policy Administrator 4.6

symptom
Any repository user can edit Disable Computer Configuration Settings and Disable User Configuration Settings on a checked-out GPO.

symptom
A user without permissions to a category can modify Disable Computer Configuration Settings and Disable User Configuration Settings on a checked-out GPO in that category.

cause
This is a known issue.

fix

This issue is resolved in NetIQ Group Policy Administrator (GPA) version 5.0. To fix the issue in your environment, install GPA version 5.0.

For information about GPA version 5.0, see https://www.netiq.com/support/gpa/.

Formerly known as NETIQKB51000