Modify AD rights to restrict GPO’s for ESM

CHG0074655 Modify AD rights to restrict GPO’s for ESM