s4 provision: Make GPO folder group writable