Protocol versions: The Group Policy: Core Protocol provides a versioning capability in the gPCFunctionalityVersion attribute of the Active Directory object class for a Group Policy Object (GPO) specified in section . There is no capability negotiation that is associated with this version. The version itself is a simple integer. There is only one version currently, and if the Group Policy client receives anything other than that version for a GPO, the GPO does not participate in this protocol, as specified in section . Security and authentication methods: The Group Policy: Core Protocol supports the following authentication methods: NT LAN Manager protocol (NTLM) and Kerberos. The authentication method in use is negotiated using the mechanisms specified in . Vendor-Extensible Fields The Group Policy: Core Protocol allows vendors to define Group Policy extensions to the protocol. These Group Policy extensions enable vendors to store vendor-specific data in a GPO on the Group Policy server. For the Group Policy client to access that data, it must be able to identify a system component that can retrieve and interpret that data. To facilitate this, the GPO Active Directory object schema has two attributes, gPCMachineExtensionNames and gPCUserExtensionNames, in which a vendor can append both a CSE GUID (as specified in section 2.3.4.3) that identifies that GPO as having that vendor's particular extra Group Policy extension data stored inside it, and a tool extension GUID that allows the vendor to associate an administrative tool that can update the data. The vendor obtains the of the CSE GUID and the tool extension GUID by generating them according to the standard algorithm, as specified in . After they are generated, the vendor SHOULD include the GUID in these attributes, as specified in section . Vendors do not need to collaborate or obtain GUIDs from a central authority; the GUID generation algorithm ensures that no two vendors make use of the same GUID. Vendors MAY specify a NULL GUID for the tool extension GUID. Each CSE GUID and tool extension GUID defined by a vendor MUST be treated as a standards assignment to the gPCMachineExtensionNames and gPCUserExtensionNames attributes that MUST be declared in the Group Policy extension documentation that is associated with the CSE GUID and tool extension GUID. Standards Assignments There are no standards assignments for the Group Policy: Core Protocol.
Index A Abstract data model administrative tool 55 group policy 55 55 54 37 39 cache 41 41 40 configured computer 39 39 40 user 40 40 37 40 39 41 38 39 GPO 38 37 40 39 41 39 37 policy application 39 37 target 39 41 41 policy target 41 SOM 39 38 40 35 Administrative tool abstract data model 55 group policy 55 55 54 higher-layer triggered events group policy 56 57 57 56 56 57 55 63 message processing GPO 58 60 59 59 link 62 62 59 organizational unit 63 63 60 sequencing rules GPO 58 60 59 59 link 62 62 59 organizational unit 63 63 60 63 55 17 C 18 80 Client 37 39 cache 41 41 40 configured computer 39 39 40 user 40 40
37 40 39 41 38 39 GPO 38 37 40 39 41 39 37 policy application 39 37 target 39 41 41 policy target 41 SOM 39 38 40 42 42 42 42 54 message processing 53 43 sequencing rules 53 43 54 41 14 D Data model - abstract administrative tool 55 group policy 55 55 54 37 39 cache 41 41 40 configured computer 39 39 40 user 40 40 37 40 39 41 38 39 GPO 38 37 40 39 41 39 37 policy application 39 37 target 39 41 41 policy target 41 SOM 39 38 40 35 33 20 Domain SOM 64 64 search 21 64 21 E 33 Examples domain SOM 64 64 64 GPO 69 71 71 read administration 69 69 search 67 66 67 72 64
site search configurationNamingContext 66 65 65 66 72 WMI filter search 68 68 F 18 G 7 GPO creation 28 69 extension update 31 71 23 property update 31 71 read administration 27 69 69 15 search 67 66 67 28 27 23 28 72 Group policy 16 15 H Higher-layer triggered events administrative tool group policy 56 57 57 56 56 57 42 42 42 36 I 73 73 13 Initialization 55 42 36 7 L 27 Local events 63 54 36 M Message processing administrative tool GPO 58 60 59 59 link 62 62 59 organizational unit 63 63 60 client 53 43 36 Messages 20 21 GPO 28 32 31 31 27 23 28 27 23 28