Revision Summary Date Revision History Revision Class Comments 9/23/2011 1.0 New Released new document. 12/16/2011 1.0 None No changes to the meaning, language, or formatting of the technical content. 3/30/2012 2.0 Updated and revised the technical content. 7/12/2012 2.0 None No changes to the meaning, language, or formatting of the technical content. 10/25/2012 2.0 None No changes to the meaning, language, or formatting of the technical content. 1/31/2013 2.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 3.0 Major Updated and revised the technical content. 11/14/2013 4.0 Major Updated and revised the
Initial System State Prior to the application of Group Policy, the Group Policy protocols are actively listening for the specific events that will trigger policy application on computers in a domain. System State The of the Group Policy protocols and components after execution of this example can be described as follows: The Group Policy client retrieved the appropriate policies from the Group Policy protocols, and they were applied on the client. Sequence of Events The following diagram illustrates the message sequence that occurs in response to events that trigger policy application. The diagram also indicates when Policy computer startup, computer shutdown, user logon, and user logoff scripts are run. Figure 11: Group Policy processing internal architecture The following table provides document references for the messages in the preceding figure. Group Policy messages and document references Protocol message Document name Section Computer Core Policy Application [MS-GPOL]: Policy: Core Protocol Specification 1.3.3, Policy Application Computer CSE Policy Application [MS-GPOL]: Policy: Core Protocol Specification 3.2.5.1.10, Extension Protocol Sequences Computer Startup Scripts : Group Policy Scripts Extension: Protocol Specification 3.2.5, Message Processing Events and Sequencing User Core Policy Application [MS-GPOL]: Group Policy: Core Protocol Specification 1.3.3, Policy Application User CSE Policy Application [MS-GPOL]: Group Policy: Core Protocol Specification 3.2.5.1.10, Extension Protocol Sequences
User Logon Scripts Group Policy Scripts Extension: Protocol Specification 3.2.5, Message Processing Events and Sequencing Rules Periodic Computer Core Policy Application [MS-GPOL]: Group Policy: Core Protocol Specification 1.3.3, Policy Application Periodic Computer CSE Policy Application [MS-GPOL]: Group Policy: Core Protocol Specification 3.2.5.1.10, Extension Protocol Sequences Periodic User Policy Core Application [MS-GPOL]: Policy: Core Protocol Specification 1.3.3, Policy Application Periodic User CSE Policy Application [MS-GPOL]: Group Policy: Core Protocol Specification 3.2.5.1.10, Extension Protocol Sequences User Logoff Scripts Group Policy Scripts Extension: Protocol Specification 3.2.5, Message Processing Events and Sequencing Computer Shutdown Scripts Group Policy Scripts Extension: Protocol Specification 3.2.5, Message Processing Events and Sequencing Rules Example 2: Applying Policy on the Group Policy Client The Policy client's interaction with the Group Policy server in policy application uses a pull model, in which the Group Policy client polls a Group Policy server to check for new user GPOs. When the Policy client discovers the Group Policy server, the client performs two sets of queries to Active Directory on the Group Policy server using LDAP as a transport. The first set of queries determines which GPOs have been assigned.
Protocol syntax refers to data elements (such as packets, structures, enumerations, and methods) as well as interfaces. Protocol revision refers to changes made to a protocol that affect the bits that are sent over the wire. The changes made to this document are listed in the following For more information, please contact . Section Tracking number (if applicable) and description Major change (Y or N) Change type Protocol Summary Removed [MS-GPIE] and and added Y Content update. Dependencies on Group Policy Protocols Removed reference to Network Access Protection. Y Content update. Example 2: Applying Policy on the Group Policy Client Specifed in 7 and 8 that the messages are encrypted. Y Content update.
Index A 63 Administering group policy — administrative tool 57 44 Applying policy — group policy client 55 Architecture 53 49 58 24 security ( 61, 63) 44 53 53 C 58 84 Coherency requirements 61 60 60 49 5 Considerations 63 61 D 53 57 55 53 54 E 49 58 64 Extensibility Microsoft implementations ( 64, 82) 58 F Functional architecture 53 49 58 24 security ( 61, 63) 44 53 24 G 17 H 58 I Implementations - Microsoft ( 64, 82) 61 22 53 61 5 M Microsoft implementations ( 64, 82) N 60 O Overview 44 24 5 P 53 82 R 22 61 Requirements coherency 61 60 60 58 24 53 S Security considerations ( 61, 63) 49 58 44 24 System use 57 55