Revision Summary Date Revision History Revision Class Comments 2/22/2007 0.01 New Version 0.01 release 6/1/2007 1.0 Major Updated and revised the technical content. 7/3/2007 1.0.1 Editorial Changed language and formatting in the technical content. 7/20/2007 2.0 Major Updated and revised the technical content. 8/10/2007 3.0 Updated and revised the technical content. 9/28/2007 4.0 Major Updated and revised the technical content. 10/23/2007 5.0 Major Updated and revised the technical content. 11/30/2007 5.1 Minor Clarified the meaning of the technical content. 1/25/2008 5.1.1 Editorial Changed language and formatting in the technical content. 3/14/2008 5.1.2 Editorial Changed language and
4/10/2009 9.0.3 Editorial Changed language and formatting in the technical content. 5/22/2009 10.0 Major Updated and revised the technical content. 7/2/2009 11.0 Major Updated and revised the technical content. 8/14/2009 12.0 Major Updated and revised the technical content. 9/25/2009 12.1 Minor Clarified the meaning of the technical content. 11/6/2009 13.0 Major Updated and revised the technical content. 12/18/2009 13.1 Clarified the meaning of the technical content. 1/29/2010 14.0 Updated and revised the technical content. 3/12/2010 15.0 Major Updated and revised the technical content. 4/23/2010 16.0 Major Updated and revised the technical content.
6/4/2010 17.0 Updated and revised the technical content. 7/16/2010 18.0 Major Updated and revised the technical content. 8/27/2010 19.0 Major Updated and revised the technical content. 10/8/2010 20.0 Updated and revised the technical content. 11/19/2010 21.0 Updated and revised the technical content. 1/7/2011 22.0 Major Updated and revised the technical content. 2/11/2011 23.0 Major Updated and revised the technical content. 3/25/2011 24.0 Major Updated and revised the technical content. 5/6/2011 25.0 Major Updated and revised the technical content. 6/17/2011 25.1 Minor Clarified the meaning of the technical content. 9/23/2011 26.0 Updated and revised
the technical content. 12/16/2011 27.0 Major Updated and revised the technical content. 3/30/2012 27.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 28.0 Major Updated and revised the technical content. 10/25/2012 29.0 Major Updated and revised the technical content. 1/31/2013 29.0 None No changes to the meaning, language, or formatting of the technical content. 8/8/2013 30.0 Major Updated and revised the technical content. 11/14/2013 31.0 Major Updated and revised the technical content. 2/13/2014 31.0 None No changes to the meaning, language, or formatting of the
technical content. 5/15/2014 31.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 32.0 Major Significantly changed the technical content. 10/16/2015 32.0 None No changes to the meaning, language, or formatting of the technical content. 7/14/2016 33.0 Significantly changed the technical content. 6/1/2017 34.0 Major Significantly changed the technical content. 9/15/2017 35.0 Major Significantly changed the technical content. 12/1/2017 35.0 None No changes to the meaning, language, or formatting of the technical content.
A user subcontainer has the following parameters: Parameter Value MUST be the value "cn=user,<GPO DN>". attributes MUST contain two attributes: objectClass and cn. A user subcontainer attributes parameter has the following format: Attribute name Value Meaning objectClass MUST be the directory string value "container". Name of the class type to create through this message. cn MUST be the directory string value "user". Name of the subcontainer. GPO Machine Subcontainer AddRequest A machine subcontainer has the following parameters: Parameter MUST be the "cn=machine,<GPO DN>". attributes MUST contain two attributes: objectClass and cn. A machine subcontainer attributes parameter has the following format: Attribute name Value Meaning objectClass MUST be the directory string "container". Name of the class type to create through this message. cn MUST be the directory string value "machine". Name of the subcontainer. GPO Security Descriptor SearchRequest
entry or GPO subcontainer DN Organizational Unit Creation Message The creation of an Organizational Unit MUST be accomplished through an LDAP addRequest message with the following parameters. The result of addRequest is an addResponse message in reply, as defined in section 4.7. The resultCode field value determines a failure or success for the message. Parameter Value ou={name of OU being created},ou={name of any existing OU},...,<DN of domain naming context> attributes objectClass=organizationalUnit Organizational Unit Deletion Message The deletion of an organizational unit (ou) MUST be accomplished through an LDAP delRequest message with the following parameter. The result of delRequest is a delResponse message in as defined in section 4.8. The resultCode field value determines a failure or success for the message. Parameter Value entry ou={name of OU deleted},ou={name of any existing OU},...,<DN of domain naming context> Directory Service Schema Elements The Group Policy: Core Protocol accesses the following Directory Service schema classes and attributes listed in the following table. For the syntactic specifications of the following <Class> or <Class> <Attribute> pairs, refer to: , , , and . Class Attribute domain gPLink gPOptions groupPolicyContainer displayName flags gPCFileSysPath
Index A Abstract data model administrative tool 54 group policy 54 54 53 36 38 cache 40 40 39 configured computer 38 38 39 user 39 39 36 39 38 40 37 38 GPO 37 36 39 38 40 38 36 policy application 38 36 target 38 40 40 policy target 40 SOM 38 37 39 34 Administrative tool abstract data model 54 group policy 54 54 53 triggered events policy 55 56 56 55 55 56 54 62 message processing GPO 57 59 58 58 link 61 61 58 organizational unit 62 62 59 sequencing GPO 57 59 58 58 link 61 61 58 organizational unit 62 62 59 62 54 17 C 18 77 Client 36 38 cache 40 40 39 configured computer 38 38 39 user 39 39 36 39 38 40
67 67 F 18 G 7 GPO creation 28 68 32 extension update 31 70 23 property update 31 70 read administration 27 68 68 15 search 66 65 66 28 27 23 28 71 Group policy 16 15 H Higher-layer triggered events administrative tool group policy 55 56 56 55 55 56 41 41 41 35 I 72 72 13 Initialization 54 41 35 7 L 27 events 62 53 35 M Message processing administrative tool GPO 57 59 58 58 link 61 61 58 organizational unit 62 62 59 client 52 42 35 Messages 20 21 GPO 28 32 31 31 27 23 28 27 23 28 27 organizational unit 32 32 22 32 19 19 26 14 N 12 O 14 Organizational unit 32
32 Other local events 35 Overview 14 14 policy 16 application 15 15 group policy 16 15 15 14 14 14 P 72 Policy 16 application 15 group policy 16 15 15 15 14 17 17 73 Protocol Details 34 R 12 13 12 16 S 33 Security 72 72 Sequencing rules administrative tool GPO 57 59 58 58 link 61 61 58 organizational unit 62 62 59 client 52 42 35 Server 34 15 35 35 35 35 35 35 35 35 Site search configurationNamingContext 65 64 22 64 65 22 SOM property update 32 71 18 19 T Timer events 62 53 35 Timers 54 40 35 77 19 19 Triggered events - higher-layer administrative tool group policy 55 56 56 55 55 56 41 41 41 35 U 14 V 18 18