Home

General GP Concepts
.. GPMC
.. Create/Edit GPOs
.. Targeting GPOs
.. Applying GPOs
.. Developer Issues

Extensions
.. Admin Templates
.... Windows Firewall
.... Internet Explorer
.. Security Policy
.. Software Installation
.. IE Maintenance
.. Scripts

Policy Exceptions
.. Loopback
.. Enforce/Block
.. Slow Links
.. WMI Filters

Reference
.. Third Party Products
.. KB Articles
.. Community

Terms of Use
Trademarks
Privacy Statement

Group Policy Object (GPO): The container into which policy settings are placed. Each GPO can contain one or more policy settings. The GPO is then scoped to apply to specific accounts (see "Scope")

Group Policy Results: A feature of GPMC that presents RSoP data in either HTML or XML format. The GPMC MMC snap-in communicates directly with a specified machine to retrieve RSoP data for the desired user and presents this information in a manner that is unified with the GPMC interface. Group Policy Results can be collected from either Windows XP Professional or Windows Server 2003 machines (Windows 2000 does not support the RSoP infrastructure)

GPO Link. A parameter of an Active Directory container (site, domain or OU) that refers to a GPO. A GPO link from such an object to a GPO means that - by default - all accounts associated with the container (for example, all users in an OU) are effected by the GPO (unless other features of Group Policy such as security filtering or WMI filters override this).

GPO: See "Group Policy Object"

Loopback: A mechanism for configuring user policy based on the computer account. A common use of this is with Terminal Servers, where the user policy must be defined for all users of the server. Replace mode ensures that the effective user policy is defined completely by the GPOs associated with the computer account. By comparison, Merge mode ensures that the user policy is derived from both the computers GPOs and those of the user (with the computer GPOs taking priority).

Policy Setting: A single "configuration element" to be applied to a machine or user. Policy settings are stored in GPOs, which are then scoped to the required accounts.

Resultant Set of Policy (RsoP): Data stored in the WMI repository in Windows XP Professional or Windows Server 2003 machines that represents the actual policy settings applied, after the relevant Group Policy targeting, filtering and precedence rules have been implemented.

Security Filtering: A mechanism to restrict the application of GPOs to only those accounts (machine or users) that reside in specified Active Directory security groups. By default, GPOs are targeted at the Authenticated Users security group, which is essentially all accounts. By removing this group (via GPMC) and specifying a different security group, a more limited application of the GPO can be enforced.

Scope: The accounts to which a GPO should be applied. Three factors define the scope - links, security filtering and WMI filters.

WMI Filters: A client-side evaluation of a WMI query that is used to determine whether a GPO should be applied. If the MWI filter returns results, the GPO is applied, otherwise it is not. WMI Filters are ignored (the GPO is always applied) on Windows 2000 but evaluated on Windows XP and Windows Server 2003.

Comments:

From wallets and bag [220.70.73.61] - 8/19/06 4:59 PM