3.2.1.4 GPO List

A GPO list is a list of Group Policy Objects that are associated with a specified policy target. The list is ordered by GPO precedence in descending order of priority. The following information MUST be maintained for each GPO:

GPO versions: A 32-bit integer that stores the GPO container version in the lower 16 bits and the GPO file system version in the upper 16 bits. For the user policy application mode of the policy application, the user GPO version part of the GPO container version and the GPO file system version MUST be maintained. For the computer policy application mode of the policy application, the machine GPO version part of the GPO container version and the GPO file system version MUST be maintained.

Scoped GPO DN: A Unicode string of the scoped GPO DN, prefixed with "LDAP://". For the user policy application mode of the policy application, the user-scoped GPO DN MUST be maintained. For the computer policy application mode of the policy application, the computer-scoped GPO DN MUST be maintained.

Scoped GPO path: A Unicode string of the scoped GPO path. For the user policy application mode of the policy application, the user-scoped GPO path MUST be maintained. For the computer policy application mode of the policy application, the computer-scoped GPO path MUST be maintained.

GPO GUID: The curly braced GUID string that identifies the GPO.

Display name: A human-readable directory string description of the GPO.

ExtensionList: An array of CSE GUIDs configured in the GPO. The ExtensionList is an array of CSE GUIDs from gPCMachineExtensionNames for the computer policy application mode and an array of CSE GUIDs from gPCUserExtensionNames for the user policy application mode as specified in section 2.2.4.

FunctionalityVersion: An integer that stores the functionality version of the GPO.

SecurityDescriptor: The security descriptor, as specified in [MS-DTYP] section 2.4.6, of the GPO.

WMI Filter: A Unicode string that stores the WMI filter that is associated with the GPO.