Export (0) Print
Expand All

IGPMGPO interface

The IGPMGPO interface supports methods that enable you to manage Group Policy Objects (GPOs) in the directory service.

Note that you cannot use this interface to manage local GPOs (LGPOs).

You can instantiate a GPMGPO object by creating a new one with a call to IGPMDomain::CreateGPO, retrieving an existing one with a call to IGPMDomain::GetGPO, or by searching for one with a call to IGPMDomain::SearchGPOs. After creating the object, you can query the GPO and set properties related to the GPO.

Members

The IGPMGPO interface inherits from the IDispatch interface. IGPMGPO also has these types of members:

Methods

The IGPMGPO interface has these methods.

MethodDescription
Backup

Backs up the GPO to the specified directory.

CopyTo

Copies the policy settings from the GPO in the current domain to a new GPO.

Delete

Deletes the GPO from the directory service.

GenerateReport

Generates a report for a GPO.

GenerateReportToFile

Generates a report for a GPO and then saves the report to a file in a specified path.

GetSecurityDescriptor

Retrieves a pointer to an IDispatch interface from which the security descriptor for the GPO can be retrieved. For script programmers, returns a reference to an IADsSecurityDescriptor object.

GetSecurityInfo

Retrieves the set of permissions for the GPO, such as who is granted the rights to edit it.

GetWMIFilter

Retrieves the GPMWMIFilter object that is linked to the current GPO.

Import

Imports the policy settings in the specified GPMBackup object.

IsACLConsistent

Checks the consistency of access control lists (ACLs) between the Directory Service and the system volume folder (SYSVOL).

IsComputerEnabled

Determines whether the computer settings in the GPO are enabled.

IsUserEnabled

Determines whether the user settings in the GPO are enabled.

MakeACLConsistent

Makes ACLs consistent between the Directory Service and the system volume folder (SYSVOL).

SetComputerEnabled

Enables or disables the computer policy settings in the GPO.

SetSecurityDescriptor

Sets the security descriptor for the GPO.

SetSecurityInfo

Sets the list of permissions for the GPO.

SetUserEnabled

Enables or disables the user policy settings in the GPO.

SetWMIFilter

Links the GPMWMIFilter object to the current GPO.

 

Properties

The IGPMGPO interface has these properties.

PropertyDescription

ComputerDSVersionNumber

Version number of the directory service component of the computer configuration portion of the GPO.

ComputerSysvolVersionNumber

Version number of the system volume folder (SYSVOL) component of the computer configuration portion of the GPO.

CreationTime

Time when the GPO was created.

DisplayName

Friendly display name of the GPO. More than one GPO can have the same display name. GPOs are identified in the Directory Service by the GPO ID, which is a GUID. GPOs are not identified in the Directory Service by the display name.

DomainName

Domain name for the GPO. This is the full Domain Name System (DNS) name, for example, example.microsoft.com.

ID

ID of the GPO.

ModificationTime

Time when the GPO was last modified.

Path

Distinguished name of the GPO in the Active Directory directory service; for example, cn={myguid},cn=policies,cn=system,dc=coname,dc=com.

UserDSVersionNumber

Version number of the directory service component of the user configuration portion of the GPO.

UserSysvolVersionNumber

Version number of the system volume folder (SYSVOL) component of the user configuration portion of the GPO.

 

Requirements

Minimum supported client

Windows Vista [desktop apps only]

Minimum supported server

Windows Server 2008 [desktop apps only]

Redistributable

GPMC on Windows Server 2003 or Windows XP with SP1

Header

Gpmgmt.h

IDL

Gpmgmt.idl

DLL

Gpmgmt.dll

IID

IID_IGPMGPO is defined as 58CC4352-1CA3-48E5-9864-1DA4D6E0D60F

See also

IGPM
IGPMBackup
IGPMDomain
IGPMGPOCollection
IGPMWMIFilter

 

 

Show:
© 2014 Microsoft