To create and assign the policy, the security administrator uses an IPsec administrative plug-in user interface to configure and make active the desired policy. This results in the Group Policy: IPSec Protocol Extension transferring the settings to the IP Security container and the GPO of the client computers that need to participate in the isolation mechanism. In this example, the domain name myDomain.contoso.com is used.