3.3 Interpretation of Registry Policy Messages as Policies by an Adminstration Tool

Policy Description Messages map policy behaviors to registry keys and values, and Registry Policy Messages describe registry keys and values. Therefore, the Policy Description Messages can map policies to any key/value pairs in the Registry Policy Messages that are also referenced within the Policy Description Messages. Because of this, the Policy Description Messages can be used by a tool to determine what Administrative Template Policy behaviors have been set in the Registry Policy Messages (that is, what Administrative Template Policies are set for this GPO).

This also means that a tool can use the Policy Description Messages to serialize a policy behavior described in the Policy Description Message. This is because the Policy Description Message describes what key and value to set to generate a different behavior. A tool could create a Registry Policy Message with that key and value, and then update a GPO through a Registry Policy Update sequence. The updating of a GPO through a Registry Policy Update sequence occurs within a tool. A Registry Policy Message is consumed both by a tool to create or update a GPO and by a client to apply policy on the client.

The following table shows the correspondence between Policy Description Messages and Registry Policy Messages, as specified in Registry Policy Message Syntax (section 2.2.1).

 ADM/ADMX

 Registry Policy Message

 Client Database

KeyName (from PART in ADM) or key (from policy in ADMX)

Key

Database Key

ValueName (from PART in ADM) or valueName (from policy in ADMX)

valueName in ADMX MAY be adjusted by prepending string constants as defined in 3.2.5.1 based on the presence of the attributes "soft" or the element "delete". ValueName in ADM MAY be adjusted by prepending string constants as defined in 3.2.5.1 based on the presence of the token TokDelete. **soft. is unsupported in ADM.

Value

Value Name

DataType (implied by absence or presence of NUMERIC, EXPANDABLETEXT, TXTCONVERT in ADM or Boolean, decimal, text, longDecimal, multiText in ADMX)

Type

Data Type

Data (from ValueOn, ValueOff, user input in ADM or trueValue, falseValue, enabledValue, disabledValue, user input in ADMX)

Data

Data Value