2.2.8.1 GPO Creation Message

  • Article

An administrative tool MUST generate the GUID portion of the new GPO DN by using the GUID-generation algorithm, as specified in [C706] Appendix A "Universal Unique Identifier", to ensure that the DN is unique in the domain.

Containers and GPO existence MUST be checked by sending the following LDAP SearchRequest messages to the Group Policy server prior to the applicable LDAP addRequest.