Share via

3.1.5.1.1 Package Read

  • Article

A policy administration tool on a client can read all of the software settings stored in the user policy settings section of a GPO or stored in the computer policy settings section. An example of such a tool is a utility on the client that uses the software settings stored in a GPO to display a list of installed applications. The client MUST use the following procedure to read the software settings that are stored in the GPO:

  1. The Common LDAP Bind sequence (section 3.2.5.6) MUST be issued.

  2. A Software Installation Container Search Request (section 2.2.2.1) message MUST be generated by the client. The corresponding response for this message is specified in section 2.2.2.2. If the ldapResult status for the response portion of the message is a success status, the sequence MUST continue with the next step below. Otherwise, the sequence MUST proceed to step 4 LDAP UnBindRequest.

  3. A Software Settings Read Administration Message (section 2.2.3.1.3) message MUST be generated by the client. The corresponding response for this message is the Software Installation Search Reply message (section 2.2.2.4) which contains PackageRegistration objects that represent deployed software in the GPO. This software MAY then be presented to a user who is browsing the GPO's settings or other GPO management activities.<12>

  4. The Common LDAP UnBind sequence (section 3.2.5.7) MUST be issued.

Any failure codes returned from the LDAP operations listed above MUST be treated as a failure, and the protocol sequence above MUST be terminated.

Note For read administration, no remote file access sequences are generated.