Share via

2.2.2.3 Software Installation Search Request

  • Article

This message requests the Group Policy server to return PackageRegistration objects for the Group Policy: Software Installation Extension settings in a given GPO. This is an LDAP searchRequest message, as specified in [RFC2251], and MUST have the following values.

 Parameter

 Value

baseObject

MUST be a DN of the form CN=Packages,CN=Class Store,<scoped gpo dn>, where <scoped gpo dn> is a scoped GPO DN.

Scope

MUST be set to 1 (singleLevel).

derefAliases

MUST be set to 0 (neverDerefAliases) to dereference in searching.

sizeLimit

MUST be set to 0 (no limit set).

timeLimit

MAY be set to 0 (infinite).<4>

typesOnly

MUST be set to FALSE, according to the LDAP protocol definition of FALSE.

Filter

The following LDAP filter (as specified in [RFC2254]) MUST be used to search the Packages container of the GPO (the representation given here is what is specified in [RFC2254]). This representation can be mapped to the LDAP protocol representation:

&(objectClass=packageRegistration)(|(|(msiScriptName=*A*)(&(msiScriptName=*P*)(canUpgradeScript=*)))(!(msiScriptName=*)))

attributes

The following attributes MUST be retrieved: canUpgradeScript, packageFlags, packageType, msiScriptPath, lastUpdateSequence, localeID, machineArchitecture, packageName, versionNumberHi, versionNumberLo, installUiLevel, vendor, url, revision, productCode, objectGUID, categories, and msiFileList.<5> nTSecurityDescriptor MAY be retrieved.