How Core Group Policy Works - Management Services: Windows Server 2003 Page 1 of 23

"
# $ % &
"

' ' ( ' ( )* +&,

- . )

! / 0 ! 1
)2 $ &
& 3

! 1 1# )

4 )
. 5 . 6 )

7 $

$ ' ( 5 -6
/ 3

& & )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 2 of 23

5 " ! 1 / &
6 ! 1 & / ! 1 / $
)

! 1 ! 1 / '& / & &, $

$ & $ )! $
&, 5 +6 ! 1 / / 8
5
+% 6 &, )" / &
8 )

) /& / &
5
9: : : 6
) +3 /
! '& / / /
& )" 2
5
2 6& )

! + / &,
&, 5 +6 ) /
& +/ ! 1
) +
; & ) + / /
+% )

< < &, 5

< +6 /
&, )- / 4
/ 4 =>'7 - / 4 . - /
( < +/ ! 1
)

< + /& + ! 1
/& ! 1 '& + )

! /
)

$ '&
' ( 5 -6)

' - ' $ & 5

1<< 6 &
( )

- ' &

2 #2 )

! & & ? /
/ 3

)
)
)
)
& )

8 / $ &$ / /
)

& / /! 5
)
6
) ! /

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 3 of 23

( 5 ) ( 6
/ &
+) ) & 3 +
" )

- - / - @ / / /
)

A A A .<
)

! " . +&,
5 6 . 5"
.+.6 & ) / / /
+/ & & .
" 5 ."
6)

." ."
8 /
/ / )

." $ & & )

/ / )2 ( / ." (
%/ / $ / /
/ / /! 1 / "
/ $ / ) ."
0 & ) 0 5 ." 6
+ )

! 1
) + & ! 1 / / / +% /
&, ) ) / )
)

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 4 of 23

$ -/
- ) )

) ( ! /
)
)

% ) % ) !
( )

() % /" /B $ / )

) %

) % )

$ ) % " -( )

) % )

$0 ) % $0 )

#
5 6 ." )
3 )<
& ( & / / +%) <
& 4 )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 5 of 23

) 0
)2 / . /
. )" . / C
. )

' . 3

." &
)5 ." & $ "
.+. & )6 / /
+/ & & ."
)

" / 0 ." & / &

. )" . /
)
+ - )
." & & & $ . 5
' 6
) ( )

$ ! $%$
." & / /
) ." ) ( ) ."
&, " . 5"
.6 )

( & / (
& ." ) ." & ."
? )

." & 5 0 & 6 )

"
.+. & ) & 5 6&
) ." "
.+. / 0 )

# ! " &
0
)" / / &
&, ) 0 /
+ )

." $ -

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 6 of 23

"
. )" $ & 8 +
)" 3

" !! ' %$() & &, +% &, +%

5 6
)- % +. & & & )
& ( / / & / ( +% / /
& )
* " ! *+ )7 / (
& &, +.)
& & )
$ " )# ." & + )

()
) + +. &,
&, 5"
16 & ) "! 1 $ /
& )

" /& 1 ! ' 0 / &

) & (
D 1 ) ( /
5 6 )

! $ ' $ (
" / 3
E) / 8 )
) ." & )
) ." ." 5 ' ' 6
)
>) + ! 1 )
F) ." & + )
=) - )- ( &
+ ( )-
( $ + / ." &
&, & )
G) ! ." & /
." ) )
H) ." & )
." & ." !"
)
I) ) $ /
1 ." ."
? & )

, $ ' # (
" / & +
)

+ ! 1 (
)

." & +)
( )- (
& + ( )- (
$ + / / ." &
+ )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 7 of 23

! 7 $

% + & &
)! + & $ / / +% /
)! ( / + &, 3
)

!
! ! 1 + )
+ & )
+) / < 1 ! 5
<1! 6 (/
-. / -. / . ! 0-! / . ! J# / 1 J#
0 5
2B1#6
)

! 1 + )
& + / +% / )
$ +D )
3

1 " ! )- 8
)
! " ! )" + & & )

, " )< 5( 6 +) &

$! 2 -! 3 2 -! )
4 ! ) % # 5
%# 6 ) &
4 ! /
4 ! & ) +) / )
& 4 ! 1 )
$ " ) ." ) & 5,4 )

!
- ) '
/ + / /" /
." )" ." + )

& +' 3

) &, &, & 0 )-

&, & )
! /%3 ! ) &, + / , % )
"
! ! ) &, ! /
( )
) &, " $ +) $ "
5 6 +)

$ ) &, ." & +) ."

B < 5 B<6 )

!
() "
! 1 % ' & & & & K
! 2 K
' @ .. ) 5
+&, ! 1 % '
"! @ + L %-)6

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 8 of 23

& )- + & &,

)

! 0-! 6 6 )-
5 #6 )2 ( /
& / & 3MI 7I- 2'IGFG'>1 2'7HH!'EE =G 7F!2 N/
? # & )

+ # )! +
0 #) + 3

1 1 3M E7 2 > ' E=1'EE1 'I>F2' >27IH>2IN)

1 1 3M=! EGH= ' E=2'EE1 'I>F2' >7IH>2IN)

O + ' +)

! ! -!
) #
%"
15 & % 0 " 6
) +&, %"
1 !
1 &, ) # 0
) 0 %"
1 & 0 &
5 1 1 1 1 + %"
1
! 1 6
)A / +&, %"
1 0 !
1 )

& 3

"
! !

! % /!

1 ! /

% * -
+ & ! 1
+ ; ! 1 )! +/
# ! 1 % ' & & ! (
#) * + & ! 1 "
- ' /!1 "- )

+&, & / ! 1 ) # &

! / ? ) & D /
&, / &, D 7 / #? )
& ) & & & 3

$! ! * " ! !

-!

# +) %"
1 +
)

! & &, )" /

& + ! 1 )! +
>)

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 9 of 23

&, ! &, / &, ? / &, )2

( / &, + ) 3 #L ' '
/ #L / #L /1 L /
1 L )

&, )2 +/ &, /
/ )

& & /
). & 0
)2 ( / 2 & &
& $ )

! * !
& ) & D%
. D& ) % '
' )

! 8# ! * " ! / /! %3 !
/1# / / 8 / / +%
&, ) &, ' & / ,
% ) , 8 + %
7 $ " )

, & $ &
/ " 5 $ # + 6 !*
) +)

% & 7 $ "
+% & 56 & 5
E6)

$! ! , " ! / ! / %3
+ $ / / +%/ , %
)7 /1 ! 8 /
- ! 1 ! $ )! 1
' & ) ' &
)" / ' < $
+ / + $ / / +%)

$ %*+ ! ! ! !
%*+
! ." & )
5,4 & )
; ." ; +. )- ." ! 1
)- ." +. ." )-
)2 ( / ." B<0 3

SELECT * FROM Win32_Product WHERE IdentifyingNumber = "{5E076CF2-EFED-43A2-A623-13E0D62EC7E0}"

SELECT * FROM Win32_Product WHERE IdentifyingNumber = "{242365CD-80F2-11D2-989A-00C04F7978A9}"
SELECT * FROM Win32_Product WHERE IdentifyingNumber = "{00000409-78E1-11D2-B60F-006097C998E7}"

." )- & & /

0 5 B<6 ." 0 & )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 10 of 23

7 !
, ) +
$ ) &, + /
2 / %# )

! &
/ J 2B1# )
( / ( /! '&
) ) / & ( /
)

7 ) 4
) )- ) +
) -( ) +/ )

- ) + & )

[General]
Version=65539

# / ' & &, ) "

D >& ( & / &
+ & )"
( 0 E ( E
)

& ) - $
5 6 ' ' )"
/ &
)

7 ! *"
& 3

$! )" ) & )
8 / ) 9 :0,% ,0$ -
) $! & 5
+6
3

! ) )
) )
! ) 5
) 6 & )
)
$ " -7 ) ) /
)

) ) +)
% )" ) & )
/ ) AO-*J % -# J% -
) % & 5 +6
3

! ) 5
) 6 & )
)

! ) 2 ) / &
2 ? )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 11 of 23

$ " # !) + ) /
" )
$ " 9) " -( . ' )
, ) +)
, "
") +)

% . /
)

+&, - )
& )

"
! 7 !

! % -(

! 2

+ -(

+ 2 5 & 2 6

%*+ " &

- + & D )
). $ + $
) $ 0 )
! $ $/ ' &
5 ( / )
6
)

7 , ! %*+
< + ! 1 )" !
1 + < +) <
+ ) )
'& +& !
1 ) & &
) )

, ! % 7)- *

% -( # " %"
1 ' - %
+)

3PM %"
1 -NM %"
1 .. ( NM %"
1 .. (
NQ
P Q)

. -( # " %"
1 ' -
+)

+ + % & & )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 12 of 23

( & < +3

(
2

( < +3

& O C-2 C )
C 2 / !
< 5
! <6
)

! ! 7 $

! + ) (
+ ! 1 / / +% ) "
& + , -) " / (
)

#
+ )
) 3

, ! *+ )- ( &, )
& )
)! + & $ & ()
& / < $ +&, &
. ) + $ / )
! ) ' $ + & /
< $ +&, & . ) + $ /
)
% ! ;! ! ) + $ 8 ! 1
/ + $ 8 /
)2 / + $ 8
)

8/ < + / 8 &
5 & 6 )! &, 3

." & +)
! '& +5 < +6 & & "
& )7 - + /
+) " - +/ ? &
+ / / $ +
)
! 8 / & <
! )A /& + / & & $ /& $
" + )

- < +
' ) < + ? & & $ & '& +)A /
+ $ < +)

7! %
/ / +% $ +

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 13 of 23

+) ." &
+ )
+ 3" + $ / / +% /
+ & + )! + & $
3

7 % !* )* & & +
& ()
7 !& ! ! ! %)*
+ / ( )
$ " ! ! % &! ! "
! )! ."
& & / ( )

4
+) 7
+ $
+/ + / / )
+ / / C &
+)

" + / & # !
' ( +/ ( / & )

7 / + # ! & ! % ) ! %
& ) +
8 / ) / & +
! % )7 /1 ! /- ! /
/ ! ' 5
! -6
)A /
& ! % / +& )

& / /
8 / / ) .
/ + + &) " . / / /
& +)

4
7 +/ $ ! < !< +) "
!- + & / !
/ + + )! / !-
+ & !
+ + )

" +/ + )

" / !- & & &

)

$ 4
." $ & & )
/ / )2 ( / ." (
%/ / $ / / /
/ /! 1 / " / $ / )

." +& B < 0 +)

0 & 0 ." )" 0 0 /
+ & )

+ $ ." /

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 14 of 23

)" ." / + 5(
/ + 6
)" ." /
+ )

." &, + )! ." & $ +

)- + ." C ." & $ +) ."
/$ +/ )! ." + $ & )

$ 4
"/ / +/ +
)% / 5,4 &
." +) " / ." / B<
/ )" / + )
." & $
& $ )

$ 4 !
." 3

) 1A )
) $ )

A ) "
"" )
) @ )#- )
A ) $ 5
#" 6 )
) ' )

! ) # $! 5 #!6 )

." ( 4/ / )
." + / ." ) ."
& )

! "
! /& )

! "
)2 / )"
/ /
& &( / &
& )! ( / 4 2 < '
& 5 6 & $ )6

!
& & &
( & )! / / &
)

* & & +
)2 ( / & #
! / & $
/ )

4! , = " !
7 4 / 2 < + 8 & &

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 15 of 23

$ & )
) & $ )! /
& )2 <
+ 8 3

)
)
)

# / & )A /&
/ ( & 8 ) &
4 )

"
! "

! ! ! 6 ! ! "

4 ! !

4 2 < + 8 )2 < + 8 &

& 3

" ! ! & 7 ! , ! ! " !

! ! )

# 2 < + 8 )

4 # ! " ! !!
# 2 < + 8 / &
) &
0 )1 5 6
/
0 )
? ( )

7 , " "
% / =
)! - = /
& )

<! # " "

" / & 0
& $ & )1 & $ / -
+ +)

" /
) & & $ & )2 ( / /
/ )"
$ / )!
- & $ / / /
/ / )

# "
7 / I 8 D
( E )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 16 of 23

& ' ( & (

+ ? ) (
" ! ! & 7 ! )

% 8 !
* & $ )A /
& )

$ ! ! &
/ $0 77 - - / )!
)
5 6 )

# " " ! ,
* )+ /
; C 4 / )

! ,
$/ - &
$) " - $)
3

"
! ,

2 "
!

+ 5 & 6

! + 5 & 6

" +

2 +

, *!
/& &, !
1 )A / / /&
&, / &, ) & $ & %
/& ) /
/ +% & & $ )

! &

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 17 of 23

# 8
+ ! /!E/! /!>/ != 5 6 )% . $ 8
+ ! /!E/! / !F 5 6
/ )

" & )! (
& & . $ 8 &
8 ) & $ /
+ 8 3

. )" / ? + ? +)"
( / + ! /!E/! /!>/ !=/ ? !/
!E/! /!F/ ! /!E/! /!F/! /!E/! /!>/ I!=5 6
)
)" / ? + )+ + &
&, )" ( / ! /!E/! /!>/ !=)

& $ & & & 3 *!

! & )

& $ )
& / $ /
& )

8 2
' (
) & ( ' )+
. (
)

- & 3

1 -

8 2 & &

" $ &, )

2 )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 18 of 23

" " &,

" -( . ) R& ) )

! ) )

1 $B )

-2 )

" + )

# $ ) )

B $ ) )

8 2 % !
- & / )
- ) 1<< 1<<
5 6& - & )
)

- ( 5 ( /
& $ 6
)

8 2 # ,
- - $ 3

9 :0,% ,0$ - " ! $ " -7 1 2

- ( & $ %"
1 ( ) (
& )

2 3 2 -!

FF G7!='GG!H'EE1 'I7= ' 2H H H=E 2

F GH-! '=H 2'EE1 '!HI!' >277 2! ! -(

=E -1!F'GG-2'EE1 'H1 F' >2! E!== 1 $B

> = E ' &>G'>HF '& ' G& & I B $

> 7F2!!-'=F ='EE1 '!-F!' 2HGFGE-

H G1 EI-'=-! 'EE1 '!>-!' >2GI2H !

! - 2H '1G1-'EE '771-' >2H=!- 7 " -( .

7E7-H1G '=-! 'EE1 '!>-!' >2GI2H ! -2

=1 F>=='GHF!'EE1 'H>1 ' >27E=I2G "

-> G7 E '!!G1'EE1 '! H ' >2IIE- G "

$! !
- + / + )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 19 of 23

+ 3

9 :0,% ,0$ - " ! $ " 1

+ 3

9 :0 3## -703 # " ! $ " 1

" ! " !
. ).
& ( 5 - $6
/ &
) & +&, - 3

! & 7 !

& & -3

! 5 '& 6
" -( .
"
2

"
-2
1 $B

% " 2
! )+ (
)

!
+ 3

+ )
" $ - + )

0 + / + )

%, !

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 20 of 23

+ 3
E) B ! 1 , % 1
&, & )
) B ! 1 &, , )
) - !
+)
>) - ."0 ."
0 0 )

+ + / - $
) 0 - )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 21 of 23

1 - 3
E) - )
) $ -5 ( / & $
$ & ( 6
)
) $ - ! +) + & +
-5 / - ( %"
1
% -( . -( 6 +< ) +
! +< 1 +< )
>) $ - &
)
F) $ & +
+ )

" & . (# +< ( C / -

& )

F & - + + )! - / ( -
)

)" & /
+)

" / + ) E= )

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 22 of 23

2 / (
' +)7 / E= 8 )-
+ / E=

# !
" / $ /
/ )< & $ &
) )

- + ! 1 ) .
+&, - + )2 ( / +
. / . &, & ! 1 )"
&, .
+&, - )! /
+ ) 2 /
& ! 1 )+ & 5
9 9: * @+<: 6
) ? & D
? & )2 / ?
& > > : 1%, ! )

# !

2 ' 8 &
). 0 )"
& 2 /
) K ' ' K )

2 & &, 2 5
2 & & 6 &, & )
$ & 2 & &, ) &,
)" & & & 2 & &,
) &, %"
1
)

2 )! 1 &
&, & )" & /& /
5 ( / 6 & &, )

2 ( &

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005
How Core Group Policy Works - Management Services: Windows Server 2003 Page 23 of 23

'& '& ) +
& &, /
& ) ( ) ()

2 ( 5 ! 1 6
/
/ & ) ( ! /
/2 / )

2 ( & 5
! 1 6
/ (
& 8 ) (
&, & / )

! ( ( ! 1
( ) ) " $ ! 1 )"
) ( /& ! 1 /
)" ) /& $ $ ! 1 /
& ( )

! 1 / . / +&, - /
! 1 % )"
& / &, $ / / 8 / + $
)

" +/
+/ 2 )1 !
D / & )
& !
% / : & )

- 3 * 7 $

"

& -! 3 7

< 1 ! ; HI

.7 ; >>F

1 +. 1 1

1 1

# ! " ! 7 $

! ! " #$ !

http://www.microsoft.com/Resources/Documentation/windowsserv/2003/all/techref/en-us... 22/03/2005