I've got a problem where I need to interleave settings made on the host/user/containers/domain/site with the group policy settings attached to the containers/domain/site.
We can walk the ad tree for the host and the user and have those settings. We have our group policy list & objects and those settings. I'm just having trouble joining the 2 heirarchies back together, I can't seem to find the appripriate API/info to do it.
You need to look at the gpLink
attribute of each site, domain, and OU. You can also look at gpOptions
for a handful of related flags. The gpLink
attribute will have the DNs of each GPO applied to that object as well as whether or not the link is enabled or not.