Search code examples
c++active-directoryldapgroup-policy

How do you find what GroupPolicy objects are attached to a container/domain/site?


I've got a problem where I need to interleave settings made on the host/user/containers/domain/site with the group policy settings attached to the containers/domain/site.

We can walk the ad tree for the host and the user and have those settings. We have our group policy list & objects and those settings. I'm just having trouble joining the 2 heirarchies back together, I can't seem to find the appripriate API/info to do it.


Solution

  • You need to look at the gpLink attribute of each site, domain, and OU. You can also look at gpOptions for a handful of related flags. The gpLink attribute will have the DNs of each GPO applied to that object as well as whether or not the link is enabled or not.