1.7 Versioning and Capability Negotiation

This document covers versioning issues in the following areas:

  • Protocol versions: The Group Policy: Core Protocol provides a versioning capability in the gPCFunctionalityVersion attribute of the Active Directory object class for a Group Policy Object (GPO) specified in section 2.2. There is no capability negotiation that is associated with this version. The version itself is a simple integer. There is only one version currently, and if the Group Policy client receives anything other than that version for a GPO, the GPO does not participate in this protocol, as specified in section 3.2.5.1.5.

  • Security and authentication methods: The Group Policy: Core Protocol supports the following authentication methods: NT LAN Manager protocol (NTLM) and Kerberos. The authentication method in use is negotiated using the mechanisms specified in [MS-SPNG].