2.2.8.2 GPO Extension Update Message

The GPO Extension Update message MUST be an LDAP modifyRequest with the following parameters. The result of modifyRequest is a modifyResponse message in reply, as defined in [RFC2251] section 4.6. The resultCode field value determines a failure or success for the message.

 Parameter

 Value

Entry

GPO DN for the GPO being updated.

attributes

This field MUST specify the attributes versionNumber and either gPCUserExtensionNames (if user policy settings are being modified) or gPCMachineExtensionNames (if computer policy settings are being modified). The operation for each attribute specified MUST be "replace" as specified in [RFC2251].

The syntax of these attributes is specified in section 2.2.4. If the extension GUID of the plug-in that modified the GPO is not already present from a prior update and the tool extension is adding or updating settings, gPCUserExtensionNames or gPCMachineExtensionNames MUST be updated to append the extension GUID and tool extension GUID to the directory string. If the tool extension is removing all settings managed by this tool extension, gPCUserExtensionNames or gPCMachineExtensionNames MUST be updated to remove the extension GUID and tool extension GUID from the directory string.