RSOP_GPO class

Represents a Group Policy Object (GPO). Instances of this class are divided into three categories: instances that represent applied GPOs, instances that represent GPOs that have read-access but not applyGroupPolicy access, and instances that represent disabled GPOs.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

[AMENDMENT]
class RSOP_GPO
{
  string  id;
  string  name = "";
  string  guidName = "";
  uint32  version = 0;
  boolean enabled = TRUE;
  uint8   securityDescriptor[];
  string  fileSystemPath = "";
  boolean accessDenied = FALSE;
  string  filterId = "";
  boolean filterAllowed = TRUE;
  string  extensionIds[];
};

Members

The RSOP_GPO class has these types of members:

• Properties

Properties

The RSOP_GPO class has these properties.

accessDenied

Data type: boolean

Access type: Read-only

Qualifiers: DisplayName ("Is Access Denied")

Flag that indicates that a RSOP_GPLink was found that references this GPO; additionally, the GPO in turn was also found, but it is inaccessible for security reasons.

enabled

Data type: boolean

Access type: Read-only

Qualifiers: DisplayName ("Is Enabled")

Flag that indicates whether the GPO is enabled.

extensionIds

Data type: string array

Access type: Read-only

Qualifiers: DisplayName ("Extension Ids")

Client-side extension Ids.

Windows Server 2008 R2, Windows 7 and Windows Vista: This property is not available before Windows Server 2012 and Windows 8.

fileSystemPath

Data type: string

Access type: Read-only

Qualifiers: DisplayName ("File System Path")

Path to the file system; that is, the system volume folder (SysVol), part of the GPO.

filterAllowed

Data type: boolean

Access type: Read-only

Qualifiers: DisplayName ("Is Filter Allowed")

Flag that indicates whether the GPO passed a filter check.

filterId

Data type: string

Access type: Read-only

Qualifiers: DisplayName ("WQL Filter")

Filter ID of the WMI Query Language (WQL) filter on the GPO..

guidName

Data type: string

Access type: Read-only

Qualifiers: DisplayName ("GPO GUID")

GPO name as a GUID. The system uses this value as a key.

id

Data type: string

Access type: Read-only

Qualifiers: key, DisplayName ("ID")

Group policy container path retrieved from the Active Directory.

name

Data type: string

Access type: Read-only

Qualifiers: DisplayName ("Name")

User-friendly name of the GPO. This is the name that displays on the Precedence property page in the RSoP snap-in. The name may not be unique.

securityDescriptor

Data type: uint8 array

Access type: Read-only

Qualifiers: DisplayName ("Security Descriptor")

Array of bytes containing the security descriptor associated with the GPO. The security descriptor is in self-relative format. For more information, see Absolute and Self-Relative Security Descriptors.

version

Data type: uint32

Access type: Read-only

Qualifiers: DisplayName ("Version")

Version number of the GPO. The value is a combination of the Group Policy Container (GPC) and the Group Policy Template (GPT) version numbers. For more information about GPCs and GPTs, see Group Policy Storage.

Requirements

See also

Group Policy Overview

Group Policy RSoP WMI Classes

RSOP_GPLink