2.2.3 Central Access Policy ID Setting
This section defines settings that Group Policy administrators use to configure CAP identifiers. These settings identify the central access policies that are used by the Group Policy client extension for the configuration of access control policies for Group Policy client computer resources.
|
HeaderValue |
Purpose |
|---|---|
|
CAPS |
This value MUST contain one or more settings that describe the LDAP DNs of CAP objects. |
-
Header = "[" HeaderValue "]" LineBreak HeaderValue = "CAPS" Settings = Setting / Setting Settings Setting = DQUOTE Value DQUOTE LineBreak Value = String
Each Value string MUST be a valid LDAP distinguished name, as defined in [MS-ADTS] section 3.1.1.3.1.2. This distinguished name identifies a CAP object, as defined in [MS-ADSC] section 2.97. The Group Policy: Central Access Policies Extension uses the distinguished name to look up the CAP object in Active Directory and configure its settings in the Group Policy client computer ADM.