2.2.3 Central Access Policy ID Setting

This section defines settings that Group Policy administrators use to configure CAP identifiers. These settings identify the central access policies that are used by the Group Policy client extension for the configuration of access control policies for Group Policy client computer resources.

HeaderValue

Purpose

CAPS

This value MUST contain one or more settings that describe the LDAP DNs of CAP objects.

 Header = "[" HeaderValue "]" LineBreak
 HeaderValue = "CAPS"
 Settings = Setting / Setting Settings
 Setting = DQUOTE Value DQUOTE LineBreak
 Value = String

Each Value string MUST be a valid LDAP distinguished name, as defined in [MS-ADTS] section 3.1.1.3.1.2. This distinguished name identifies a CAP object, as defined in [MS-ADSC] section 2.97. The Group Policy: Central Access Policies Extension uses the distinguished name to look up the CAP object in Active Directory and configure its settings in the Group Policy client computer ADM.