4.2 Client Retrieval of Policy

On client machines that are members of the GPO, the Group Policy protocol client subsequently signals the IPsec client-side plug-in, as specified in [MS-GPOL] section 3.2.5, "Message Processing Events and Sequencing Rules", that an IPsec policy has been activated. The policy is retrieved by using the Group Policy: IPsec Protocol and is supplied to the local IPsec/IKE component to enact the required policy.