1.3.2 Name Resolution Policy Table Extension Encoding Overview
Name Resolution Policy Table policies are configurable from a GPO through the Name Resolution Policy Table Group Policy Data Extension, which uses the {f4d8c39a-f43d-42b4-9bdf-4e48d3044ba1} tool extension GUID. The protocol provides mechanisms both for Group Policy administrators to deploy policies and for clients to obtain the applicable policies to enforce them. The Name Resolution Policy Table component has complex settings not expressible through administrative templates, and for this reason it implements a custom UI that can author registry policy files containing the encodings of the settings described in this document. Given that the Name Resolution Policy Table policies are applied to the whole machine, the NRPT Group Policy Data Extension protocol uses the Computer Policy Mode described in [MS-GPREG] section 1.3.2.
Name Resolution Policy Table policies are applied as follows:
An administrator invokes a Group Policy Name Resolution Policy Table administrative tool on the administrator's computer to administer a Group Policy Object (GPO) through Group Policy Protocol using the Policy Administration mode, as specified in [MS-GPOL] section 2.2.7. The administrative tool invokes a plug-in specific to Group Policy: Registry Extension Encoding so that the administrator can administer the Group Policy: Name Resolution Policy Table Data Structure transported over the Group Policy: Registry Extension Encoding data. This results in the storage and retrieval of metadata inside a GPO on a Group Policy server. This metadata describes configuration settings to be applied to the registry on a client that is affected by the GPO. The administrator views the data and updates it to add a directive to run a command when the client computer starts up. If they are not already present from a prior update, the CSE GUID and tool extension GUID for Computer Policy Settings for Group Policy: Registry Extension Encoding are written to the GPO.
A client computer affected by that GPO is started (or is connected to the network, if this happens after the client starts), and Group Policy Protocol is invoked by the client to retrieve Policy Settings from the Group Policy server. As part of the processing of Group Policy Protocol, the Group Policy: Registry Extension Encoding's CSE GUID is read from this GPO, and this instructs the client to invoke a Group Policy: Registry Extension Encoding plug-in component for Policy Application.
In processing the Policy Application portion of Group Policy: Registry Extension Encoding, the client parses the settings and then saves the settings in the registry on the local computer and notifies the Name Resolution Policy client component. The NRPT policies are stored in local storage.
The NRPT Group Policy Data Extension is invoked for policy application. To apply the policies, the Name Resolution Policy component parses its previously stored settings in local storage.