3.1 Example 1: Processing Group Policy Events

This section describes various events that trigger the Group Policy processing architecture and the resulting sequence of messages that apply Group Policy. This example provides a very high-level view of the sequences that take place in response to specific event occurrences, such as:

  • Computer startup.

  • User logon to a computer.

  • User logoff from a computer.

  • Computer shutdown.

This example maps to the use case specified in section 2.5.2, "Applying Group Policy".

Prerequisites

The following prerequisites apply to this example:

  • The Group Policy client is able to discover and communicate with the Group Policy server, as described in [MS-GPOL] section 3.2.5.1.1.

  • The Group Policy server is storing policy and responds to requests from the Group Policy client.

  • The Group Policy client maintains a consistent configuration of policy information that is retrieved from the Group Policy server, which includes registry settings, WMI data, and RSoP data.

  • The Group Policy administrator ensures that the Group Policy client policy configuration aligns with business requirements.

Initial System State

Prior to the application of Group Policy, the Group Policy protocols are actively listening for the specific events that will trigger policy application on computers in a domain.

Final System State

The state of the Group Policy protocols and components after execution of this example can be described as follows:

  • The Group Policy client retrieved the appropriate policies from the Group Policy protocols, and they were applied on the client.

Sequence of Events

The following diagram illustrates the message sequence that occurs in response to events that trigger policy application. The diagram also indicates when Group Policy computer startup, computer shutdown, user logon, and user logoff scripts are run.

Group Policy processing internal architecture

Figure 11: Group Policy processing internal architecture

The following table provides document references for the messages in the preceding figure.

Group Policy messages and document references

Protocol message

Document name

Section

Computer Core Policy Application

[MS-GPOL]: Group Policy: Core Protocol Specification

1.3.3, Policy Application

Computer CSE Policy Application

[MS-GPOL]: Group Policy: Core Protocol Specification

3.2.5.1.10, Extension Protocol Sequences

Computer Startup Scripts

[MS-GPSCR]: Group Policy Scripts Extension: Protocol Specification

3.2.5, Message Processing Events and Sequencing Rules

User Core Policy Application

[MS-GPOL]: Group Policy: Core Protocol Specification

1.3.3, Policy Application

User CSE Policy Application

[MS-GPOL]: Group Policy: Core Protocol Specification

3.2.5.1.10, Extension Protocol Sequences

User Logon Scripts

[MS-GPSCR]: Group Policy Scripts Extension: Protocol Specification

3.2.5, Message Processing Events and Sequencing Rules

Periodic Computer Core Policy Application

[MS-GPOL]: Group Policy: Core Protocol Specification

1.3.3, Policy Application

Periodic Computer CSE Policy Application

[MS-GPOL]: Group Policy: Core Protocol Specification

3.2.5.1.10, Extension Protocol Sequences

Periodic User Policy Core Application

[MS-GPOL]: Group Policy: Core Protocol Specification

1.3.3, Policy Application

Periodic User CSE Policy Application

[MS-GPOL]: Group Policy: Core Protocol Specification

3.2.5.1.10, Extension Protocol Sequences

User Logoff Scripts

[MS-GPSCR]: Group Policy Scripts Extension: Protocol Specification

3.2.5, Message Processing Events and Sequencing Rules

Computer Shutdown Scripts

[MS-GPSCR]: Group Policy Scripts Extension: Protocol Specification

3.2.5, Message Processing Events and Sequencing Rules