Client-side Processing of Group Policy

Some of the Group Policy components include client-side extensions (.dlls) that implement Group Policy at client computers. The client-side extensions are loaded as needed when a client computer is processing policy. The client computer first gets a list of Group Policy objects. Next, it loops through all the client-side extensions and determines whether each client-side extension has any data in any of the Group Policy objects. If a client-side extension has data in a Group Policy object, the client-side extension is called with the list of Group Policy objects that it should process. If the client-side extension does not have any settings in any of the Group Policy objects, it is not called.

Table 22.4 lists the client-side extensions.

Table   22.4 Client-side Extensions

Client-side extension

DLL file name

Registry (in Administrative Templates

Userenv.dll

Disk Quota (in Administrative Templates)

Dskquota.dll

Folder Redirection

Fdeploy.dll

Scripts

Gptext.dll

Software Installation

Appmgmts.dll

Security

Scecli.dll

IP Security

Gptext.dll

EFS (Encrypting File System) Recovery

Scecli.dll

Internet Explorer Maintenance

iedkcs32.dll

Remote Installation Services

none