| Platform SDK: Group Policy |
Administrators manage policy settings using the Group Policy snap-in. The Group Policy snap-in extends other administrative tools such as the Active Directory Users and Computers snap-in and the Active Directory Site and Services Manager snap-in. All policy settings created by the Group Policy snap-in are stored in a GPO.
The Group Policy snap-in includes several snap-in extensions. All functionality is provided by these snap-in extensions. The following is a listing and brief description of the Group Policy snap-in extensions.
| Extension | Description |
|---|---|
| Administrative Templates | Manages registry-based settings that govern the behavior and appearance of the desktop, including applications.
Manages disk quotas. |
| Security Settings | Defines security configuration options. |
| Software Installation | Manages centralized software distribution. Installs, assigns, publishes, updates, repairs, and removes software. |
| Scripts | Automates computer startup and operating system shutdown, as well as logging on and logging off by the user.
These scripts are compatible with the Windows Scripting Host. |
| Folder Redirection | Redirects special folders to the network. |
The registry-based policy settings are stored in Registry.pol files. The Group Policy snap-in creates two Registry.pol files and stores them in the GPO. One file contains computer settings and the other file contains user settings. For more information, see Registry Policy File Format.
The settings you provide with the Group Policy snap-in do not take effect until the system applies policy.