Group Policy Object Editor Tools and Settings
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
In this section
Group Policy Object Editor Tools
Group Policy Object Editor Group Policy Settings
Related Information
This section describes the tools and settings that are associated with the Group Policy Object Editor server-side extension (SSE) when accessed from the Group Policy Management Console (GPMC) with Service Pack (SP) 1 applied. The Group Policy Object Editor SSE is a Microsoft Management Console (MMC) snap-in that administrators use to edit policy settings for Group Policy Objects (GPOs).
Group Policy Object Editor Tools
The following tools are associated with the Group Policy Object Editor.
Gpedit.dll: Group Policy Object Editor
Category
The Group Policy Object Editor is contained in gpedit.dll. Group Policy Object Editor is an MMC snap-in installed with Windows 2000, Windows XP, and Windows Server 2003. Gpedit.dll also contains the Resultant Set of Policy (RSoP) snap-in.
Version compatibility
You can access the Group Policy Object Editor from the Active Directory Users and Computers on Windows 2000, on Windows XP with the Windows Server 2003 Administration Tools Pack installed, and on Windows Server 2003. Administrators use the Group Policy Object Editor to edit policy settings in Group Policy objects (GPOs).
For a discussion of RSoP features provided by Gpedit.dll, see the What Is Resultant Set of Policy? topic in this collection. For more information about Group Policy Object Editor, see the What Is Group Policy Object Editor? topic in this collection.
MMC.exe
Category
MMC.exe provides a common host environment for snap-ins such as the Group Policy Object Editor and the GPMC.
Version compatibility
See MMC.exe documentation for version compatibility.
MMC.exe supplies programmatic interfaces that integrate snap-ins with the console. MMC.exe itself provides no management behavior. All management behavior is supplied by the snap-in. MMC interfaces deal only with user interface extensions.
Group Policy Object Editor MMC Extensions
The remaining tools in this section are Microsoft Management Console (MMC) snap-ins that are Group Policy server-side extensions. They extend the Group Policy Object Editor (gpedit.dll).
Gptext.dll
Category
Gptext.dll is an MMC extension to gpedit.dll that provides settings for Scripts, IP Security, and Wireless Group Policy.
Version compatibility
Gptext.dll is compatible with Windows XP SP1 and Windows Server 2003.
For more information about the Scripts, IP Security, and Wireless extensions, see the What Is Scripts Extension?, What Is Security Settings Extension?, and What Is Wireless Network Policies Extension? topics in this collection.
Fdeploy.dll
Category
Fdeploy.dll is an MMC extension to gpedit.dll that provides settings for Folder Redirection Group Policy.
Version compatibility
Fdeploy.dll is compatible with Windows XP SP1 and Windows Server 2003.
For more information about the Folder Redirection extension, see the What Is Folder Redirection Extension? topic in this collection.
Scecli.dll
Category
Scecli.dll is an MMC extension to gpedit.dll that provides settings for Security Settings Group Policy.
Version compatibility
Scecli.dll is compatible with Windows XP SP1 and Windows Server 2003.
For more information about the Security Settings extension, see the What Is Security Settings Extension? topic in this collection.
Dskquota.dll
Category
Dskquota.dll is an MMC extension to gpedit.dll that provides settings for Disk Quota Group Policy.
Version compatibility
Dskquota.dll is compatible with Windows XP1 and Windows Server 2003.
Iedkcs32.dll
Category
Iedkcs32.dll is an MMC extension to gpedit.dll that provides settings for Internet Explorer Maintenance Group Policy.
Version compatibility
Iedkcs32.dll is compatible with Windows XP SP1 and Windows Server 2003.
For more information about the Internet Explorer Maintenance extension, see the What Is Internet Explorer Maintenance Extension? topic in this collection.
Appmgmts.dll
Category
Appmgmts.dll is an MMC extension to gpedit.dll that provides settings for Software Installation Group Policy.
Version compatibility
Appmgmts.dll is compatible with Windows XP SP1 and Windows Server 2003.
For more information about the Software Installation extension, see the What Is Group Policy Software Installation Extension? topic in this collection.
Group Policy Object Editor Group Policy Settings
You can permit or prohibit use of Group Policy Object Editor through an Administrative Templates policy setting, as shown in the following table. MMC has policies that will prevent snap-ins from running. The list of snap-ins, including the Group Policy server side extension snap-ins, can be viewed in the results pane by selecting the tree-view node.
Administrative Templates Policy Setting | Description |
---|---|
Group Policy Object Editor USER Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy |
Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. |
For a complete reference of all Administrative Templates policy settings, see Group Policy Settings Reference for Windows Server 2003.
Related Information
The following resources contain additional information that is relevant to this section.
Registry Reference for Windows Server 2003.
Group Policy Settings Reference for Windows Server 2003.
MSDN.