IGPMGPO interface (gpmgmt.h)

The IGPMGPO interface supports methods that enable you to manage Group Policy Objects (GPOs) in the directory service.

Note that you cannot use this interface to manage local GPOs (LGPOs).

You can instantiate a GPMGPO object by creating a new one with a call to IGPMDomain::CreateGPO, retrieving an existing one with a call to IGPMDomain::GetGPO, or by searching for one with a call to IGPMDomain::SearchGPOs. After creating the object, you can query the GPO and set properties related to the GPO.

Inheritance

The IGPMGPO interface inherits from the IDispatch interface. IGPMGPO also has these types of members:

Methods

The IGPMGPO interface has these methods.

 
IGPMGPO::Backup

Backs up a Group Policy object (GPO) to the specified directory.
IGPMGPO::CopyTo

Copies the current Group Policy object (GPO) to the specified domain and then returns a pointer to the copy of the GPO.
IGPMGPO::Delete

Deletes a Group Policy object (GPO) from the directory service and from the system volume folder (SYSVOL).
IGPMGPO::GenerateReport

Gets the report for a GPO.
IGPMGPO::GenerateReportToFile

Gets the report for a GPO and then saves the report to a file in a specified path.
IGPMGPO::GetSecurityDescriptor

Retrieves a pointer to an IDispatch interface from which the security descriptor for the Group Policy object (GPO) can be retrieved. For script programmers, this method returns a reference to an IADsSecurityDescriptor object.
IGPMGPO::GetSecurityInfo

Retrieves the set of permissions for the GPO, such as who is granted permission to edit it.
IGPMGPO::GetWMIFilter

Retrieves the GPMWMIFilter object linked to the Group Policy object (GPO).
IGPMGPO::Import

Imports the policy settings from the specified GPMBackup object.
IGPMGPO::IsACLConsistent

Checks for the consistency of ACLs between the Directory Service and the system volume folder (SysVol).
IGPMGPO::IsComputerEnabled

Checks whether the computer policies in the GPO are enabled.
IGPMGPO::IsUserEnabled

Checks whether the user policies in the GPO are enabled.
IGPMGPO::MakeACLConsistent

Makes ACLs consistent on the Directory Service and the system volume folder (SysVol) of the GPO. IsACLConsistent can be used to check for consistency of ACLs between the Directory Service and system volume folder (SysVol).
IGPMGPO::SetComputerEnabled

Enables or disables the computer settings in the GPO.
IGPMGPO::SetSecurityDescriptor

Sets the security descriptor for the GPO. The method replaces the existing security descriptor.
IGPMGPO::SetSecurityInfo

Sets the list of permissions for the group policy object (GPO), such as who is granted permission to edit it. The method replaces the existing list of permissions.
IGPMGPO::SetUserEnabled

Enables or disables the user settings in the GPO.
IGPMGPO::SetWMIFilter

Links the GPMWMIFilter object to the current Group Policy object (GPO). This method can also be used to unlink existing WMI filters from the GPO.

Requirements

Requirement Value
Minimum supported client Windows Vista
Minimum supported server Windows Server 2008
Target Platform Windows
Header gpmgmt.h

See also

IDispatch

IGPM

IGPMBackup

IGPMDomain

IGPMGPOCollection

IGPMWMIFilter