Partilhar via

Group Policy Object Editor Tools and Settings

  • Artigo

In this section

  • Group Policy Object Editor Tools
  • Group Policy Object Editor Group Policy Settings
  • Related Information

This section describes the tools and settings that are associated with the Group Policy Object Editor server-side extension (SSE) when accessed from the Group Policy Management Console (GPMC) with Service Pack (SP) 1 applied. The Group Policy Object Editor SSE is a Microsoft Management Console (MMC) snap-in that administrators use to edit policy settings for Group Policy Objects (GPOs).

Group Policy Object Editor Tools

The following tools are associated with the Group Policy Object Editor.

Gpedit.dll: Group Policy Object Editor

Category

The Group Policy Object Editor is contained in gpedit.dll. Group Policy Object Editor is an MMC snap-in installed with Windows 2000, Windows XP, and Windows Server 2003. Gpedit.dll also contains the Resultant Set of Policy (RSoP) snap-in.

Version compatibility

You can access the Group Policy Object Editor from the Active Directory Users and Computers on Windows 2000, on Windows XP with the Windows Server 2003 Administration Tools Pack installed, and on Windows Server 2003. Administrators use the Group Policy Object Editor to edit policy settings in Group Policy objects (GPOs).

For a discussion of RSoP features provided by Gpedit.dll, see the What Is Resultant Set of Policy? topic in this collection. For more information about Group Policy Object Editor, see the What Is Group Policy Object Editor? topic in this collection.

MMC.exe

Category

MMC.exe provides a common host environment for snap-ins such as the Group Policy Object Editor and the GPMC.

Version compatibility

See MMC.exe documentation for version compatibility.

MMC.exe supplies programmatic interfaces that integrate snap-ins with the console. MMC.exe itself provides no management behavior. All management behavior is supplied by the snap-in. MMC interfaces deal only with user interface extensions.

Group Policy Object Editor MMC Extensions

The remaining tools in this section are Microsoft Management Console (MMC) snap-ins that are Group Policy server-side extensions. They extend the Group Policy Object Editor (gpedit.dll).

Gptext.dll

Category

Gptext.dll is an MMC extension to gpedit.dll that provides settings for Scripts, IP Security, and Wireless Group Policy.

Version compatibility

Gptext.dll is compatible with Windows XP SP1 and Windows Server 2003.

For more information about the Scripts, IP Security, and Wireless extensions, see the What Is Scripts Extension?, What Is Security Settings Extension?, and What Is Wireless Network Policies Extension? topics in this collection.

Fdeploy.dll

Category

Fdeploy.dll is an MMC extension to gpedit.dll that provides settings for Folder Redirection Group Policy.

Version compatibility

Fdeploy.dll is compatible with Windows XP SP1 and Windows Server 2003.

For more information about the Folder Redirection extension, see the What Is Folder Redirection Extension? topic in this collection.

Scecli.dll

Category

Scecli.dll is an MMC extension to gpedit.dll that provides settings for Security Settings Group Policy.

Version compatibility

Scecli.dll is compatible with Windows XP SP1 and Windows Server 2003.

For more information about the Security Settings extension, see the What Is Security Settings Extension? topic in this collection.

Dskquota.dll

Category

Dskquota.dll is an MMC extension to gpedit.dll that provides settings for Disk Quota Group Policy.

Version compatibility

Dskquota.dll is compatible with Windows XP1 and Windows Server 2003.

Iedkcs32.dll

Category

Iedkcs32.dll is an MMC extension to gpedit.dll that provides settings for Internet Explorer Maintenance Group Policy.

Version compatibility

Iedkcs32.dll is compatible with Windows XP SP1 and Windows Server 2003.

For more information about the Internet Explorer Maintenance extension, see the What Is Internet Explorer Maintenance Extension? topic in this collection.

Appmgmts.dll

Category

Appmgmts.dll is an MMC extension to gpedit.dll that provides settings for Software Installation Group Policy.

Version compatibility

Appmgmts.dll is compatible with Windows XP SP1 and Windows Server 2003.

For more information about the Software Installation extension, see the What Is Group Policy Software Installation Extension? topic in this collection.

Group Policy Object Editor Group Policy Settings

You can permit or prohibit use of Group Policy Object Editor through an Administrative Templates policy setting, as shown in the following table. MMC has policies that will prevent snap-ins from running. The list of snap-ins, including the Group Policy server side extension snap-ins, can be viewed in the results pane by selecting the tree-view node.

Administrative Templates Policy Setting Description

Group Policy Object Editor

USER Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited.

For a complete reference of all Administrative Templates policy settings, see Group Policy Settings Reference for Windows Server 2003.

The following resources contain additional information that is relevant to this section.