Group Policy objects

When new Active Directory objects are added, system saves the object data inside the Active Directory database. But the GPO store procedure is different from the typical Active Directory object. GPO object contents are stored in two locations in the Active Directory infrastructure.

Group Policy container

As with any other object, the Active Directory database also holds GPO information. This information is more related to system settings and the path reference for the other dataset. When GPO is created, as with any other AD object, it will also have the globally unique identifier (GUID) value; this is important as this value is used by both datasets to refer to each other. This value is used in Common-Name (CN) too. Before we look into datasets, we need to find the GUID value for the GPO. This can be done using the following command:

Get-GPO -name "Test Users"

The preceding PowerShell command will list the default properties of the Test Users GPO:

In the preceding figure...