RE: [ActiveDir] Active Directory Programming

[Darren Mar-Elia]

Joe's right (surprise!)--there is definitely no interface today for programmatically changing settings within a GPO. If you look at the methods on IGroupPolicyObject, none of them refer to being able to get inside the GPO--they simply provide a way to do the things that you can already do in GPMC or against AD directly (in the case of modifying GP Options). That said, don't be surprised if, in the near future, you do see someone come out with a way of programmatically modifying GP settings.     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, September 20, 2004 7:46 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Active Directory Programming I haven't personally seen a method that could do it and when I queried BJ (PM for GPMC) back at the Windows Server 2003 RDP conference about it he indicated that that functionality still wasn't available in the soon to be released (at the time) GPMC though they were thinking about it for an unnamed future version of GPMC.   I would love to hear if someone has figured out how to do this through some poorly documented interface though.   Here are the GPMC interfaces Darren eludes to   http://msdn.microsoft.com/library/default.asp?url="">     All of that being said, you could look at modifying the GPOs via manipulation of the backend text files. You would also want to update version info in the text files and AD objects as well.   I think the issue with the fact that the API doesn't exist is that GPOs are pretty flexible, every time new functionality was added to them through a template or whatever, you would have to issue a new updated COM interface or else the interface would be so generic as to be nearly on the same level as updating the text files directly.       joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of NARENDRA K V - SPAN Sent: Monday, September 20, 2004 10:30 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Active Directory Programming Thanks Joe and Darren   So Is it confirmed that I will not be able to set Programmatically the GPO settings like “Maximum Password Age” of <Group Policy>/Computer Configuration/Windows Settings/Security settings/Account Policies/Password Policy   But This link says that “The IGroupPolicyObject interface provides methods to create and modify a GPO directly, without using the Group Policy Object Editor.”   http://msdn.microsoft.com/library/default.asp?url="">   As I found few discussions on Microsoft Support Site   http://groups.google.co.in/groups?q=BrowseForGPO&hl=en&lr=&ie=UTF-8&selm=%23pC42CkpCHA.2308%40TK2MSFTNGP10&rnum=1   I feel there is should be some way.   Any Suggestions Please let me know.   Thanks Again Naren       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Monday, September 20, 2004 7:07 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Active Directory Programming   To add onto what Joe said, check out the GPMC, which provides a set of COM/.Net interfaces for doing a few more tasks against Group Policy, including being able to manipulate gpLinks, set permissions on a GPO and ability to create/backup GPOs.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, September 20, 2004 6:25 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Active Directory Programming You can't edit the specific GPO settings that are applied to users and computers through any of the interfaces currently. You can only manipulate things like GPO displayname, enabled/disable the user or computer pieces of a gpo, etc.     joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of NARENDRA K V - SPAN Sent: Monday, September 20, 2004 7:52 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Active Directory Programming I need to edit the Group Policy settings via API. In MSDN site it mentions that using IGroupPolicyObject we can achive it.    If any one has already worked on those please help me out. Or  even suggestions would be helpful.   Thanks Again Naren   DISCLAIMER ------------------------------------------------------------------------------------ This email message and any attachments is confidential and intended only for the use of an individual or entity named above and may contain information that is privileged, confidential or exempt from disclosure under applicable law.  If you are not the intended recipient, you are notified that any dissemination, distribution or copying of this email is strictly prohibited. If you have received this email in error, please notify us immediately by return email or [EMAIL PROTECTED] and destroy the original message. Opinions, conclusions, and other information in this message that do not relate to the official business of SPAN, shall be understood to be neither given nor endorsed by SPAN   ________________________________________________________________________ Queries to: [EMAIL PROTECTED]   DISCLAIMER ------------------------------------------------------------------------------------ This email message and any attachments is confidential and intended only for the use of an individual or entity named above and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If you are not the intended recipient, you are notified that any dissemination, distribution or copying of this email is strictly prohibited. If you have received this email in error, please notify us immediately by return email or [EMAIL PROTECTED] and destroy the original message. Opinions, conclusions, and other information in this message that do not relate to the official business of SPAN, shall be understood to be neither given nor endorsed by SPAN ________________________________________________________________________ Queries to: [EMAIL PROTECTED]