windowswideopen.com

Client-side extensions are responsible for implementing Group Policy on the client computers.

When client computers are processing group policies client-side extensions are only loaded when needed. Here are the steps for a client computer to process group olicy:

1. Client computer gets a list of Group Policy Objects
2. Client then checks all the Client-side extensions and determines whether each Client-side extension has any data in any of the GPOs.
3. If a Client-side extension has data in a GPO, the Client-side extension is called with the list of Group Policy Objects that it should process.

Here are a list of the client side extensions

Client-side extension Name DLL file name

Disk Quota Dskquota.dll

Encrypting File System (EFS) Recovery Scecli.dll

Folder Redirection Fdeploy.dll

Internet Explorer Branding Iedkcs32.dll

IP Security Gptext.dll

Registry Userenv.dll

Scripts Gptext.dll

Security Scecli.dll

Software Installation Appmgmts.dll

Now a Global Unique Identifier (GUID) is a 128 bit number that identifies the client side extension to the operating system. Here the GUIDs asscoiated with the client side extensions listed above:

Note: GP Client Extensions are register in the registry here: HKLM\Software\Microsoft\WindowsNT\CurrentVersion

\Winlogon\GPExtensions

Group Policy Client Extension

Folder Redirection 25537BA6-77A8-11D2-9B6C-0000F8080861

Registry Settings 35378EAC-683F-11D2-A89A-00C04FBBCFA2

Disk Quota 3610EDA5-77EF-11D2-8DC5-00C04FA31A66

Scripts 42B5FAAE-6536-11D2-AE5A-0000F87571E3

Security 827D319E-6EAC-11D2-A4EA-00C04F79F83A

Internet Explorer Settings A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B

EFS Recovery B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A

Application Management C6DC5466-785A-11D2-84D0-00C04FB169F7

IP Security E437bc1c-aa7d-11d2-a382-00c04f991e27

See Also:
More at WindowsWideOpen.com

Windows Authentication Troubleshooter
What are the difference between domain local, global and univeral groups
Troubleshooting Windows User Profiles
Useful Links for Troubleshooting Active Directory
Howto Force AD Software Deployment Policies at Logon
How to Troubleshoot Active Directory Software Deployment Problems
Active DirectoryActive Directory

Filed under: Active Directory