Mastering Active Directory

Group Policy container

As with any other object, the Active Directory database also holds GPO information. This information is more related to system settings and the path reference for the other dataset. When GPO is created, as with any other AD object, it will also have the globally unique identifier (GUID) value; this is important as this value is used by both datasets to refer to each other. This value is used in Common-Name (CN) too. Before we look into datasets, we need to find the GUID value for the GPO. This can be done using the following command:

Get-GPO -name "Test Users"

The preceding PowerShell command will list the default properties of the Test Users GPO:

In the preceding figure, the Id attribute represents the GUID value ...