Security Strategies in Windows Platforms and Applications, 3rd Edition

Types of GPOs in the Registry

Windows stores many Group Policy settings in the Registry. The Registry is a database on each Windows computer that stores configuration settings for the computer and users. The Group Policy Settings Reference spreadsheet lists the key locations for settings stored in the Registry. The Registry stores Group Policy settings either in HKEY_CURRENT_USER (HKCU) or HKEY_LOCAL_MACHINE (HKLM). HKCU keys define settings that are specific to each user. HKLM keys define settings that apply to the computer, regardless of who is logged on.

Technical TIP

Recall that Microsoft publishes a handy spreadsheet that lists all of the Group Policy settings included when you install your operating system. Microsoft includes several ...