Tuesday, October 13, 2009
Group Policy CSE execution order
We have all kinds of tools to help us troubleshoot group policy processing. Modeling and RSoP in the management console get used almost every week around here. Have you ever wondered in which order the client side extensions get processed in, though? Trying to find the answer only led to the helpful but not quite user friendly answer that they are processed in the numerical order they are found in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions. However, pointy clicking my way through that list wasn't going to cut it for me. Using powershell it was pretty simple to create a user friendly human readable list. The list and the command to produce it on my Windows 7 Professional workstation are below. How to get at the information remotely, or using another tool, I haven't quite worked out yet, but this seems a good place to start.
Command (broken into multiple lines for clarity):
$key = "hklm:\software\microsoft\windows nt\currentversion\winlogon\gpextensions"
$CSEs = get-childitem $key
$CSEs | sort name | foreach-object { $_.getvalue('') }
Output:
Wireless Group Policy
Group Policy Environment
Group Policy Local Users and Groups
Group Policy Device Settings
Folder Redirection
Microsoft Disk Quota
Group Policy Network Options
QoS Packet Scheduler
Scripts
Internet Explorer Zonemapping
Group Policy Drive Maps
Group Policy Folders
Group Policy Network Shares
Group Policy Files
Group Policy Data Sources
Group Policy Ini Files
Windows Search Group Policy Extension
Internet Explorer User Accelerators
Security
Deployed Printer Connections
Group Policy Services
Internet Explorer Branding
Group Policy Folder Options
Group Policy Scheduled Tasks
Group Policy Registry
802.3 Group Policy
Group Policy Printers
Group Policy Shortcuts
Microsoft Offline Files
Software Installation
TCPIP
Internet Explorer Machine Accelerators
IP Security
Group Policy Internet Settings
Group Policy Start Menu Settings
Group Policy Regional Options
Group Policy Power Options
Audit Policy Configuration
Group Policy Applications
Enterprise QoS
CP
Not too shabby for a first blog post since I quit and decided to pick it back up again a few years later, eh?