Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to know what components of a GPO are stored in Active Directory. Is it all on the file system?

share|improve this question
up vote 2 down vote accepted

Nothing in the GPO is stored in the AD database, really. It's all in the SYSVOL (IIRC) on the domain controllers. AD has a GUID pointer to the location on the filesystem, and of course who it applies to, any permissions on it, etc.

share|improve this answer
The GPC is stored in AD and the GPT is stored in SYSVOL, which I think is what you're saying, but one without the other would be of no use. – joeqwerty Dec 15 '10 at 15:48
Yup, you got the terminology correct. – mfinni Dec 15 '10 at 15:50
You got what I was looking for... where is the GUID pointer within AD? – LamonteCristo Dec 15 '10 at 16:12
CN=Policies,CN=System,DC=something,DC=something,DC=something – mfinni Dec 15 '10 at 16:30
@Maker - you can find that sort of thing by doing a little bit of google-searching, a little bit of studying/certification for AD, or by just playing around with tools like AD Explorer from SysInternals. I'm not telling you not to ask questions here, and your main question was a good one - but once you got the details on the GPC and GPT from @joeqwerty, you definitely should have had enough info to go find the easy things on your own. – mfinni Dec 15 '10 at 16:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.