JSI Tip 2638. How do I identify a Group Policy client-side extension when the log file only contains the GUID?

When you configure Group Policy, you use the Graphical User Interface (GUI). When the policy is applied, the Winlogon process pass the list of GPOs to the Group Policy client-side extension for processing.

When viewing event log entries or log files, you often find the GUID (Globally Unique IDentifier) and not the policy name. The following GUIDs are the same for each Windows 2000 installation:

25537BA6-77A8-11D2-9B6C-0000F8080861 - Folder Redirection

3610EDA5-77EF-11D2-8DC5-00C04FA31A66 - Microsoft Disk Quota

42B5FAAE-6536-11D2-AE5A-0000F87571E3 - Scripts

827D319E-6EAC-11D2-A4EA-00C04F79F83A - Security

B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A - EFS Recovery

C6DC5466-785A-11D2-84D0-00C04FB169F7 - Application Management

A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B - Internet Explorer Settings

35378EAC-683F-11D2-A89A-00C04FBBCFA2 - Registry Settings

e437bc1c-aa7d-11d2-a382-00c04f991e27 - IP Security

Additional Microsoft and 3rd-party client-side extensions are located at:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogonGPExtensions