How do you find what GroupPolicy objects are attached to a container/domain/site?

I've got a problem where I need to interleave settings made on the host/user/containers/domain/site with the group policy settings attached to the containers/domain/site.

We can walk the ad tree for the host and the user and have those settings. We have our group policy list & objects and those settings. I'm just having trouble joining the 2 heirarchies back 开发者_开发百科together, I can't seem to find the appripriate API/info to do it.

You need to look at the gpLink attribute of each site, domain, and OU. You can also look at gpOptions for a handful of related flags. The gpLink attribute will have the DNs of each GPO applied to that object as well as whether or not the link is enabled or not.