A quick Google search seems to deliver few good answers, but I found a code snippet here: http://www.totalblowhole.com/new-823399-3604.html that seems to show some successful code using this flag. Other than that, I haven't spent enough time myself with this API to know for sure. Maybe Thorbjorn, who lurks here occasionally, has some insight, since I think he looked at this API a while back. Darren _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of ramji chandran Sent: Monday, August 28, 2006 3:00 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Usage of GPO_OPEN_LOAD_REGISTRY | GPO_OPEN_READ_ONLY flags Hi, Can somebody explain the real usage of flags "GPO_OPEN_LOAD_REGISTRY" and "GPO_OPEN_READ_ONLY" in the IGroupPolicy method "New"? I've a particular condition where while trying to create a GPO programmatically with the GPO_OPEN_LOAD_REGISTRY flag set it throws an error of 0x80070003(The system cannot find the path specified). This problem gets solved if I use the flag "GPO_OPEN_READ_ONLY", but causes problem while updating my CSE GUID during linking. Kindly note I do not want to create any ".pol" files that contains the registry entries. I've my configuration data separately in a XML file generated under the SYSVOL. Please advice me on the right usage of these flags and their purpose or any pointers on this would be highly appreciated. Thanks, Raghuramji C.