Ok, part of all this we've already talked about requires that you have the policy's GUID. But how do you get it? Simple enough: private string Query(string Criteria, string Attribute) { DirectorySearcher mySearcher = new DirectorySearcher(new DirectoryEntry("LDAP://DC=D... null, null, AuthenticationTypes.Secure )); mySearcher.ClientTimeout = new TimeSpan(0, 0, 10); mySearcher.Filter = Criteria; mySearcher.SearchScope = SearchScope.Subtree; try { SearchResult result = mySearcher.FindOne();...