1. A method comprising: sending, by a client device, a directory server access request to a directory server in a domain controller for a policy associated with the client device; receiving, at the client device, metadata for the policy associated with the client device in response to the request, the metadata to identify an address of policy data in a filesystem; sending, by the client device, a file transfer request to a file server managing the filesystem in the domain controller for the policy data at the address in the filesystem identified by the metadata; receiving, at the client device, the policy data from the domain controller, the client device running an operating system that does not natively support policy retrieval from the directory server and file server; identifying a policy type of the received policy data; identifying, by a processing device of the client device, a policy processing plug-in associated with the identified policy type from a plurality of available policy processing plug-ins, wherein each of the plurality of available policy processing plug-ins is associated with a different policy type and is connected to the operating system on the client device through a plug-in interface; and providing the received policy data to the identified policy processing plug-in for processing.