Chat now with support
Chat mit Support

GPOADmin 5.19 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Add a role

Adds a role to GPOADmin with the specified name, description, and s. Only a GPOADmin administrator can run this command.

Syntax

Add-Role [-Name] <String> [[-Description] <String>] [-s] <String[]> [-PipelineVariable <String>] [-WhatIf] [-Confirm]

Examples

$s = "BlockInheritance", "Link"

Add-Role "Linker" "Can link GPOs to SOMs" $s

This first creates an array of s. You can use the Get-s command to retrieve a list of available s. Next the Linker role is defined, created, and the s are applied.

 

Add-Role -Name "Register Role" -Description "Can register objects" -s "Register", "Unregister"

List of s can be added in-line instead of using a variable.

Get an object's security

Get an object’s security

Gets the security on the specified version controlled object. Security is set either to a container or directly on an object.

Syntax

Get-Security [-Path] <String> [[-IncludeInheritedAce]] [-Raw] [-PipelineVariable <String>]

Examples

Get-Security -Path "VCRoot:\IE Settings"

Gets the security set on the "VCRoot:\IE Settings" object.

Get-Security -Path "VCRoot:\IE Settings" -IncludeInheritedAce

Gets the security set on the "VCRoot:\IE Settings" object including inheritance.

Get-Security -Path "VCRoot:\IE Settings" -IncludeInheritedAce -Raw

Gets the security set on the "VCRoot:\IE Settings" object including inheritance in its raw format.

Set an object's security

Set an object’s security

Sets the security on the specified version controlled object.

* 
NOTE: This overwrites the existing security set on the object.
Syntax

Set-Security [-Path] <String> [-Acl] <VersionControlAce[]> [-PipelineVariable <String>] [-WhatIf] [-Confirm]

Examples

$roles = get-roles

$ace1 = New-VCAce AMER\Administrator $roles[3]

$ace2 = New-VCAce AMER\jdoe $roles[3]

Set-Security -Path "VCRoot:\IE Settings" -Acl $ace1, $ace2

Sets the security on the specified version controlled object.

Overwrite a GPOs security filter

Overrides the security filter of the specified GPO.

Examples

To add a user or group:

•
Use the Get-SecurityFilter command to store the result in a variable.
•
Use the New-Trustee command to create a trustee object from the account name specified in the domain\account format and store this in a variable.
•
Add the trustee variable to the existing security filter.
•
Use the Set-SecurityFilter command and pass the new security filter.

$gpo = Get-Item VCRoot:\SOME_GPO

$filter = Get-SecurityFilter $gpo

$trustee = New-Trustee domain\user

$filter.Add($trustee)

Set-SecurityFilter $gpo $filter

To remove a specific trustee from the security filter, use the Get-SecurityFilter command and store the result in a variable. The result is a zero based list. If you know the index of the trustee you want to remove, use the RemoveAt command on the list.

$gpo = Get-Item VCRoot:\SOME_GPO

$filter = Get-SecurityFilter $gpo

$filter.RemoveAt(1)

Set-SecurityFilter $gpo $filter

If you know the name, you can first search for the trustee and store the account in a variable then user the Remove command.

$gpo = Get-Item VCRoot:\SOME_GPO

$filter = Get-SecurityFilter $gpo

$trustee = $filter | where{$_.Name –eq ‘domain\user’}

$filter.Remove($trustee)

Set-SecurityFilter $gpo $filter

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen