Chatee ahora con Soporte
Chat con el soporte

GPOADmin 5.19 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Editing scripts

To edit a script
1
Expand the Version Control Root and the required container. Select the script you want to edit within the version control container node in which it exists.
2
Right-click the script and select Edit.
3
Edit the settings.
4
Click OK.
You now have the option to check in the script to be stored for later use or check in and request approval of the changes.

Linking GPOs

Once GPOs have been created and configured, they must be linked to the appropriate sites, domain, or OU. Before you can link a GPO, you must register and check out the site, domain, or OU. For information on registering Scopes of Management, see Registering objects .

Users with the Link right can link a single GPO with numerous sites, domains, or OUs and link multiple GPOs to a site, domain, or OU. (For more information on setting permissions, see Configuring role-based delegation.)

The Link right grants the user the right to add, modify, and remove links. This right must exist on the GPO and the scope of management being linked.

The Modify Link Properties right grants the right to modify the Enabled and Enforce properties of a GPO Link. This right must exist on the scope of management.

The Edit right, grants the user the right to modify the Link order. This right must exist on the scope of management.

If you link more than one GPO, you must pay attention to their order. The first GPO has the highest precedence because it is processed last. The Link Report and Group Policy Results Report can help you understand the inheritance structure of your group policies.

* 
NOTE:  
•
The policies are applied according to the hierarchical structure of Active Directory. You can change the order in which the GPO is applied through the provided arrows.
•
You must have the Link right on each GPO and SOM to which you wish to link.

By default, GPOs affect all users and computers contained within a linked site, domain, or OU. To refine the application of a GPO, see Editing GPOs .

You can also select to restrict the link source to include only policies from specific containers. To restrict linking, see Viewing and editing object properties.

To link GPOs to a single site, domain, or OU
1
Right-click a checked out site, domain, or OU and select Edit.
2
Click New Link to add another GPO.
3
Select the appropriate option to either Enable or Enforce the GPO link.
4
Enable Block Inheritance if required.
You must have the Block Inheritance for SoM links right to enable this option.
5
Click OK.
To link multiple GPOs to multiple sites, domains, or OUs
1
Right-click one or more GPOs and select Link.
Any SOMs that you want to link the GPOs to must be in the available state.
2
In the left pane of the Link dialog box, expand the domains and select the SOMs you want to link to.
3
In the right pane, ensure that the Add check box is selected for the GPOs you want to link.
4
Select the appropriate option to either Enable or Enforce the GPO link. You can use the arrows provided to modify the link order.
5
Click OK.

You can also rollback pre-existing links between GPOs and sites, domains, and OUs when restoring GPOs. For information, see Restoring links to a previous version and Checking compliance .

Synchronizing GPOs

Synchronizing GPOs allows you to automatically push out pre-defined “primary GPO” settings to specified targets both within a forest and between two forests. This allows you to ensure specific GPOs, which are required in every domain, contain the same settings without having to link to a GPO outside of the domain.

You will be able to select one or more GPOs from various domains as synchronization targets for the source GPO. When the source GPO has been successfully deployed, the settings from the last major backup will be imported into each synchronization target GPO.

* 
NOTE: If permissions between forests are not identical, a mapping table is also available to ensure that forest specific settings are covered.
•
Enabling synchronization
•
Working with GPO synchronizations
•
Generating Synchronized GPO report

Enabling synchronization

The ability to synchronize GPOs requires that:

•
It is enabled within the source domain.
•
The source GPO must be workflow-enabled to ensure that any changes can be propagated to the targets. (The targets, however, can be workflow-disabled.)
•
Targets are registered.
•
The source GPO has been deployed at least once.
•
Target synchronization settings are configured.
•
Each domain has a GPOADmin server. Child domains of a parent domain will appear in the client by default. Trusted siblings however will not.
•
The user performing a manual synchronization or setting the synchronization targets has the Synchronize right.
To enable GPO synchronization
1
Right-click the forest and select Options.
2
Select Options| General.
3
Select Enable Group Policy Object Synchronization.
4
Click OK.
Once this has been enabled, you can access the synchronization options by right-clicking a GPO in the Version Control Root and selecting Synchronize.
Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación