GPOADmin 5.19 - Quick Start Guide

For all Active Directory deployments, the application information along with the GPOADmin Version Control System is stored in the configuration container of Active Directory in the following location:

CN=QGPM,CN=Quest,CN=Services,CN=Configuration,DC=Domain,DC=com

Where if you drilled down on the GPOADmin container you will find the following directories:

- CN=QGPM

- CN=Wentworth

+ CN=Roles (Custom Roles location)

+ CN=Users (Where users' preferences are stored)

+ CN=VCRoot (The root of the version control container hierarchy)

+ CN=Version Control (Pointers to backups' locations (perhaps also backups themselves if 'Directory' is selected as the backup storage location) and controlled object history)

+ CN=Scheduled Actions

Since this information is stored in the configuration container of Active Directory, it is replicated to all other DCs within your forest. However, the primary version control server is unique and the authoritative source for all version control actions. The primary version control server role is normally held by the DC specified during the initial run of the Server Configuration wizard shortly after the GPOADmin server and service have been installed.

Active Directory Lightweight Directory Services (AD/LDS) deployments

For all AD LDS deployments, the application information, along with the GPOADmin Version Control system, follows the same format as the Active Directory deployment with the exception that the application information and Version Control system is stored in the configuration of the AD LDS instance. The information is not replicated to other AD LDS servers (unless manually set up) like Active Directory replicates information with the configuration container.

SQL storage

During configuration of the Version Control server, you now have the option to select to store GPOADmin data in a SQL database. If you select this option, the data can be found in the following tables:

Table 1. Database Tables
Table	Description
AclTable	Contains access control list information when cloaking or locking GPOs.
ApprovalWorkflow	Contains approval workflow information.
BackupData	Contains backup information such as date, location, and storage type.
CustomSearchFolders	Contains custom search folder information.
Domains	Contains registered domain names, their Id, and whether or not they are visible in the live environment.
DomainSecurity	Contains a mapping of which rights a user has for a registered domain.
EmailTemplateAttachments	Contains a mapping of which attachments are to be include with what email template for a given notification type.
EmailTemplates	Contains email template information.
EmailTemplateSubjectLines	Contains custom email template subject line information.
ExchangeSettings	Contains Exchange settings.
GmailSettings	Contains Gmail settings.
GPOLineage	Contains a mapping of GPO lineage for a given registered GPO, when the lineage was assigned, and by whom.
GPOLinks	Contains a mapping of GPO links between the GPO and the SOM.
History	Contains a historical list of actions for any registered object or container.
KeywordList	Contains a mapping of keywords to registered object.
LiveEnvironmentAccess	Contains a list of trustees who have access to the live environment.
MasterKeywordList	Contains a list of all keywords.
Notifications	Contains a mapping of which notifications are enabled for a given user on a given registered object or container.
ObjectData	Contains registered object information.
ProtectedSettingsAssignments	Contains a mapping of which protected settings policies are assigned to a specific container.
ProtectedSettingsExclusions	Contains a list of policies that are excluded from verification of a given protected settings policy.
Remediation	Contains remediation information for a given registered object or container.
Roles	Contains default and custom role information.
RootContainerAssignments	Contains a mapping between a trustee and their root container assignment.
ScheduledTasks	Contains a list of all scheduled deployment tasks.
Security	Contains a list of GPOADmin permissions assignments for a given registered object or container.
ServiceIDs	Contains a list GPOADmin service host names and UIDs.
ServiceOptions	Contains the list of service options and there current values.
SOMLinks	Contains the list of GPO links for a given SOM.
SynchronizationResults	Contains a list of the results for a given GPO synchronization.
SynchronizationTargets	Contains a mapping between a source GPO and it synchronization targets.
Trustees	Contains a list of trustees who have been granted access to GPOADmin as either a user or administrator.
VersionControlContainers	Contains a mapping of child and parent version control containers.
WatcherData	Contains a temporary list of newly created or registered items for the watcher service to monitor.
WorkingCopy	Contains a mapping between a registered object and its working copy.