Chatee ahora con Soporte
Chat con el soporte

GPOADmin 5.21 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Microsoft 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Changing the approval workflow

By default, approvals are processed in the order listed on the Approvals tab in the Container or Item Properties. Optionally, approvals can be performed base on count where the any approver can approve at any time. In this case, the item status will change to Pending Deployment once the total number of received approvals equals the total sum of the required approvals.

* 
NOTE: You can select the Override inherited work flow check box if you want the approvals process for a container to be different from its top level container.
To change an approval workflow
1
Select a version control container or object, right-click and select Properties.
2
Open the Approvals tab and select the workflow type you want to manage.
Approval workflows can be set for object creations, deletions, and modifications.
To add a level of approval
1
Click Add to select a user or group.
2
Use the arrow keys to the left of the dialog box to alter the order in which the approvals must take place.
If a group is selected, you must specify how many members of that group must approve the item before it can proceed to the next stage.
3
Once you have all steps added to the new workflow, click Apply, then OK.
To delete a level of approval
1
Click the "-" button to the right of the level of approval you do not want.
* 
NOTE: Be certain you want to remove the level as there is no step to ensure you have chosen the correct level - it is removed as soon as you click on the "-" button.
2
Use the arrow keys to the left of the dialog box to alter the order in which the approvals must take place.
3
Once you have all steps added to the new workflow, click Apply, then OK.
To modify a level of approval
1
Follow the steps above to add or delete steps in the workflow.
2
Where you have selected a group as part of the approval workflow, you can change the value in the Approval Count Window to modify the number of members of that group who must agree to the change before it proceeds to the next level of approval.
3
Use the arrow keys to the left of the dialog box to alter the order in which the approvals must take place.
The approvals will be handled from top to bottom of the displayed table.
4
Once you have modified the workflow, click Apply, then OK.

Withdrawing approval

Before the final approval has been made and the changes have been deployed, any approver has the right to withdraw their approval. When any approval is withdrawn, the process begins again from the start.

Approving and rejecting edits

Once an object has been checked in and the Approver has been notified that the offline changes are ready for approval, the changes are either approved or rejected.

* 
NOTE: Before the approval of a change takes effect, the Version Control system detects if an object was changed unknowingly or outside the scope of the system and prompts the approver with the appropriate action to take. They can choose to overwrite the object or leave it as is.
 
Table 16. Approving Changes
If the changes are approved and deployed
If the changes are rejected
•
The settings are applied to the live object and its major version number is incremented. (For example, v2.0)
•
The settings from the offline object are applied to the live object.
•
The next time a check out occurs, the process repeats of creating a new offline copy of the live group policy object.
•
Nothing happens and the status is set back to an available state so it can be checked out again.
NOTE: If the changes are only approved but not deployed, their status is changed to Pending Deployment and those GPOs can be seen in the Pending Deployment search folder.
To approve edits in the GPOADmin console
1
Expand the Version Control Root node, and the required container.
2
Right-click a controlled object in the Pending Approval state, and select Approve.
3
Enter a comment and click OK.
If you have the required permission, you can deploy the updates to the enterprise at this time. If not, the object will be set to the Pending Deployment state. For information on deploying objects, see Deploying objects (scheduling and associated items) .
To approve edits in the GPMC Extension
1
Click the GPO in the Pending Approval state, and click Workflow | Approve.
2
Enter a comment and click OK.
To approve or reject edits through email
1
If this option has been configured by the administrator (see Configuring the Version Control server), approvers will receive an email with the subject line “Approval Request Notification”.
The email contains a Settings report that you can review before making your decision.
2
Click to Approve or Reject and enter a comment as the body of the new email message to perform the selected action for the requested changes.
To reject edits in the GPOADmin console
1
Expand the Version Control Root node, and the required container.
2
Right-click a controlled object in the Pending Approval state, and select Reject.
3
Enter a comment, and click OK.
To reject edits in the GPMC Extension
1
Right-click the GPO in the Pending Approval state, and click Workflow | Reject.
2
Enter a comment, and click OK.

Deploying objects (scheduling and associated items)

Deploying changes within the system is a critical process that affects the live environment. To minimize the impact of disruption, this process should be done during a time period when the impact to users is minimal as the changes may alter the behavior of particular systems.

To reduce any issues, you can schedule the deployment of the changes for a specific date and time that best suits your needs. You can also schedule a deployment based on a different time zone, for example if the client is not in the same time zone as the server and you want to deploy based on the client’s time zone.

If you have multiple approvers:

•
Scheduling will only be available during the final approval and deployment.
•
If the scheduled approval fails due to non-compliance or for any other reason, the Deployer will be notified.
•
Only the Deployer can cancel the scheduled deployment.
* 
NOTE: Before you deploy a GPO, ensure that it is not cloaked. If you deploy a cloaked GPO, and then later deploy it uncloaked, it will be flagged as noncompliant.

During the deployment of an object, you have the option to identify and deploy any associated items (in the pending deployment state). When the associated objects are deployed they are subject to all regular compliance checks (including security checks).

* 
NOTE: This availability of the associated items option must be configured on the server by the administrator. For details, Configuring the Version Control server.
To deploy an approved object using the GPOADmin console
1
Expand the Version Control Root node, and the required container.
2
Right-click an object in the Approved state, and select Deploy.
3
Enter a comment.
4
Select the deployment time frame.
You have the option to deploy the changes immediately or at a specified time.
* 
NOTE: To synchronize during an immediate deployment (a non-scheduled deployment), the user deploying the GPO must have the Synchronize right.
If you select Schedule deployment for a later date, set the date and time, select an appropriate time zone if required, enter a comment, and click OK.
After you have scheduled a time, a clock icon appears beside the object and the Deployment Time column reflects the scheduled deployment.
* 
NOTE: If a scheduled deployment fails for any reason, the deployment is canceled and the object remains in the Pending Deployment state.
You now have the option to identify and deploy associated items.
5
Enable the Identify associated items option to see a list of all associated pending deployment items that you have Read access to.
Any items that you do not have access to and can therefore not deploy, will display in grayed out text.
6
Enable the Deploy associated items option to deploy the associated items.
* 
NOTE: You must have been delegated the Deploy right on the associated items to deploy them.
NOTE: If this is a scheduled deployment, all associated objects in a pending deployment state will be deployed even if the scheduling user does not has the rights to deploy them. In this case, the service account will be doing the deployment and it will have the required rights to all objects.
To deploy an approved GPO using the GPMC Extension

You can only deploy GPOs using the GPMC Extension. To deploy SOMs or WMI filters, use the GPOADmin console.

1
Select the approved GPO and click Workflow | Deploy.
2
Enter a comment.
3
Select the deployment time frame, including a time zone if required, and click OK.
To reschedule a deployment using the GPOADmin console
1
Right-click the required controlled object and select Deploy.
2
Select the date and time, select an appropriate time zone if required, enter a comment, and click OK.
To reschedule a deployment using the GPMC Extension:
1
Select the GPO and click Workflow | Deploy.
2
Select the date and time, select an appropriate time zone if required, enter a comment, and click OK.
To cancel a deployment using the GPOADmin console
•
Right-click an object in the Pending Deployment state and choose Cancel Deployment.
Right-click an object in the Pending Deployment state and choose Deploy. Select Cancel pending deployment.
To cancel a deployment using the GPMC Extension
•
Select the GPO in the Pending Deployment state and click Workflow | Cancel Deployment.
Select the GPO in the Pending Deployment state and click Workflow | Deploy, then select Cancel pending deployment.
Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación