Tchater maintenant avec le support
Tchattez avec un ingénieur du support

GPOADmin 5.16 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root) Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Locking a GPO

Locking allows you to lock a policy so other users cannot edit it. The Locking role has to be created and consists of the Lock/Unlock right. For example, you may choose to lock the Default Domain Policy and/or Default Domain Controller Policy as any modification to these settings would affect every GPO in the organization.

When a GPO is locked using GPOADmin, it is also locked in the live environment. All users can see the GPO, but no one can edit it.

By default, Domain Administrators can see all locked GPOs and unlock any locked GPO. Locked GPOs are indicated by a lock icon.

* 
NOTE: Only GPOs can be locked. (You cannot lock WMI Filters or Scopes of Management).
To lock a GPO using the GPOADmin console
1
Select the GPO you want to lock from the list of GPOs within the Version Control Root node.
2
Right-click and select Lock.
Locked GPOs are displayed in the Locked search folder.
* 
NOTE: When a user with the right to lock GPOs connects to the GPOADmin console, they will see all locked GPOs. A Locked GPO must be unlocked before any actions can be performed (even if you are a system administrator.) Locked GPOs can be viewed in the Search Folders in the GPOADmin console.
3
Enter a comment and click OK.
To lock a GPO using the GPMC Extension
1
Select the GPO you want to lock from the list of GPOs and click Lock.
2
Enter a comment and click OK.

Establishing Management for an Object

If you have the Modify Managed By right, you can set the user responsible for an object’s management.

* 
NOTE: The Managed By property is a textual field which can be used to sort objects by and as no affect on the objects security.
To set or change the user responsible for an object’s management
1
Expand the Version Control Root node, and select an object.
2
Right-click and select Managed By.
3
Enter or browse for the required account and click OK.
You can also assign management on a container by right-clicking on it an selecting Properties and selecting the required account.
 
* 
NOTE: Any child containers or objects below this container that do not have a managed assigned to them will automatically use this one.

Viewing history

Viewing history

You can easily create a report that displays the historical settings for objects in the Version Control system or a comparison of versions. When you view the history in the GPMC Extension, all events are shown. The GPOADmin console has a filter option that you can use to choose which events to display.

To view the history using the GPOADmin console
1
Expand the Version Control Root node, and the required container.
2
Right-click an object and select Show History.
3
Select a version in the list.
4
Select which, if any, filtering options you would like to apply, then right-click, and select View to view the historical information.
5
To view the difference between various check ins, select the required versions, right-click and select Differences.
6
Click Print to print the report.
Click Save As to save the report in HTML.
7
Click Close.
* 
NOTE: You can also restore links between a GPO and its Scopes of Management from the history view. For more information, see Restoring links to a previous version .
To view the history using the GPMC Extension
1
Select the GPO and click Show History.
The history displays in the bottom pane of the GPO Management tab. You will see the name, version, action, account, date and comment pertaining to the history item.
2
To view the difference between various check ins, select the required versions, right-click and select Differences.
3
Click Print to print the report.
Click Save As to save the report in HTML.
4
Click Close.

For more information on the available reports, see Creating Reports .

Deleting version history

As you progress an object through the Version Control workflow, GPOADmin keeps an audit trail, as well as a history of all minor and major versions. If you no longer need to keep this history, you can selectively delete any of the versions except your last backup. Only the object settings are deleted; the audit trail is preserved, and you still see the entry in the object history. Deletions are permanent.

If required, you can select to remove the user account associated with the action from the view.

* 
NOTE: When a new version is created, an internal record of the action that generated the version is kept—including the user that performed the action, the date and a label if one was created. You may wish to view this audit trail in a History report before deciding which versions you want to delete. For more information, see Historical Settings Reports .
To delete version history in the console
1
Expand the Version Control Root node, and the required container.
2
Right-click an object and select Show History.
3
In the History dialog box, select a version from the list. (Press CTRL and click to select multiple versions.)

You can only delete major and minor versions. If you have Show All Events enabled, events that have occurred between versions cannot be deleted, as there are no settings associated with them.
4
Right-click and then select:
Delete: This will delete the backup associated with the action.
Delete and Clear Account: This deletes the backup and clears the account name associated with the action.
5
In the confirmation dialog box, click OK.
After you delete a version history, it remains on the list, but is unavailable.
* 
NOTE: Once you have deleted version history, it cannot be undone.
To delete version history of a GPO using the GPMC Extension
1
Select the GPO and click Show History.
2
In the bottom pane, select a version. (Press CTRL and click to select multiple versions.)
You can only delete major and minor versions. Events that have occurred between versions cannot be deleted, as there are no settings associated with them.
3
Select Delete to remove the backup associated with the action.
-OR-
Delete and Clear Account to remove the backup and clear the account name associated with the action.
4
In the confirmation dialog box, click OK.
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation