GPOADmin 5.16 - User Guide

Export objects

Using the Export Wizard, you can test objects offline before they are implemented in the live enterprise. A typical scenario would be to:

•

Check-out an object and make the desired changes.

Before you check in the change and request approval, you can test the edits.

•

Export the object to another domain and test the updates.

If you see an issue you can change it in the test domain.

•

Import the object.

•

Check in the new and improved changes for approval.


	NOTE: In the Pending Approval state, exporting the object provides an additional level of quality control before changes are made live in the enterprise.

The following built in roles can perform an export:

•

Moderator

•

System Administrator

•

User

Alternatively, you can create a custom role that includes Read and Export rights.


	NOTE: The exported objects must adhere to the naming conventions set on the destination container. Administrators can override this and move objects that do not comply; however, once moved the objects must adhere to the container naming conventions.

Migration table considerations

•

When migrating to an untrusted domain, the source entries must be SIDs and the Source Type must be set to Free Test or SID.

•

If migrating the Security Filter, the source entries (for the Security Filter only) must be in domain\account format. NT AUTHORITY accounts should have a Destination Name of <Same As Source>.

•

If an account cannot be mapped, it is logged in the format that GPMC is looking for.

•

If an entry is logged, change the source format to the format that is logged and try again.

To export objects to a test environment

Select the number of objects you want to export, either by using Ctrl + click to select multiple items, or Shift + click at the top and bottom of a contiguous series of items to select them all.

To export a single object, right-click the object.

Select Export.


	NOTE: If you are using the GPMC Extension, you can also select the GPO and click Workflow\|Export.

Select the version that you want to export and click Next.

Select the target.

You can select a local directory or network share, another version control system, or a test domain in the live network.

To select a local directory or network share:

•

Select A backup on disk and click Next.

•

Select the backup directory and click Next.

•

Click Finish.

To select another Version Control system

•

Select a Version Control Server and click Next.

•

Select a Target Folder and click Next.

•

Select a Version-Controlled Domain and click Next.

•

Select a migration table, if required, and click Next.


	NOTE: You also have the option to use the migration table exclusively and to migrate the security filter.

•

Click Finish.

To select a test domain in the live environment

•

Select The live environment and click Next.

•

Select the target domain and click Next.

•

Select a migration table, if required, and click Next.


	NOTE: You also have the option to use the migration table exclusively and to migrate the security filter.

•

Click Finish.

Once you have reviewed the settings and the effects on the target domain, check in the object and request Approval. For more information, see Requesting approval .

Exporting GPO registry settings as a Desired State Configuration resource file

Desired State Configuration extends Microsoft PowerShell to facilitate environment configuration – including your GPO deployment. Through GPOADmin, you can export GPO’s user and/or computer registry settings into a resource file to take advantage of this feature. See https://docs.microsoft.com/en-us/powershell/scripting/dsc/overview/overview?view=powershell-7.1 for more information.

To export GPO registry settings:

Right-click the required GPO and select Export As Desired State Configuration Resource.

Define the resource file and settings that you want to export.

File Name - The full path to the DSC resource file to save.

Configuration Name - The configuration used to “group” the registry settings.

Node Name: The node (computer) the configuration will apply to.

Select whether to export user, computer, or both registry settings.

Click Next.

To register the exported resources, enable the option, browse to select the target container, and click Next.

Review the summary information and click Finish.


	NOTE: You can also uses the Select-ExportAsDSCResource PowerShell command to export the settings. You cannot register the resources using this command.