Tchater maintenant avec le support
Tchattez avec un ingénieur du support

GPOADmin 5.19 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Viewing history

You can easily create a report that displays the historical settings for objects in the Version Control system or a comparison of versions. When you view the history in the GPMC Extension, all events are shown. The GPOADmin console has a filter option that you can use to choose which events to display.

1
Expand the Version Control Root node, and the required container.
6
Click Print to print the report.
Click Save As to save the report in HTML.
7
Click Close.
3
Click Print to print the report.
Click Save As to save the report in HTML.
4
Click Close.

For more information on the available reports, see Creating Reports .

Deleting version history

As you progress an object through the Version Control workflow, GPOADmin keeps an audit trail, as well as a history of all minor and major versions. If you no longer need to keep this history, you can selectively delete any of the versions except your last backup. Only the object settings are deleted; the audit trail is preserved, and you still see the entry in the object history. Deletions are permanent.

If required, you can select to remove the user account associated with the action from the view.

1
Expand the Version Control Root node, and the required container.
3
In the History dialog box, select a version from the list. (Press CTRL and click to select multiple versions.)

You can only delete major and minor versions. If you have Show All Events enabled, events that have occurred between versions cannot be deleted, as there are no settings associated with them.
Delete: This will delete the backup associated with the action.
Delete and Clear Account: This deletes the backup and clears the account name associated with the action.
2
In the bottom pane, select a version. (Press CTRL and click to select multiple versions.)
3
Select Delete to remove the backup associated with the action.
Delete and Clear Account to remove the backup and clear the account name associated with the action.

Clearing account names in version history

If required, you can remove the user account associated with a backup version from the historical view.

1
Expand the Version Control Root node, and the required container.
3
In the History dialog box, select a version from the list. (Press CTRL and click to select multiple versions.)
2
In the bottom pane, select a version. (Press CTRL and click to select multiple versions.)

Viewing and editing object properties

You can easily view and edit the details for the current version of an object in the Version Control system including the security, notification settings, keywords, approvals, lineage, remediation options, as well as the object’s location within version control.

You can also view important information about changes made in the live environment on the Change Auditor tab, if you have a supported version of Change Auditor. See the Release Notes for a complete list of supported versions.

1
Expand the Version Control Root node, and the required container.
Table 14. Options

General

 

View the domain, user, the creation and modification dates, the version, the unique ID, location in version control, and the GPO status. From here you can also see and, if required, change the user responsible for an object’s management (Managed By property).

Links (From the GPO Properties page)

Edit the link to Scopes of Management.

Lineage

Manage GPO revisions by selecting a specific GPO to revert to when a rollback is performed.

Security

Delegate responsibilities over the object.

Policy Baseline

Assign a policy baseline to a policy and monitor the policy for deviations from the baseline.

Approvals

Approval workflows for object creation, deletion, or modification.

By default, approvals are processed in the order listed on the Approvals tab in the Container or Item Properties.

NOTE: Click the Override inherited work flow check box if you want the approvals process for a container to be different from its top level container.

Link Source

Restrict linking by including only policies from specific containers.

Notifications

Select the actions to be notified on.

Remediation

Manage which action will occur automatically when an object becomes non-complaint due to an edit or deletion performed outside of GPOADmin.

Change Window

Set the day and time when users can make modifications to objects.

Attestation

Set the date range limit for a GPO deployment and configure the notification message that is sent when the limit is surpassed

The version control system is polled every 24 hours to identify GPOs that have not been deployed within the specified date range. Once identified, the attestation email notification is sent to the account that is designated as its manager (Managed By property).

Keywords

View all the keywords for a given object. For here you can also, add and remove keywords as required.

When a new keyword is entered it is saved into a primary list of keywords. This list is displayed for each object. The checkboxes indicate which keywords are applied to each object.

Group Policy Inheritance

View the group policy inheritance for the selected Scope of Management. including the location where they are linked and the order in which they will be applied.

Change Auditor

View changes made to objects in the live environment. You can move the columns and sort by columns.

Naming Standards

Item Name: Test *

Escaped: 'Test `*'

Select to enforce naming conventions for GPOs and WMI filters.

Enter the rule, a test name, and click Verify to ensure its accuracy.

 

Example rule:

^[a-z]+[0-9]+_GPO$

 

 

This rule states that from the start of the line there must be at least one or more lower-case characters immediately followed by at least one or more numeric characters immediately followed by the literal string “_GPO” and nothing after that.

 

a1_GPO passes

abc123_GPO passes

_a1_GPO fails

a1_GPO_ fails

A1_GPO fails

A1_gpo fails

Table 15. Options

General

 

View the domain, user, the creation and modification dates, the version, the unique ID, location in version control, and the GPO status. From here you can also see and, if required, change the user responsible for an object’s management (Managed By property).

Links (From the GPO Properties page)

Edit the link to Scopes of Management.

Lineage

Manage GPO revisions by selecting a specific GPO to revert to when a rollback is performed.

Security

Delegate responsibilities over the object.

Approvals

Number of required approvers for object creation, deletion, or modification.

Notifications

Select the actions to be notified on.

Remediation

Manage which action will occur automatically when an object becomes non-complaint due to an edit or deletion performed outside of GPOADmin.

Keywords

View all the keywords for a given object. For here you can also, add and remove keywords as required.

When a new keyword is entered it is saved into a primary list of keywords. This list is displayed for each object. The checkboxes indicate which keywords are applied to each object.

Change Auditor

View changes made to objects in the live environment. You can move the columns and sort by columns.

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation