Tchater maintenant avec le support
Tchattez avec un ingénieur du support

GPOADmin 5.16 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root) Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Setting when users can modify objects

If required, administrators can restrict deployment windows by setting the day and time when users are allowed (or denied) to make modifications to objects. If a user checks out an object during the time period where changes are not permitted, all the management options will be unavailable.

* 
NOTE: Only users with the Modify Change Window right can set the change window time frame.
NOTE: Administrators with the Modify Change Window right can override this option and make changes outside the allowable change window.
NOTE: PowerShell commands are not available for this feature.
To set a specific time when users can or cannot make changes to objects:
1
Right-click the object that you want to manage and select Properties.
2
Select the Change Window tab.
If you are an administrator with the appropriate right, the Override parent settings option is enabled so that you can set the change window.
3
Select time frames individually (or select and drag to highlight the required time frame) and choose Denied or Allowed as required. Allowed hours display in blue, and denied hours display in white.
Alternatively, you can:
•
Select to allow all, then deny specific days or a combination of days and hours.
•
Select to deny all, then allow specific days or a combination of days and hours.
4
Click Apply to apply the settings and close the dialog.
Once set, users will not be able to modify objects outside of the allowed change window.

Working with registered objects

Regardless of the status of the registered GPO, starter GPOS, scripts, DSC scripts, WMI filter, domain, site, or OU (Available, Checked Out, Pending Approval, and Pending Deployment), you can perform the following tasks if you have the appropriate role:

•
Creating labels
•
Cloaking a GPO (applies to available GPOs only)
•
Locking a GPO (applies to available GPOs only)
•
Establishing Management for an Object
•
Viewing history
•
Deleting version history
•
Clearing account names in version history
•
Viewing and editing object properties
•
Creating a report
* 
NOTE: You can view a list of all registered objects in the All Managed Objects in the Search Folders in the GPOADmin console.
* 
NOTE: The Starter GPOs folder is not created by default. To create the Starter GPOs folder, open Group Policy Manager, expand the required Domain | Starter GPOs, and click Create Starter GPOs Folder.|

Creating labels

You can include user-defined history comments (labels) on objects and containers in the Version Control system. This functionality allows users to rollback to an object identified by a specific label.

To create a label using the GPOADmin console
1
Expand the Version Control Root node, and select an object.
2
Right-click and select Label.
3
Enter the label in the Comment dialog box and click OK.
To create a label for a GPO using the GPMC Extension
1
Select the GPO and click Workflow | Label.
2
Enter the label in the Comment dialog box and click OK.

Cloaking a GPO

Cloaking allows you to hide Group Policy Objects (GPOs) from other users. The Cloaking role is not a default role installed with the product, and must be created with the Cloak/Uncloak and View Cloaked rights. By default, Domain Administrators can see all cloaked GPOs.

When a GPO is cloaked using GPOADmin, it is also cloaked in the live environment. Only users with the Cloak/Uncloak or View Cloaked right can see the GPO in the live environment. A cloaked GPO will only be applied to users who have the Cloak/Uncloak or View Cloaked right during group policy processing. All other users will no longer have the GPO applied.

Cloaked GPOs are indicated by a lighter GPO icon.

* 
NOTE: Only GPOs can be cloaked. (You cannot cloak WMI Filters or Scopes of Management).
To cloak a GPO using the GPOADmin console
1
Select the GPO you want to cloak from the list of GPOs within the Version Control Root node.
2
Right-click and select Cloak.
Cloaked GPOs are displayed in the Cloaked search folder. Enter a comment and click OK.
* 
NOTE: Users can also have the View Cloaked right only. This means that they can see cloaked GPOs but do not have permission to "uncloak" them. Cloaked GPOs can be viewed in the Search Folders in the GPOADmin console.
To cloak a GPO using the GPMC Extension
1
Select the GPO you want to cloak from the list of GPOs and click Cloak.
2
Enter a comment and click OK.
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation