GPOADmin 5.19 - Quick Start Guide


	NOTE: GPOADmin provides roles that enable users to perform actions within the Version Control system. The following scenario is created on the assumption that the administrator has already delegated the User and Moderator roles to the required users. To view the roles applied to a specific container, right-click it, select Properties, and click the Security tab. For complete information on how to create and delegate roles, see “Configuring Role-based Delegation” in the Quest GPOADmin User Guide or Online Help.

Connect to the Version Control system

Because the application has been fully configured by the administrator, users connect to the Version Control system in the following manner:

To connect to the Version Control system

Right-click the GPOADmin node and select Connect To.

Click New to create a new connection and enter the server name.

Select the Version Control server that you want to connect to and click Connect to connect with the current logged on user credentials or select Connect As to enter a new credentials (user name and password).

To save the credentials, select the Remember my password check box and click OK.

For more information about saving connections, see “Persisting Connections” in the GPOADmin User Guide.

Register a GPO

Initially all GPOs are unregistered. To add GPOs to the Version Control system, they must be registered.


	NOTE: When GPOs are registered they maintain their GPO status (User and Computer settings enabled or disabled), links, security, and WMI filters.

To register a GPO


	NOTE: You must have the Register right and been granted access to the Live Environment node to register a GPO.

Expand GPOADmin, the forest, Live Environment, and the Domain Controller. Select the Group Policy Objects, right-click a GPO in the right-hand pane, right-click and select Register.

Select the container where you want to place the registered object and click OK.

Once objects have been registered, they are located in the selected container under the Version Control Root with their initial version number set to 1.0. They are now available to be checked out and edited.

If you are migrating from an existing Version Control system, you can set the major version number to any number greater than 1.0 in the Initial major version list.

Check out and edit GPOs


	TIP: The information in this section applies to workflow-enabled GPOs only. For more information on workflow enabling/disabling, see the Quest GPOADmin User Guide or Online Help.

Before users can edit registered GPOs, the GPOs must be checked out.

The workflow is as follows:

•

Check out the GPO from the system,

•

make the required edits, and

•

check in the changes to the system.


	NOTE: The changes are only applied to the live environment after they are approved and deployed.

Version information is updated in the system’s history when the GPO is checked back in. Only one person within the system can check out and work on any GPO at a given time.


	NOTE: If you have all required rights, you can approve a GPO from the checked out state and the necessary workflow steps happen automatically.

Checking out a GPO for the first time creates a copy of the original GPO. The copy is an exact duplicate of the original GPO until it passes through the approval process.

To check out a GPO

Expand the Version Control Root and select the available GPO.

Right-click a GPO and select Check Out.

Enter a comment and click OK.

Once you have a GPO checked out, you can edit the settings from the Group Policy Management Editor as well as edit the Security and WMI Filter settings. When you check out a GPO, the changes are made to a copy of the live GPO. Those changes do not affect the GPO settings on the network until the changes are approved and deployed.

To edit a GPO

Right-click a checked out GPO and select Edit.

Click Launch Editor and make the required changes.

If required, select the Security tab and click Add or Remove to modify the current security filter. Enter or search for the required user, computer, or group, and click OK.

Click the Advanced button to select advanced permissions.

To add or remove a WMI filter, select the WMI Filter tab and choose a filter from the list of available WMI filters. Click OK.