• ポータルについて詳しく知る
• ダウンロード
• 印刷
• MY ダウンロード ()

• サポート
• 技術文書
• GPOADmin 5.17
• GPOADmin 5.17 - User Guide

GPOADmin 5.17 - User Guide

コンテンツのナビゲーション  

Introducing Quest GPOADmin

GPOADmin features

Client/server architecture Multiforest support Group Policy Management Console extension Version control Change approval process Role-based delegation Notification system GPO ACL editor Reporting options Customized views Offline GPO testing Custom workflow actions

Configuring GPOADmin

Configuring the Version Control server Setting permissions on AD LDS Setting permissions when using SQL as the configuration store Port requirements Editing the Version Control server properties Editing the Version Control server configuration store Replacing the Version Control server configuration settings Migrating from AD/AD LDS to a SQL configuration store Changing the Service Account Root container assignment Restricting GPO management for specific domains Configuring role-based delegation

Creating roles Editing roles Delegating roles

Restricting access to objects Adding notifications for users Selecting events on which to be notified Restricting inheritance on notifications Creating email templates Working with Protected Settings policies

Rights and role for Protected Settings for GPOs Create a Protected Settings policy Protecting policy settings based on extensions Generating Protected Settings policies reports Using Protected Settings policies Checking a GPO against a Protected Settings policies and blocked extensions Validating a GPO against a Protected Settings policies and blocked extensions before a check-in

Using GPOADmin

Connecting to the Version Control system

Restricting search scope Working with multiple connections Version Control data in the directory

Navigating the GPOADmin console Search folders

Creating custom search folders

Accessing the GPMC extension Configuring user preferences Working with the live environment

Registering objects Registered status Removing registered objects Viewing the live environment

Working with controlled objects (version control root)

Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects

Creating Group Policy Objects (GPOs) Creating starter GPOs Creating WMI filters Creating scripts Creating Desired State Configuration (DSC) PowerShell scripts

Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting when users can modify objects Working with registered objects

Creating labels Cloaking a GPO Locking a GPO Establishing Management for an Object Viewing history Deleting version history Clearing account names in version history Viewing and editing object properties Applying keywords on containers Creating a report

Working with available objects

Enabling/disabling workflow Checking out objects Requesting the deletion of an object Unregistering GPOs and removing history Requesting approval

Working with checked out objects

Undoing a check out Checking in controlled objects

Working with objects pending approval and deployment

Withdrawing an approval request Enhanced workflow approval Changing the approval workflow Withdrawing approval Approving and rejecting edits Deploying objects (scheduling and associated items)

Checking compliance Editing objects

Editing GPOs

Removing persistent registry settings

Editing Intune objects (configuration profiles and compliance policies) Editing WMI filters Editing scripts Linking GPOs

Synchronizing GPOs

Enabling synchronization Working with GPO synchronizations Generating Synchronized GPO report

Exporting and importing

Export objects Exporting GPO registry settings as a Desired State Configuration resource file Import objects

Creating Reports

Available reports

Controlled object reports

Settings Report Difference Report Group Policy Comparison Report History Report Group Policy Object Settings Search Report User Activity Report Role Assignment Report All Actions Report Compliance Report Change Auditor Report Change Auditor Working Copies Report Deployment Report Protected Settings Assignment Report Creating Controlled Object Reports

Diagnostic and troubleshooting reports

Group Policy Object Consistency Report Software Installation Package Report Linked/Unlinked Report Linked/Unlinked SOMs Report Inactive Policy Settings Report Group Policy Object Security Report Policy Analysis Report GPO Synchronization Report Group Policy Results Group Policy Results Difference Report Group Policy Modeling Report Creating Diagnostic and Troubleshooting Reports

Live, working copy, latest version, and differences reports

Creating live, working copy, latest version, and differences reports

Historical Settings Reports

Creating historical settings reports

Creating RSoP validation reports Exporting registry settings Working with report folders

Managing report folders

Appendix: Windows PowerShell Commands

Introduction GPOADmin scripts Available commands

GPOADmin PowerShell provider extensions

Using the GPOADmin PowerShell commands (Examples)

Loading the GPOADmin modules Extracting help for GPOADmin commands Managing objects

Get information on all GPOs Get information for all managed objects Get unregistered objects Register an object Check out an object Check in an object Undo the check out of an object Request approval for changes Withdraw an approval request Approve changes Reject changes Withdraw approval on an object Deploy an object Deploy an object at a future time and date Check for pending deployments Cancel pending deployment

Gathering object and GPOADmin information

Identify which objects are checked out Identify which objects are checked out to me What are the properties of an object What objects are available What objects are checked out

Utility commands

Gather GPOADmin license information Install a GPOADmin license Get logging options Set logging options Get notifications Set notifications on objects

Administrative commands

Approval workflow information Set the approval workflow Identify user accounts Identify user roles Modify a role Add a role Get an object's security Set an object's security Overwrite a GPOs security filter

Protected Settings commands

Gather Protected Settings information Enable and disable Protected Settings Get a list of Protected Settings Add Protected Settings

Appendix: GPOADmin Event Log

What is the GPOADmin event log? Interpreting the GPOADmin event log

Event ID types

Example GPOADmin events

Appendix: GPOADmin Backup and Recovery Procedures

GPOADmin Backup Requirements Restoring GPOADmin

Appendix: Customizing your workflow

What is a custom workflow action? Working with custom workflow actions in the Version Control system Working with the custom workflow actions xml file

Actions Predefined Tags Conditions Example of a complete pre-action

Troubleshooting custom workflow actions

Appendix: GPOADmin Silent Installation Commands

Installing GPOADmin with msiexec.exe

All components (Complete GPOADmin installation) Client and components

Server and client Client only Client and PowerShell provider (Client Only button on Installation dialog) PowerShell provider only

Watcher Service

Watcher Service on localhost Watcher Service on another computer Watcher Service and GPMC Extension on another computer Watcher Service and Client only on another computer Watcher Service, Client, and GPMC Extension on another computer

GPMC Extension

GPMC Extension on a localhost GPMC Extension on another computer

Appendix: Configuring Gmail for Notifications

Using Gmail for Workflow Approvals Creating a Gmail Credentials File

Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

• Viewing Topics 221 - 224 of 252

×

Appendix: Customizing your workflow

•	What is a custom workflow action?

•	Working with custom workflow actions in the Version Control system

•	Working with the custom workflow actions xml file

•	Troubleshooting custom workflow actions

What is a custom workflow action?

You can extend GPOADmin’s version control system to incorporate customized actions based on your organizations existing workflow. This allows you to customize and control the deployment of controlled objects (such as GPOS, SOMs, and WMI filters) to meet your individual needs. For example, you can configure a pre-action to send the help desk distribution list an email each time a GPO change is requested.

Also, if you have a workflow tool in place that encompasses many different organizational tools you no longer need to use the workflow in both applications. With pre and post actions, a GPO check out, modification, and request for approval can be configured to create a ticket in an existing workflow system. Subsequent approval in the external workflow system can be configured to approve and deploy that same policy in GPOADmin. A post action can be configured to add additional ticket information about the deployment of the GPO into the customers external workflow application.

Custom actions are available on the following Version Control actions:

Action	Runs when...
Approve	A change to a version controlled object is approved.
CancelScheduledApproval	A version controlled object’s scheduled deployment has been canceled.
CheckIn	A version controlled object is checked in.
CheckOut	A version controlled object is checked out.
Cloak	A version controlled object has been cloaked.
ComplianceAction	Either a “Rollback” or “IncoporateLive“ compliance action is performed.
Create	A version controlled object has been created.
Delete	A version controlled object has been deleted.
Deploy	A version controlled object has been deployed into the live environment.
DisableWorkflow	A version controlled object has been workflow disabled.
Edit	A version controlled object has been modified.
EnableWorkflow	A version controlled object has been workflow enabled.
Label	A label has been applied to one or more version controlled objects.
Lock	A version controlled object has been locked.
ModifySecurity	The security has been modified on a version controlled object.
Move	A version controlled object is moved.
Register	An object is registered with the version control system.
Reject	A change to a version controlled object is rejected.
Rename	A version controlled object is renamed.
RequestApproval	An approval for a version controlled object is requested.
Restore	A version controlled object has been restored.
SubmitScheduledApproval	A version controlled object has been scheduled for deployment.
Synchronization	A version controlled Group Policy Object has been synchronized with another Group Policy Object.
ToggleApprovalWorkflow	Toggles a version controlled object between workflow enabled and disabled.
Uncloak	A version controlled object has been uncloaked.
UndoCheckOut	A version controlled object’s checkout is undone.
Unlock	A version controlled object has been unlocked.
Unregister	A version controlled object is unregistered.
WithdrawApproval	An approval on a version controlled object is withdrawn.
WithdrawApprovalRequest	A request for approval has been withdrawn.

Working with custom workflow actions in the Version Control system

GPOADmin provides an easy to use editor to help you set up and configure your custom actions.

Each custom workflow action has two phases; pre-actions (processed prior to the version control action being run), and post-actions (processed after the version control action has run.

Whether or not an action is processed can be controlled by the use of conditions. This must be set through the editing the xml file directly. For details see, Conditions .

GPOADmin includes a sample custom workflow to get you started that shows how to incorporate the creation of Help desk ticket with each approval request generated from the Version Control system.

To access the sample custom workflow template

1	Right-click the forest, and select Properties.

2	Select Options | General | Enable the processing of custom workflow actions, and select Launch Editor.

3	In the editor, select File \ Open and select the CustomWorkflowActions.xml file located in the installation directory. (C:\Program Files\Quest\GPOADmin\Examples)

4	Select the Request approval | Pre-Action to view the sample.

To create a new custom workflow action

1	Right-click the forest, and select Properties.

2	Select Options | General | Enable the processing of custom workflow actions, and select Launch Editor.

3	Select the required action and click the Pre-Actions option.

4	Enter a name and comment for the action.

5	If desired, select the Stop on error option. This will instruct the service to stop all processing for the current object when an error occurs.

6	Enter the location or browse to the required application to run.

7	Enter the required parameters in the Parameters window. To insert a tag, -click in the Parameters window, select Insert Tag, and choose the required tag. For details on the available options, see Predefined Tags .

8	If required, select the Post-Actions tab and configure its options.

9	Click Add.

10	Once you have entered all the required pre and post actions, save your workflow.

NOTE: Because custom workflow actions are performed in the background by the GPOADmin service, they will not be visible from the interface and depending on the number and complexity of scripts defined for a given action, there may be a delay as the custom actions are being processed by the server. When required, you can suspended custom workflow actions through the Server options.

11	When you are ready to deploy the workflow, select Enable the processing of custom workflow actions.

To edit a custom workflow action

1	-click the forest, and select Options.

2	Select Options | General | Enable the processing of custom workflow actions, and select Launch Editor.

3	Select the required action and pre or post action.

4	Edit the action as required. You can:

a	Change the name, comment, executable, and parameters.

b	Right-click and add or remove actions.

c	Right-click and adjust the order in which they are performed.

d	Copy and past actions.

5	When you have made all your changes, click Update.

To pause or stop the custom workflow action

1	Right-click the forest, and select Options.

2	Select Options | General | Enable the processing of custom workflow actions, and select Launch Editor.

3	Click to disable the custom workflow actions option.

Working with the custom workflow actions xml file

Custom workflow actions are defined in an XML file (CustomWorkflowActions.xml) which must be located in the same directory as the GPOADmin Service executable.

•

Actions

•	Predefined Tags

•	Conditions

•	Example of a complete pre-action

•  前回
• Viewing Topics 221 - 224 of 252
• 次へ 

この文書を検索 この製品バージョンに対応するすべての文書を検索 この製品に対応するすべての文書を検索 すべての文書を検索

×

 サポートへようこそ

Quest *product*のオンラインサポートヘルプは、関連会社のサポートサイトで参照できます。「Continue（続行）」をクリックすると、*product*の適切なサポートコンテンツとアシスタンスへ移動します。

関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookie Preference Center