지금 지원 담당자와 채팅
지원 담당자와 채팅

GPOADmin 5.21 - Quick Start Guide

Installing Quest GPOADmin

Installing Quest GPOADmin
Prerequisites for installation

The install will place all of the roles of GPOADmin on one computer. Ensure that the computer meets the system requirements mentioned above. To prepare for the install, you must perform the following steps:

1
Create a service account for GPOADmin in the root of the domain.
2
Add the service account to the local administrators group on the console computer.
3
Log in to the console as the service account.
4
Ensure that .NET Framework 4.8 and any associated fixes are installed.
5
Ensure that AD LDS is installed.
* 
NOTE: The service account created for GPOADmin should be the account used for AD LDS.
6
Ensure that Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools are installed.
7
Create a folder for the backup storage destination and share it on the network.
Ensure that the service account has full access to both the share and NTFS permissions.
* 
NOTE: When you uninstall GPOADmin, registry keys with any connection specific values such as “UseSQL”, “Servername”, “UserID”, and “Password” remain.

If you have no other Quest products installed, you can remove these by deleting the HKEY_LOCAL_MACHINE\SOFTWARE\Quest key. Otherwise, delete the KEY_LOCAL_MACHINE\SOFTWARE\Quest\GPOADmin key
To install Quest GPOADmin
1
Unzip the GPOADmin package, browse to the GPOADmin folder, and run the Quest GPOADmin.msi.
2
In the Welcome screen, click Next.
3
Click View License Agreement, scroll down to read the licensing information, select I accept these terms, click OK, then click Next.
4
In the Choose Setup Type dialog box, select Complete.
5
In the Destination Folder dialog box, accept the default location or enter a new location to install GPOADmin and click Next.
6
In the Service Credentials dialog box, enter the service account name and password that you created earlier for use by the GPOADmin Service and click Next.
7
Click Install.
8
After the software has been installed and the Completed dialog box is displayed, click Finish.

Installing GPOADmin with msiexec.exe

If required, GPOADmin and its various components can be installed silently from the command line using the msiexec.exe utility. Please see the GPOADmin User Guide Appendix: GPOADmin Silent Installation Commands for details on the commands and examples for the following types of installation options:

•
All components (Complete GPOADmin installation)
•
Client and components
•
Watcher Service
•
GPMC Extension

Upgrading GPOADmin

During an upgrade, the previous version will be uninstalled and the new version installed. Settings are retained except for those noted below.

* 
NOTE:  

Once an upgrade has begun, you cannot rollback to a previous version. However, if an error occurs, you can manually restore the files from the installation backup folder.

During an upgrade, the installer creates an InstallationBackup folder in the install directory and copies the contents of the Connections folder, MigrationTables folder, and customworkflowactions.xml file into it. Once the existing version is removed and the new version installed, the installer then copies the contents of the InstallationBackup folder back to the correct locations.

Failed Upgrades

If the upgrade fails, and you want to go back to a previous version, you will need to manually install it and restore the files in the InstallationBackup folder to their correct locations:

•
Copy the contents of Connections folder into the Connections folder in the install directory.
•
Copy the contents of the MigrationTables folder into the MigrationTables folder in the install directory. (If this directory does not exist, you will need to create it.)
•
Copy the customworkflowactions.xml file to the install directory.

If you want to restore previously set registry settings, browse to the GPOADminRegistrySettings.reg file located in the InstallationBackup folder in the install directory after re-installing the previous version, right-click and select Merge.

Upgrade requirements

•
All registered objects must be in the available state prior to any upgrade.
•
If you are running GPMC during an upgrade, you must close and re-open it before the GPO Management tab will display. 
•
If you set a custom report folder path in a previous version, you must change the reports folder path in the User Preferences to point to the existing folder.
•
In a minimum permissions environment, Group Policy Objects with a version of 0.x may fail to deploy correctly. To solve this, make a copy of the GPO and deploy the copy. Once this has been verified as successful, delete the original.
•
When you upgrade a GPOADmin service, you need to upgrade any GPOADmin client, watcher service, or GPMC extension that reference that service.
•
If you have multiple servers to upgrade, the process must be done manually on each of the host computers.
•
The live environment will only be visible for GPOADmin Administrators and users who have been explicitly granted access.
As a GPOADmin administrator, however, you may want to allow users to see the live environment from within the GPOAdmin console. This will, for example, enable you to delegate GPO, OU, or SOM object registration (and recursive registration) to specific users in your organization. To permit a user to see the live environment:

1 Login to GPOADmin as a GPOADmin administrator.
2 Right-click the Live Environment node and select Properties.
3 On the Security tab, add one or more users who require access to the live environment.
4 Click OK.
•
Due to security improvements implemented in GPOADmin 5.16, the previous custom search folder format is no longer supported. To retain your existing custom search folders, they must be converted to the new format before you upgrade. To update the format, run the Export script found in the Utilities folder of the downloaded installation package, then upgrade to the latest version of GPOADmin. Once the upgrade is complete, run the Import script located in the same directory to convert your custom search folder to the currently supported format.
•
GPOADmin.CustomSearchFolderExport.ps1 Description: Exports each custom search folders to an xml file in the specified directory. Parameters: -SearchFilterPath : The location where custom search folder will be exported to.
•
GPOADmin.CustomSearchFolderImport.ps1 Description: Imports each custom search folder found in the specified directory. Parameters:-SearchFilterPath : The location where the exported custom search folder files are located.
•
Service account requirements:
•
Due to an upgraded encryption algorithm, the service account cannot decrypt previously encrypted passwords. If you are upgrading and using SQL as your configuration store, accessed with SQL authentication, you must re-enter the password for the connection account the first time you connect to the service. The following pre-configured passwords will also need to be re-entered: the SQL Server Backup Store account, the SMTP notifications account, and the Exchange notifications account.
•
In previous versions of GPOADmin ownership and delegation information was not collected as part of the backup process. Since this data is now included in the GPO backup, after upgrading the service account will be added as the owner during the deployment process. Until the GPO is deployed with the newly upgraded version of GPOADmin, GPO delegation may report incorrectly as compliant.
•
After upgrading, ensure that the “Ensure service account has access prior to deployment” service option is checked in the Options dialog.
•
GPOADmin runs under the security context of a privileged service account that must have full access to GPOs in the managed forest. If you plan to change this account, you must unlock all GPOs before making the change.
•
Configuration store requirements:
•
If multiple GPOADmin services share the same configuration store or backup store, they must all be upgraded to the same version.
•
If multiple GPOADmin services share the same configuration store or backup store, it is recommended that all of the services, including the watcher, be stopped before upgrading.
•
Rolling back to a previous configuration store is not supported.
To upgrade GPOADmin from a previous version:
1
Unzip the GPOADmin package, browse to the GPOADmin folder, and run the Quest GPOADmin.msi.
2
Complete the Installation Wizard.
* 
NOTE: The Quest GPOADmin GPMC Extension.msi should only be used when you only have the GPMC Extension component installed. If you upgrade using this option with a full GPOAdmin installation, only the extension will be upgraded. All other components will be removed.
관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택