Chat now with support
Chat with Support

Active Administrator 8.6.3 - User Guide

Active Administrator Overview User Provisioning Certificates Security & Delegation  Active Directory Health
Switching to Active Directory Health Using the Active Directory Health landing page Installing Active Directory Health Analyzer agents Using the Active Directory Health Analyzer agent configuration utility Excluding domain controllers Managing the Remediation Library Analyzing Active Directory health Analyzing Azure Active Directory Managing Active Directory Health Analyzer alerts Managing alert notifications Pushing alerts to System Center Operations Manager and SNMP managers Managing monitored domain controllers Managing data collectors Active Directory Health Templates Managing Active Directory Health Analyzer agents Using the Troubleshooter Recovering Active Directory Health data
Auditing & Alerting Group Policy Active Directory Recovery Active Directory Infrastructure DC Management DNS Management Configuration
Using the Configuration landing page Managing tasks Defining role-based access Setting email server options Configuring SCOM and SNMP Settings Setting notification options Setting Active Template options Setting agent installation options Setting recovery options Setting GPO history options Setting certificate configuration Setting service monitoring policy Managing archive databases Migrating data to another database Setting a preferred domain controller Setting up workstation logon auditing Managing configuration settings Setting user options Managing the Active Directory server
Diagnostic Console Alerts Appendix
Domain controller alerts
Active Directory Certificate Services service is not running Active Directory Domain Services is not running Active Directory Web Services service is not running Consecutive replication failures DC cache hits DC DIT disk space DC DIT log file disk space DC LDAP load DC LDAP response too slow DC Memory Usage DC properties dropped DC RID pool low DC SMB connections DC SYSVOL disk space DC time sync lost Detected NO_CLIENT_SITE record DFS Replication service not running DFS service is not running DFSR conflict area disk space DFSR conflict files generated DFSR RDC not enabled DFSR sharing violation DFSR staged file age DFSR staging area disk space DFSR USN records accepted DFSRS CPU load DFSRS unresponsive DFSRS virtual memory DFSRS working set DNS Client Service is not running Domain controller CPU load Domain controller page faults Domain controller unresponsive File Replication Service is not running File replication (NTFRS) staging space free in kilobytes GC response too slow Group policy object inconsistent Hard disk drive Intersite Messaging Service is not running Invalid primary DNS domain controller address Invalid secondary DNS domain controller address KDC service is not running LSASS CPU load LSASS virtual memory LSASS working set Missing SRV DNS record for either the primary or secondary DNS server NETLOGON not shared NetLogon service is not running Orphaned group policy objects exist Physical memory Power supply Primary DNS resolver is not responding Secondary DNS resolver is not responding Security Accounts Manager Service is not running SRV record is not registered in DNS SYSVOL not shared W32Time service is not running Workstation Service is not running
Domain alerts Site alerts Forest alerts Azure Active Directory Connect alerts
Event Definitions PowerShell cmdlets About us

Using the GPO repository

Previous Next


Group Policy > Using the GPO repository

Using the GPO repository

Active Administrator® provides an offline repository for editing Group Polices. The offline repository makes a copy of the Group Policy object (GPO) that you can edit without interfering with the normal operation of Active Directory®. When editing is complete, you can publish the changed GPO to Active Directory in a single operation.

The offline repository uses a system of checking in and out to maintain the integrity of the GPOs in the repository. When a GPO is added to the repository, it is actually a copy of the GPO that gets added; the actual GPO is not affected. The copy in the repository can then be checked out and changed, and then checked in and applied when needed. When a GPO is published from the repository, a copy of the GPO is then copied over the online GPO, thus effectively making any changes to that GPO live.

Topics 
To use the GPO repository
1
Select Group Policy | GPO Repository.

Group policy objects that in the repository display in the upper pane. These GPOs are copies of the GPOs in Active Directory. You can edit these GPOs without affecting the live GPOs.

The bottom pane displays the check in/out history for the selected GPO. To view the history of publishing the GPO to Active Directory, click Publish to Active Directory History.

Table 83. GPO repository tool bar

Option

Description

Refresh

Refresh the GPO’s in Offline Repository list.

Publish

Write over the GPO in Active Directory with the selected GPO in the offline repository. See Editing a GPO offline.

Add

Add a copy of the Active Directory GPO to the repository. See Adding a GPO to the repository.

Remove

Remove the selected GPOs from the repository.

Edit GPO

Edit a checked-out offline GPO. See Editing a GPO offline.

Check In/Out

Check out a GPO for offline editing. When you are finished editing, check the GPO back into the repository. See Editing a GPO offline.

More | Offline GPO Settings

Show the unique id, number of revisions, created date, modified date, status of computer and user settings, Group Policy filters and Group Policy links for the selected Group Policy object in the selected domain.

More | Compare Offline GPO to Live GPO

Prior to publishing an offline GPO to Active Directory, you can compare the offline GPO to the live GPO. See Comparing Group Policy objects.

Adding a GPO to the repository

Previous Next


Group Policy > Using the GPO repository > Adding a GPO to the repository

Adding a GPO to the repository

During installation, Active Administrator® creates the GPORepository folder, which is located in the Active Administrator folder. When you check in a GPO into the repository, a copy of the GPO is placed in this folder. All changes you make to the GPO are stored in this folder until you choose to publish the GPO or discard the changes.

NOTE: You also can select Group Policy | Group Policy Objects, select a Group Policy object, and select More | Add to Repository. See Managing Group Policy objects.
To add a GPO to the repository
1
Select Group Policy | GPO Repository.
2
Click Add.

If you do not see the desired domain, click Add Forest and locate the forest with the desired domain.

6
7
Click Refresh, if necessary.

When the checkout is complete, you can edit the GPO offline. See Editing a GPO offline.

Editing a GPO offline

Previous Next


Group Policy > Using the GPO repository > Editing a GPO offline

Editing a GPO offline

Once GPO is in the repository, you can check it out for editing offline. When you are done editing offline, check the GPO in, and publish it to Active Directory®.

To edit a GPO offline
1
Select Group Policy | GPO Repository.
3
Select a GPO, and select Check In/Out | Check Out.
6
8
Click Check In.

The GPO is read-only in the repository. The change is not applied to the live GPO until you publish it to Active Directory.

Modeling GPO changes

Previous Next


Group Policy > Modeling GPO changes

Modeling GPO changes

Active Administrator® provides increased levels of manageability by way of GPO modeling, which allows you to select a user and computer and view or report on the Group Policy objects that affect those accounts. To get an exact picture of how your actions will affect Group Policy application, you can perform several calculations of what if scenarios, including the addition or removal of these objects from OUs, sites, or security groups, which allows you to quickly view Group Policy object application and errors on remote computers. Recent calculations are automatically saved for easy retrieval at a later time.

Reporting on GPO Modeling allow administrators to see exactly how objects are affected by Group Policy objects and to quickly troubleshoot where application of Group Policies were not handled correctly. Active Administrator provides clear and concise reports that not only show what Group Policy objects are applied, but the effective settings of such policies.

Topics 
To model GPO changes
1
Select Group Policy | GPO Modeling.

Existing simulations display in a list. You can sort each column in ascending or descending order by clicking on the column heading.

Table 84. GPO modeling tool bar

Option

Description

Refresh

Refresh the display.

New

Create and run a new simulation. See Creating a simulation.

Run Again

Run a selected simulation.

Copy Simulation

Copy a selected simulation to make changes to create a new simulation. See Creating a simulation.

View Report

View the report for the selected simulation.

Save Report

Save the selected simulation report to an HTML file.

Delete

Delete selected simulations.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating