Chat now with support
Chat with Support

GPOADmin 5.17 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting when users can modify objects Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Creating a report

You can create reports that show the details of controlled objects, as well as diagnostic and troubleshooting information. For more information on the available reports, see Creating Reports .

Working with available objects

With available objects, you can perform all the supported tasks of registered objects (Show history, view live reports, view properties, unregister, create labels, and import/export), as well as:

•
Enabling/disabling workflow
•
Checking out objects
•
Requesting the deletion of an object
•
Unregistering GPOs and removing history
•
Requesting approval
* 
NOTE: You can view a list of all Available objects in the Search Folders in the GPOADmin console.

Enabling/disabling workflow

If you have the Enable/Disable right, you can enable and disable the workflow for a deployed object. The object must be under version control and be a major version (for example, 2.0).

* 
NOTE:  
•
To work with and edit workflow-disabled GPOs, you must have the GPMC Edit, Delete, and Modify Security right as well as the DeleteSubtree right.
•
You can view a list of workflow-enabled or workflow-disabled objects in the Search Folders in the GPOADmin console.
•
If you disable the workflow, any changes made are immediately deployed in the live environment. To bring the object back under version control, enable the workflow.
•
When managing objects across forests, they must be workflow enabled.
•
You can enable and disable workflow on objects through a remote console. However, once they are disabled, they cannot be managed through the remote console.
To enable/disable workflow in the GPOADmin console
1
Expand the Version Control Root node and the required container.
2
Right-click a major version of an available object and select Disable Workflow.
-OR-
Right-click an object that is not workflow enabled and select Enable Workflow.
3
Enter a comment and click OK.
To enable/disable workflow in the GPMC Extension
1
Select a major version of an available object and click Workflow | Disable Workflow.
-OR-
Select an object that is not workflow enabled and click Workflow | Enable Workflow.
2
Enter a comment and click OK.

Checking out objects

Before users can edit registered objects, they must be checked out. The workflow is as follows: Check-out the object from the system, make the required edits, and check in the changes to the system.

Checking out an object for the first time creates a copy of the original live version.

* 
NOTE: The changes are only applied to the live enterprise when they are approved by users included in the approval workflow and deployed by users with the Deploy permission.
* 
NOTE: To edit the GPO working copy, users must have the GPMC edit right. If they do not have this right, it will be granted during checkout.

During check in, the edit right will be removed. This ensures that the user does not gain the edit right on the live GPO during the deployment process.

If you have the Modify System-Provided Security right, refrain from modifying the granted Edit right. Allow the system to remove it during the check-in process.

Version information is updated in the system’s history when the object is checked back in. Only one person within the system can check out and work on any object at a given time.

* 
NOTE: If you have all required rights, you can approve and deploy an object from the checked out state and all workflow steps happen automatically.
NOTE: You can view a list of checked out objects in the Checked Out or Checked Out to Me Search Folders in the GPOADmin console.
To check out an object using the GPOADmin console
1
Expand the Version Control Root node and the required container.
2
Right-click an object in the Available state and select Check Out.
3
Enter a comment and click OK.
* 
NOTE: When a GPO is checked out only the settings are maintained — not the GPO links. You can check out multiple GPOs at once.
To check out a GPO using the GPMC Extension
1
Select an available GPO and click Workflow | Checkout.
2
Enter a comment and click OK.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating