Chat now with support
Chat with Support

GPOADmin 5.17 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting when users can modify objects Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Group Policy Results Difference Report

This report displays the resultant set of policies (RSoP) differences between the selected users or computers. The Group Policy Results Difference Report does not include the Remote Installation extension in the report settings.

Group Policy Modeling Report

This report displays the resultant set of policies based on the selected simulation options within the modeling session. You can use this report to simulate changes and validate that the results match the desired outcome before actually implementing any changes within your environment. Using this report, you can evaluate checked out GPO working copies so that you can mitigate any unexpected effects once the changes are made to the live version.

* 
IMPORTANT: An application partition is created during the simulation to house the report. It contains a temporary staging container that is deleted once the report has been generated.

If necessary, you can create or delete the staging application directory partition:

1
Open Command Prompt.
2
Type:
ntdsutil
3
At the ntdsutil command prompt, type:
domain management or partition management
4
At the domain management command prompt, type:
connection
5
At the server connections command prompt, type:
connect to server ServerName
6
At the server connections command prompt, type:
quit
7
At the domain management command prompt, do one of the following:
•
To create an application directory partition, type:
create nc dc=staging,dc=gpoadmin DomainController
For every domain controller which might be used to run the Group policy modeling report on, type the following:
add nc replica “dc=staging,dc=gpoadmin” DomainControllerName
•
To delete an application directory partition, type:
delete nc dc=staging,dc=gpoadmin

Creating Diagnostic and Troubleshooting Reports

To create troubleshooting reports
* 
NOTE: You must use the GPOADmin console to create Troubleshooting Reports.
1
Expand the GPOADmin node.
2
Right-click Reports and select New| Report.
3
Select the type of report to run under Diagnostic and Troubleshooting Reports:
 
If you select...
Procedure

Group Policy Object Consistency Report

You can also check the consistency between selected group policy objects on a domain controller, by right-clicking the required GPOs and selecting Reports | GPO Consistency.
1
Click Next.
2
Select the service you want to report on and click Next.
3
Select the domain you want to report on and click Next.
4
Select to include the GPO ACL, SYSVOL, or SYSVOL Scripts folder in the report and click Next.
5
Select to run the report or to save the report settings and click Finish.

Software Installation Package Report

Linked/Unlinked Report

Linked/Unlinked SOMs Report

Inactive Policy Settings Report

 
1
Click Next.
2
Select the service you want to report on, and click Next.
3
Select the domain you want to report on and click Next.
4
Select to run the report or to save the report settings, and click Finish.

Group Policy Object Security Report
1
Click Next.
2
Select the service you want to report on and click Next.
3
Select the domain you want to report on and click Next.
4
Specify accounts to include or exclude in the report and click Next.
5
Select to run the report or to save the report settings and click Finish.

GPO Synchronization Report
1
Select the service on which to run the report and click Next.
2
Select the GPO on which to run the report and click Next.
3
Select to run the report or to save the report settings and click Finish.

Group Policy Results
1
Click Next.
2
If you are connected to more than one service, you are asked "Which service do you want to run the report on?". Select a service and click Next.
3
Select the domain you want to report on and click Next.
4
Browse to locate the required computers or enter the computer name and click Next.
NOTE: Multiple computers must be separated with a semicolon.
5
Select the user whose policy settings you would like to view and click Next.
6
Select to run the report, save the report so that you can compare it to another report, or save the report settings, and click Finish.

Group Policy Results Difference Report
1
Click Next.
2
If you are connected to more than one service, you are asked "Which service do you want to run the report on?". Select a service and click Next.
3
Select the domain you want to report on and click Next.
4
Choose initial report to use in the comparison and click Next.
You can choose between a new report, a dynamic report, or a previously saved report.
If you choose to create a new report, you need to click through the wizard to select the required user and computer.
5
Choose the second report to use in the comparison and click Next.
You can choose between a new report, a dynamic report, or a previously saved report.
If you choose to create a new report, you need to click through the wizard to select the required user and computer.
6
Select the required display options and click Next.
You can choose to see all settings, differences only, or similarities only.
7
Select to run the report or to save the report settings and click Finish.

Group Policy Modeling Report
1
Click Next.
2
Select the domain and the domain controller where the RSoP report will be run, and click Next.
You can select any domain controller or a specific domain controller within the domain with the supported operating system.
3
Browse to and select the required user or computer (or container that contains the user or computer), and click Next.
4
If necessary, you can select to:
•
Simulate a slow network connection.
•
Enable loopback processing. This option is only available if a computer has been selected. You can use this to narrow down the settings to be considered in the simulation and focus on only those of interest to you.
If Replace is selected, ONLY computer GPOs and WMI filters are considered for the simulation.
If Merge is selected, all GPOs and WMI filters (user and computer) are included. When being evaluated for the simulation, the computer GPOs are placed with a higher precedence than the user GPOs.
•
Select to use a site other than the default site.
Click Next when satisfied with your selections.
5
If necessary, browse to and select an alternate network location for the user or computer. This option is only available for users or computers — you cannot select this for containers.
Note: You can select the Restore to Default option to return to the initial state.
Click Next when satisfied with your selections.
6
The top-level groups where the user or computer is a member displays. Select to see the effect of adding or removing users from groups as required.
Note: You can only select to add immediate groups. Any group can be removed except for the Authenticated Users and Everyone groups.
Click Next when satisfied with your selections.
7
If necessary, select to see the effects of removing WMI filters.
You can select to see all linked filters or choose specific filters.
•
All linked filters: This option assumes that the user meets the criteria and all filters are applied.
•
Only these filters: This option enables you to list all available filters and remove as required.

Group Policy Modeling Report
Note: If you plan to alter GPO link properties, you should select the default All linked filters. If you select to include only select filters some changes may not be reflected in the simulation.
Click Next when satisfied with your selections.
8
If necessary, select to simulate link modifications to a Scope of Management.
•
Right-click a GPO and select whether to have the GPO link enforced or link enabled), alter their link order, and simply remove them.
•
Right-click a parent OU to block inheritance or add GPOs as required.
Note: You can only choose checked out working copy or deployed GPOs.
Note: GPOs are added as unenforced, link enabled or disabled depending on the Default link state server option, and at the bottom of the list.
Select Restore to undo any changes. This only affects the immediate OU. Child OUs will not be undone.
Select Restore All Defaults, to undo all changes.
Click Next when satisfied with your selections.
9
Review the summary page and click Next to proceed.
10
Select to run the report, save the report so that you can compare it to another report, or save the report settings, and click Finish.

Policy Analysis Report
1
Click Next.
2
Select the domain you want to report on and click Next.
3
Select the Scope of Management that you want to analyze, and click Next.
4
Select to run the report, save the report so that you can compare it to another report, or save the report settings, and click Finish.

Live, working copy, latest version, and differences reports

Live, working copy, latest version,
and differences reports

You can create a report that shows information about the live, working copy, or latest versions of an object, or that compares two or more versions of the same object.

•
Creating live, working copy, latest version, and differences reports
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating