Chat now with support
Chat with Support

GPOADmin 5.18 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Generating Synchronized GPO report

You can create a report that contains information on the GPO synchronizations that have been performed in your environment.

For details see the section Creating Diagnostic and Troubleshooting Reports .

Exporting and importing

•
Export objects
•
Exporting GPO registry settings as a Desired State Configuration resource file
•
Import objects

Export objects

Export objects

Using the Export Wizard, you can test objects offline before they are implemented in the live enterprise. A typical scenario would be to:

•
Check-out an object and make the desired changes.
Before you check in the change and request approval, you can test the edits.
•
Export the object to another domain and test the updates.
If you see an issue you can change it in the test domain.
•
Import the object.
•
Check in the new and improved changes for approval.
* 
NOTE: In the Pending Approval state, exporting the object provides an additional level of quality control before changes are made live in the enterprise.

The following built in roles can perform an export:

•
Moderator
•
System Administrator
•
User

Alternatively, you can create a custom role that includes Read and Export rights.

* 
NOTE: The exported objects must adhere to the naming conventions set on the destination container. Administrators can override this and move objects that do not comply; however, once moved the objects must adhere to the container naming conventions.
Migration table considerations
•
When migrating to an untrusted domain, the source entries must be SIDs and the Source Type must be set to Free Test or SID.
•
If migrating the Security Filter, the source entries (for the Security Filter only) must be in domain\account format. NT AUTHORITY accounts should have a Destination Name of <Same As Source>.
•
If an account cannot be mapped, it is logged in the format that GPMC is looking for.
•
If an entry is logged, change the source format to the format that is logged and try again.
To export objects to a test environment
1
Select the number of objects you want to export, either by using Ctrl + click to select multiple items, or Shift + click at the top and bottom of a contiguous series of items to select them all.
2
To export a single object, right-click the object.
3
Select Export.
* 
NOTE: If you are using the GPMC Extension, you can also select the GPO and click Workflow|Export.
4
Select the version that you want to export and click Next.
5
Select the target.
You can select a local directory or network share, another version control system, or a test domain in the live network.
To select a local directory or network share:
•
Select A backup on disk and click Next.
•
Select the backup directory and click Next.
•
Click Finish.
To select another Version Control system
•
Select a Version Control Server and click Next.
•
Select a Target Folder and click Next.
•
Select a Version-Controlled Domain and click Next.
•
Select a migration table, if required, and click Next.
* 
NOTE: You also have the option to use the migration table exclusively and to migrate the security filter.
•
Click Finish.
To select a test domain in the live environment
•
Select The live environment and click Next.
•
Select the target domain and click Next.
•
Select a migration table, if required, and click Next.
* 
NOTE: You also have the option to use the migration table exclusively and to migrate the security filter.
•
Click Finish.
Once you have reviewed the settings and the effects on the target domain, check in the object and request Approval. For more information, see Requesting approval .

Exporting GPO registry settings as a Desired State Configuration resource file

Desired State Configuration extends Microsoft PowerShell to facilitate environment configuration – including your GPO deployment. Through GPOADmin, you can export GPO’s user and/or computer registry settings into a resource file to take advantage of this feature. See https://docs.microsoft.com/en-us/powershell/scripting/dsc/overview/overview?view=powershell-7.1 for more information.

To export GPO registry settings:
1
Right-click the required GPO and select Export As Desired State Configuration Resource.
2
Define the resource file and settings that you want to export.
File Name - The full path to the DSC resource file to save.
Configuration Name - The configuration used to “group” the registry settings.
Node Name: The node (computer) the configuration will apply to.
Select whether to export user, computer, or both registry settings.
3
Click Next.
4
To register the exported resources, enable the option, browse to select the target container, and click Next.
5
Review the summary information and click Finish.
* 
NOTE: You can also uses the Select-ExportAsDSCResource PowerShell command to export the settings. You cannot register the resources using this command.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating