GPOADmin 5.18 - User Guide

Under Supported account types, select Accounts in this organizational directory only (Single tenant) for the accounts that can access the application API.

Leave the Redirect URI (optional) field empty.

Click Register.

On the Overview tab, go to View API Permissions. Click Add a permission, click Microsoft Graph | Application Permissions and add the Mail.ReadWrite and Mail.Send permissions. See Microsoft documentation for details on limiting permissions to specific Exchange Online mailboxes. (Note: The Enforce approver account validation option found when configuring email notifications will not function if you select to follow the Microsoft article to restrict access to a single mailbox.)

Click Add Permission.

On the API Permissions tab, under Grant consent, click Grant admin consent for tenant name.

Click Yes to confirm.

On the preview screen, click Overview, and note the application ID and the directory ID. (You will need these values when setting up OAuth authentication.)

Go to Manage | Certificates & secrets, select Upload certificate and upload the required .cer file.

Appendix: GPOADmin with SQL Replication

The following information details how to setup SQL replication to allow multiple GPOADmin servers in the same domain to run concurrently sharing a configuration store and a backup store.

Before setting up SQL replication, ensure the following is in place:

•

All SQL servers included in this configuration have the Replication SQL feature installed.

•

Each GPOADmin server has a local Domain Controller and local SQL server.

•

The Replication role is installed on all servers that will host a backup store share. (DFS replication is located under File and Folder Storage Services.)

•

The SQL Server agent must run as the GPOADmin service account and have the startup type set to Automatic (Delayed Start).

•

If this is an in place upgrade, ensure that the server used as the primary SQL server has a copy of the existing GPOADmin database. A separate copy should be kept as a backup.

To configure replication within GPOADmin

Right-click the required server and select Configure Database Replication (or Remove Replication if it is no longer required.)

If configuring replication, select the subscribers to replicate the database with using the Add or Remove buttons, and click OK.

Once subscribers have been selected, GPOADmin verifies that the service account has access to the subscriber and if a database with the same name as the current database exists on the subscriber.

•

If the service account does not have access, the subscriber will not be added.

•

If the service account does have access but the database does not exist, a database with the same name as the current database is created on the subscriber.

GPOADmin generates the following files in the install directory:

•

ReplicationConfiguration.sql: The SQL script used to configure replication.

•

StartReplication.bat: The batch file that can start replication if it does not start automatically after the snapshot has been generated. This batch file must be run on the publisher SQL server.

NOTE: Upgrade considerations

During an upgrade, GPOADmin checks to see if the current database is configured for replication. If the database setup for replication, you have two options:

•

Have GPOADmin attempt to end replication, perform the database upgrade, and restore the replication after the upgrade. With this option, GPOADmin generate the following files in the install directory:

•

ReplicationRestoration.sql: The SQL script used to restore replication.

•

RestartReplication.bat: The batch file to start replication if it does not start after the snapshot has been generated. This batch file must be run on the publisher SQL server.

•

ReplicationSubscribers.xml: A list of the replication subscribers recorded before replication was ended.

•

Manually end replication before you can continue with the upgrade process.

To manually configure SQL replication for GPOADmin

Set up Distributed File System (DFS) for the backup store. (This creates a replicated DFS share on each GPOADmin server or a local file server to each GPOADmin server with a single Active Directory share name.)


	NOTE: These instructions are derived from Microsoft documentation.

Create a folder on each server to be a replicate backup store host. (All folders should have the same name.)

On the primary server for the backup store, open the DFS Management tool.

Create a new domain-based namespace in Windows Server 2008 mode.

Create a new replication group.

Add all servers hosting replicated backup stores to the group as members.

Choose Full Mesh topology.

Set to replicate constantly using the specified bandwidth.

Select the current server as the primary member.

Add the path to the folders created above.

Complete the replication group creation.

Publish the replication group to the Namespace created above.

The path to the share will now be //domain.fqdn/Namespace/ReplicationGroup.

Install GPOADmin on all computers that will be used as GPOADmin servers.

On the primary GPOADmin server open the GPOADmin console and configure GPOADmin.

Ensure that all SQL configuration store upgrades have completed. (This may require multiple log out and log in cycles in GPOADmin.)

Stop all GPOADmin services on all GPOADmin servers.

Log into the SQL server to be used as the primary SQL server.


	NOTE: The account used to login must have administrator privileges to all SQL servers to be added.

Ensure that a SQL Server agent is installed and running, and the distributor is set for the primary SQL server.

Right-click the Replication node and Configure Distribution -> This machine should be its own Distributor.

For the Snapshot folder, choose a network share that is visible to all other SQL servers in replication.

Create a new local publication by completing the wizard.

Publication Database page: Choose the GPOADmin database for replication.

Publication Type page: Choose Merge publication.

Subscriber Types page: Choose SQL Server 2008 or later.

Articles page: Choose to publish all articles.

Article Issues page: Read the information and click Next.

Filtered Table Rows page: Do not add any filters.

Snapshot Agent page: Choose to create immediately and set a schedule. (These scheduled snapshots are essentially rollback points.)

Agent Security page: Add a login for the agent. Quest recommends that this is a privileged account as it will run the agent for all replicated databases.

Wizard actions: Select Create the publication.

Name the publication.

Refresh the Local Publications node, then expand and select the new publication.

Right-click the publication and choose View Snapshot Agent Status.

The agent should start automatically. If not, you can start it from this dialog. Watch for the status message to become: [100%] A snapshot of x article(s) was generated.

Right-click the publication and choose New Subscriptions. (All subscriptions can be created from here.)

Publication page: Choose the publisher (may be already set) and the previously created publication.

Merge Agent Location page: Choose Run all agents at the Distributor to create a similar replication path as the peer-to-peer setup.

Subscribers page: Click Add SQL Server Subscriber once for each SQL server in the replication. Choose the database on the target server for replication.

Add the following values to the extended properties for any replication target databases: ProductName =GPOADmin, Version= 5.18.0.0.

Merge Agent Security page: Set the accounts to communicate between nodes for the replication.

Synchronization Schedule page: Set the Agent Schedule to Run continuously for each subscription.

Initialize Subscriptions page: Select Initialize and set Initialize When to Immediately.

Subscription Type page: The Subscription Type should be Server. Set the Priority for Conflict Resolution to a different number for each subscription.

The publisher is 99.99 by default. Higher numbers will win in an exact timing conflict over lower numbers. Choose which servers have priority and ensure this number is different for each subscription.

Finish the wizard,

The subscription will be created and a script saved that can be used to recreate the subscription if needed.

Monitor each subscription until there are no more messages other than ‘Waiting 60 seconds(s) before polling for further changes.’ within 60 seconds.

Start all GPOADmin server services.

On each GPOADmin server:

Set the backup store on one of the consoles to the DFS share from using the //domain.fqdn/Namespace/ReplicationGroup format.

Set any other desired options required for each server.

About Us

Quest creates software solutions that make the benefits of new technology real in an increasingly complex IT landscape. From database and systems management, to Active Directory and Office 365 management, and cyber security resilience, Quest helps customers solve their next IT challenge now. Around the globe, more than 130,000 companies and 95% of the Fortune 500 count on Quest to deliver proactive management and monitoring for the next enterprise initiative, find the next solution for complex Microsoft challenges and stay ahead of the next threat. Quest Software. Where next meets now. For more information, visit www.quest.com.

Our brand, our vision. Together.

Our logo reflects our story: innovation, community and support. An important part of this story begins with the letter Q. It is a perfect circle, representing our commitment to technological precision and strength. The space in the Q itself symbolizes our need to add the missing piece — you — to the community, to the new Quest.

Contacting Quest

For sales or other inquiries, visit www.quest.com/contact.

Technical support resources

Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com.

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:

•

Submit and manage a Service Request.

•

View Knowledge Base articles.

•

Download software and technical documentation.

•

View how-to-videos.

•

Engage in community discussions.

•

Chat with support engineers online.

•

View services to assist you with your product.

Third-party contributions

This product contains the following third-party components. For third-party license information, go to https://www.quest.com/legal/license-agreements.aspx. Source code for components marked with an asterisk (*) is available at https://opensource.quest.com.

Table 35. List of third-party contributions
Component	License or acknowledgement
Azure.Core 1.21.0	MIT License Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Azure.Identity 1.3.0	MIT License Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
BouncyCastle.Crypto 1.8.1	Copyright (c) 2000 - 2017 The Legion of the Bouncy Castle Inc. (http://www.bouncycastle.org) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DevExpress.Reporting.Core 22.2.5	Developer Express - DevExpress .Net Controls & Frameworks 2000-2023
DevExpress.WinForms 22.2.5	Developer Express - DevExpress .Net Controls & Frameworks 2000-2023
DiffPlex 1.4.4	Apache 2.0
Google APIs Client Library for working with Oauth2 1.60	Apache 2.0
Google.Apis (Google API) 1.60	Apache 2.0
Google.Apis.Auth (Google API) 1.60	Apache 2.0
Google.Apis.Core (Google API) 1.60	Apache 2.0
Google.Apis.Gmail.v1 (Google API) 1.60	Apache 2.0
Microsoft.Bcl.AsyncInterfaces 6.0.0	The MIT License (MIT) Copyright (c) .NET Foundation and Contributors All rights reserved. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Microsoft.Data.Sql/Client 3.0.0	MIT License 2020
Microsoft.Graph 4.15	The MIT License (MIT) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Microsoft.Graph.Core 2.0.7.0	Copyright 2019 Microsoft Graph All right reserved. MIT License Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Microsoft.Identity.Client 4.39.0	The MIT License (MIT) Copyright (c) .NET Foundation and Contributors All rights reserved. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Microsoft.Identity.Client.Extensions.Msal 2.16.5	MIT License Copyright (c) Microsoft Corporation. All rights reserved. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Microsoft.IdentityModel.JsonWebTokens 6.15.0	MIT Template 2020
Microsoft.IdentityModel.Logging 6.15.0	MIT 2020
Microsoft.IdentityModel.Protocols 6.15.0	MIT 2020
Microsoft.IdentityModel.Protocols.OpenIdConnect 6.15.0	MIT 2020
Microsoft.IdentityModel.Tokens 6.15.0	MIT 2020
Microsoft.SqlServer.SqlManagementObjects (SMO) 161.46437.65	Microsoft SQL Server Shared Management Objects 1.0
Microsoft.Web.WebView2 1.0.818.41	Microsoft.Web.WebView2 1.0
MimeKit 2.11	MIT
Newtonsoft.Json 13.0.2	The MIT License (MIT) Copyright (c) .NET Foundation and Contributors All rights reserved. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
SharpZipLib 1.3.0.8	The MIT License (MIT) Copyright (c) .NET Foundation and Contributors All rights reserved. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
System.Buffers 4.6.28619.01	MICROSOFT .NET LIBRARY 1.0
System.Diagnostics.DiagnosticSource 4.7.1	MIT Template 2020
System.IdentityModel.Tokens.Jwt 6.15.0	MIT Template 2020
System.Memory 4.5.4	MIT 1.0 Copyright Notice - System.Memory 4.5.4 Copyright (c) .NET Foundation and Contributors
System.Memory.Data 1.0.2	Copyright Notice - System.Memory.Data 1.0.2 The MIT License (MIT) Copyright (c) 2015 Microsoft
System.Numerics.Vectors 4.5.0	MIT 1.0 Copyright Notice - System.Numerics.Vectors 4.5.0 Copyright (c) .NET Foundation and Contributors
System.Runtime.CompilerServices.Unsafe 6.0.0	MIT Template 2020
System.Security.Cryptography.ProtectedData 4.5.0	MIT Template 2020
System.Text.Encodings.Web 6.0.0	MIT Template 2020
System.Text.Json 6.0.1	MIT Template 2020
System.Threading.Tasks.Extensions 4.5.4	MIT 1.0 Copyright Notice - System.Threading.Tasks.Extensions 4.5.4 Microsoft Corporation
System.ValueTuple 4.5.0	MIT 1.0 Copyright Notice - System.ValueTuple 4.5.0 Copyright (c) .NET Foundation and Contributors
Windows Installer XML Toolset (aka WIX) 3.11	Microsoft Reciprocal License (MS-RL)

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

GPOADmin 5.18 - User Guide

Appendix: Registering GPOADmin for Office 365 Exchange Online

Appendix: GPOADmin with SQL Replication

About Us