Chat now with support
Chat with Support

GPOADmin 5.19 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Version Control data in the directory

GPOADmin does not delete the information stored in the directory when it is uninstalled. The Version Control information may be deleted manually if it is no longer required.

GPOADmin uses "working copies" of objects for editing purposes. If the Version Control information is deleted from the server, while objects are still pending creation or in a minor version, these working copies may be seen as "Unregistered" if a new instance of the version control information is instantiated.

 

Navigating the GPOADmin console

The GPOADmin console consists of a window divided into two panes.

The left pane displays a hierarchical structure of the live enterprise objects and the Version Control systems that are available to you.

•
Version Control Root enables administrators to organize many objects logically based on their enterprise structure.
•
Lost and Found contains any deleted containers and the associated version controlled items and sub-containers.
•
Reports which mirror the contents of My GPOADmin Reports folder in the Documents folder.
•
Search Folders which allow you to view the status of objects within the Version Control system.
•
Protected Settings Root is available to store and manage the Protected Settings policies deployed within your environment (if this option is enabled, see Working with Protected Settings policies ).

The right pane displays the details that pertain to the selected item in the console tree. For version controlled objects this includes:

•
name
•
type
•
version
•
status
•
pending action
•
compliance status
•
whether workflow is enabled
•
deployment time
•
managed by (who is responsible for it)
•
the user who has it checked out
•
the domain where it is applied
•
when it was modified
•
when it was last deployed
•
associated keywords

Search folders

Search folders

Search folders are an easy way to view the status of objects within the Version Control system. A complete list of default search folders is made available to cover most of your needs.

* 
NOTE: If your deployment includes multiple servers, when you select a search folder (or refresh the page), you are presented with a dialog that allows you to narrow the search results by selecting one or more of the connected servers.

However, you can also create custom search folders to meet your specific requirements. See Creating custom search folders.

The default search folders include:

•
All Managed objects: Displays all registered objects under version control within GPOADmin.
•
Available: Displays all objects with an available status within the version control system.
•
Checked out: Displays all objects not available due to being checked out for modification.
•
Checked out to me: Displays all objects checked out to the user who is logged in to GPOADmin.
•
Pending approval: Displays all objects awaiting specified approvals before being deployed.
•
Pending deployment: Displays all objects awaiting deployment to the live environment.
•
Failed deployment: Displays all failed deployments to the live environment.
•
Containers: Displays container name, managed by, and full path information. From here you can search for specific containers based on previously applied keywords.
•
Cloaked: Displays all cloaked GPOs.
* 
NOTE: You must have the View Cloaked right to see these GPOs.
•
Locked: Displays all locked GPOs.
•
Unauthorized modifications: Displays all registered objects that were modified in the live environment outside of the GPOADmin version control system.
•
Deleted objects: Displays all objects awaiting deletion.
•
Unregistered: Displays all objects in the managed forest not registered within the version control system.
•
Workflow enabled objects: Displays all objects registered within the version control system which are workflow enabled.
•
Workflow disabled objects: Displays all GPOs registered within the version control system as workflow disabled.
* 
NOTE: Any setting changes to these GPOs will be applied within version control as well as to the live environment.
•
Linked scopes of management: Displays Scopes of Management that have linked GPOs.
•
Unlinked scopes of management: Displays Scopes of Management that have no linked GPOs.
•
Desired State Configuration Resources: Displays all the registered DSC scripts.

Creating custom search folders

Custom search folders allow you to combine many variations to augment the ability to view the status of the objects within your Version Control system deployment.

For example, because the “Name” and “Domain Name” support the use of wildcards (such as Name = *Accounting*), you can select to view all the unregistered objects that contain “Accounting” in their name to help pinpoint issues that require your attention.

You can also select to filter the search to return results based on specified GPO settings.

To create a custom folder
1
Right-click the Search Folders and select New Custom Search.
2
Right-click New Custom Search and select Properties to configure the type of objects that will be included in the search folder.
3
Begin by selecting the object attribute from the Field. These options allow you to create custom folders so that you can easily perform actions in bulk on objects that contain a specified value.
You can select from cloaked, compliant, deleted, domain name, unique ID, locked, name, status, pending action, type, GPOADmin ID, workflow enabled, deployment results, and keywords.
* 
NOTE: Creating a filter with the Deleted field = True returns objects that have been deleted outside of the Version Control system; while a filter on Status = Deleted returns objects that have been deleted internally and have a deleted status.
4
Select the required Value for the selected object attribute. The available selection depends on the chosen field. (For example, the available keyword values reflect the primary list of keywords previously assigned to the object; the deployment results have a “Success” or “Fail” value with success returning items that were successfully deployed during the last deployment and fail returning items that failed their last deployment.)
5
Click Add.
6
Continue refining your query by adding attributes and values as required. You can also use {And} and {Or} operators to further refine the folder contents.
To add a logical grouping, click on the whitespace to enable the {And} and {Or} buttons.
To add a clause outside of a grouping, click on the white space to enable the Add button.
To add a clause to a grouping, click on the open bracket of the clause.
To delete a clause click on word 'And' or 'Or' and click the delete button.
7
For a a GPO search, you can select the Apply settings to results option and enter a value to filer the search results. For example, you easily search for and view all GPOs that contain the word "Enabled".
8
Select the run icon to run the query to see if it returns the expected result.
9
If you have more than one service installed, you need to select the service where the custom search will be saved and select OK.
* 
NOTE: While you are creating your filter, only objects from the service where you are saving the custom search will display. You can use this sample data to ensure the search meets your needs. Once the filter is applied, it will be applied to all connected services.
10
Once you are satisfied with the folder configuration, save it, and click OK.
11
Right-click the New Custom Search folder and select Rename to provide a meaningful name.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating