Chat now with support
Chat with Support

GPOADmin 5.19 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Registered status

Registered status

You can quickly see the status of registered GPOs, starter GPOs, scripts, DSC scripts, WMI filters, sites, domains, and OUs. The objects will either be available for check out, already checked out, or checked in and awaiting approval to be committed to the enterprise. The options available to you at each state will depend on your specific role and permission. Registered objects will be in one of the following states:

 

Table 12. Registered Status
Status
From this state, depending on your assigned role and enabled options, you may have the ability to:

Available
•
link
•
search and replace
•
edit
•
check out
•
import and export settings
•
import Security Compliance Manager Backup in group policies
•
request approval (for objects that have minor versions greater than zero)
•
deploy (for objects that have minor versions greater than zero)
•
label
•
cloak/uncloak GPOs
•
lock/unlock GPOs
•
enable/disable workflow for GPOs, SOMs, and WMI Filters
•
managed by
•
check compliance
•
unregister objects
•
protected setting - export
•
create and save reports dealing with latest, and live objects, and the difference between them
•
show history
•
Synchronize – Synchronize Now, Set Synchronization Targets, and Validate Synchronization Results
•
edit object properties
•
refresh the object
•
cut
•
copy
•
mark objects for deletion
•
rename (This does not apply to SOMs.)

 

Table 13. Registered Status
Status
From this state, depending on your assigned role and enabled options, you may have the ability to:

Checked Out
•
link
•
search and replace
•
edit objects
•
check in objects
•
undo any check out
•
import and export settings
•
import Security Compliance Manager Backup in group policies
•
request approval (for objects that have minor versions greater than zero)
•
deploy (for objects that have minor versions greater than zero)
•
label
•
managed by
•
protected setting - export and verify
•
create and save reports dealing with latest, live, and working copy objects, and the difference between them
•
show history
•
Synchronize – Synchronize Now, Set Synchronization Targets, and Validate Synchronization Results
•
edit object properties
•
refresh the object
•
cut
•
copy
•
rename (This does not apply to SOMs.)

Pending Approval
•
link
•
search and replace
•
export settings
•
withdraw approval request
•
approve changes
•
reject
•
deploy the changes to the environment
•
label
•
managed by
•
protected setting - export
•
create and save reports dealing with latest and live objects, and the difference between them
•
show history
•
Synchronize –Set Synchronization Targets, Validate Synchronization Results
•
edit object properties
•
refresh the object
•
cut
•
copy

Pending Deployment
•
link
•
search and replace
•
export settings
•
reject
•
withdraw approval
•
deploy the changes to the environment
•
label
•
managed by
•
protected setting - export
•
create and save reports dealing with latest, and live objects, and the difference between them
•
show history
•
Synchronize –Set Synchronization Targets, Validate Synchronization Results
•
edit object properties
•
refresh the object
•
cut
•
copy

Removing registered objects

If you no longer want the object to be available for changes, you can remove it from the Version Control system, as long as you have been granted the Unregister right. Unregistering version-controlled objects is now recursive, unless you select the lower-level objects individually.

To remove objects from the Version Control system using the GPOADmin console
1
Expand the Version Control Root node and the required container.
2
Right-click the object and select Unregister.
To remove GPOs from the Version Control system using the GPMC Extension

Unregistering GPOs using the GPMC Extension is not recursive. If you want to unregister all child objects, use the GPOADmin console.

1
Select the Group Policy Objects node and then select the GPO.
2
Click Register or right click and select Unregister.
* 
NOTE: You can view a list of Unregistered objects in the Search Folders in the GPOADmin console. This includes GPOs, scripts, DSC scripts, WMI filters, and SOMs.

Viewing the live environment

As the administrator, you may want to allow users to see the live environment from within the GPOADmin console. This will, for example, enable you to delegate GPO, OU, or SOM object registration (and recursive registration) to specific users in your organization.

However, you may not want all domains within the live environment to be displayed to all users. Through the live environment properties you can also restrict which domains will display, be included in reports, and be available within the object creation wizard.

To permit a user to see the live environment
1
Login to GPOADmin as a GPOADmin administrator.
2
Right-click the Live Environment node and select Properties.
3
On the Security tab, add one or more user who require access to the live environment.
4
Click OK.
To exclude specific domains from being displayed in the live environment
1
Login to GPOADmin as a GPOADmin administrator.
2
Right-click the Live Environment node and select Properties.
3
On the Domains tab, select the domains to exclude and click OK.

Working with controlled objects (version control root)

•
Creating a custom container hierarchy
•
Selecting security, levels of approval, and notification options
•
Viewing the differences between objects
•
Copying/pasting objects
•
Proposing the creation of controlled objects
•
Merging GPOs
•
Restoring an object to a previous version
•
Restoring links to a previous version
•
Managing your links with search and replace
•
Managing compliance issues automatically with remediation rules
•
Validating GPOs
•
Working with registered objects
•
Working with available objects
•
Working with checked out objects
•
Working with objects pending approval and deployment
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating