Chat now with support
Chat with Support

GPOADmin 5.13.5 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root) Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Working with the GPOADmin Dashboard Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands About Us

Identify user roles

Gets a list of the currently defined roles within GPOADmin. There are three default roles which cannot be changed.

Get-Roles [-PipelineVariable <String>]


Gets a list of all the currently defined roles within GPOADmin.

Modify a role

Modifies the properties of the specified user-defined role. The three default roles, System Administrator, Moderator and User cannot be changed.

Set-Role [-Role] <RoleData> [[-DisplayName] <String>] [[-Description] <String>] [[-s] <[]>] [-PipelineVariable <String>] [-WhatIf] [-Confirm]

$roles = Get-Roles

Set-Role -Role $roles[3] -DisplayName Linkers

The Get-Roles stores the roles into an array. The Set-Role command updates the display name of the role in role[3] to Linkers. The array counts from zero and not from one. The first role is zero, the second is one.


$roles = Get-Roles

Set-Role -Role $roles[3] -Description "Users of this role can link Group Policy Objects to Scopes of Management"

Updates the description of the role "Linkers".


$roles = Get-Roles

Set-Role -Role $roles[3] -s "Read, Link"

Updates the s of the role "Linkers".

Add a role

Adds a role to GPOADmin with the specified name, description, and s. Only a GPOADmin administrator can run this command.

Add-Role [-Name] <String> [[-Description] <String>] [-s] <String[]> [-PipelineVariable <String>] [-WhatIf] [-Confirm]

$s = "BlockInheritance", "Link"

Add-Role "Linker" "Can link GPOs to SOMs" $s

This first creates an array of s. You can use the Get-s command to retrieve a list of available s. Next the Linker role is defined, created, and the s are applied.


Add-Role -Name "Register Role" -Description "Can register objects" -s "Register", "Unregister"

List of s can be added in-line instead of using a variable.

Get an object's security

Gets the security on the specified version controlled object. Security is set either to a container or directly on an object.

Get-Security [-Path] <String> [[-IncludeInheritedAce]] [-Raw] [-PipelineVariable <String>]

Get-Security -Path "VCRoot:\IE Settings"

Gets the security set on the "VCRoot:\IE Settings" object.

Get-Security -Path "VCRoot:\IE Settings" -IncludeInheritedAce

Gets the security set on the "VCRoot:\IE Settings" object including inheritance.

Get-Security -Path "VCRoot:\IE Settings" -IncludeInheritedAce -Raw

Gets the security set on the "VCRoot:\IE Settings" object including inheritance in its raw format.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating