Chat now with support
Chat with Support

GPOADmin 5.15 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root) Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Working with the GPOADmin Dashboard Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Deleting version history

As you progress an object through the Version Control workflow, GPOADmin keeps an audit trail, as well as a history of all minor and major versions. If you no longer need to keep this history, you can selectively delete any of the versions except your last backup. Only the object settings are deleted; the audit trail is preserved, and you still see the entry in the object history. Deletions are permanent.

If required, you can select to remove the user account associated with the action from the view.

1
Expand the Version Control Root node, and the required container.
3
In the History dialog box, select a version from the list. (Press CTRL and click to select multiple versions.)

You can only delete major and minor versions. If you have Show All Events enabled, events that have occurred between versions cannot be deleted, as there are no settings associated with them.
Delete: This will delete the backup associated with the action.
Delete and Clear Account: This deletes the backup and clears the account name associated with the action.
2
In the bottom pane, select a version. (Press CTRL and click to select multiple versions.)
3
Select Delete to remove the backup associated with the action.
Delete and Clear Account to remove the backup and clear the account name associated with the action.

Clearing account names in version history

If required, you can remove the user account associated with a backup version from the historical view.

1
Expand the Version Control Root node, and the required container.
3
In the History dialog box, select a version from the list. (Press CTRL and click to select multiple versions.)
2
In the bottom pane, select a version. (Press CTRL and click to select multiple versions.)

Viewing and editing object properties

You can easily view and edit the details for the current version of an object in the Version Control system including the security, notification settings, keywords, approvals, lineage, remediation options, as well as the object’s location within version control.

You can also view important information about changes made in the live environment on the Change Auditor tab, if you have a supported version of Change Auditor. See the Release Notes for a complete list of supported versions. You can view changes made to GPOs, domains, and sites on this tab.

1
Expand the Version Control Root node, and the required container.
Table 13. Options

General

 

View the domain, user, the creation and modification dates, the version, the unique ID, location in version control, and the GPO status. From here you can also see and, if required, change the user responsible for an object’s management (Managed By property).

Links (From the GPO Properties page)

Edit the link to Scopes of Management.

Lineage

Manage GPO revisions by selecting a specific GPO to revert to when a rollback is performed.

Security

Delegate responsibilities over the object.

Approvals

Approval workflows for object creation, deletion, or modification.

By default, approvals are processed in the order listed on the Approvals tab in the Container or Item Properties.

NOTE: Click the Override inherited work flow check box if you want the approvals process for a container to be different from its top level container.

Notifications

Select the actions to be notified on.

Remediation

Manage which action will occur automatically when an object becomes non-complaint due to an edit or deletion performed outside of GPOADmin.

Change Window

Set the day and time when users can make modifications to objects.

Attestation

Set the date range limit for a GPO deployment and configure the notification message that is sent when the limit is surpassed

The version control system is polled every 24 hours to identify GPOs that have not been deployed within the specified date range. Once identified, the attestation email notification is sent to the account that is designated as its manager (Managed By property).

Keywords

View all the keywords for a given object. For here you can also, add and remove keywords as required.

When a new keyword is entered it is saved into a primary list of keywords. This list is displayed for each object. The checkboxes indicate which keywords are applied to each object.

Group Policy Inheritance

View the group policy inheritance for the selected Scope of Management. including the location where they are linked and the order in which they will be applied.

Change Auditor

View changes made to objects in the live environment. You can move the columns and sort by columns.

Naming Standards

Select to enforce naming conventions for GPOs and WMI filters.

Enter the rule, a test name, and click Verify to ensure its accuracy.

If you receive a green check, then the name you entered is allowed and your rule is running as desired. If you receive a red X, then the name you entered failed the verification. Adjust the rule to allow the name to pass or adjust the name to match the rule.

Users will now be required to use names that adhere to your organization’s standards. If they enter a name that does not comply, they see the rule details that they must comply with.

 

Example rule: ^[a-z]+[0-9]+_GPO$

This rule states that from the start of the line there must be at least one or more lower-case characters immediately followed by at least one or more numeric characters immediately followed by the literal string “_GPO” and nothing after that.

Table 14. Options

General

 

View the domain, user, the creation and modification dates, the version, the unique ID, location in version control, and the GPO status. From here you can also see and, if required, change the user responsible for an object’s management (Managed By property).

Links (From the GPO Properties page)

Edit the link to Scopes of Management.

Lineage

Manage GPO revisions by selecting a specific GPO to revert to when a rollback is performed.

Security

Delegate responsibilities over the object.

Approvals

Number of required approvers for object creation, deletion, or modification.

Notifications

Select the actions to be notified on.

Remediation

Manage which action will occur automatically when an object becomes non-complaint due to an edit or deletion performed outside of GPOADmin.

Keywords

View all the keywords for a given object. For here you can also, add and remove keywords as required.

When a new keyword is entered it is saved into a primary list of keywords. This list is displayed for each object. The checkboxes indicate which keywords are applied to each object.

Change Auditor™

View changes made to objects in the live environment. You can move the columns and sort by columns.

For more information on the available reports, see Creating Reports .

Creating a report

You can create reports that show the details of controlled objects, as well as diagnostic and troubleshooting information. For more information see, Creating Reports .

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating