Chat now with support
Chat with Support

GPOADmin 5.15 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root) Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Working with the GPOADmin Dashboard Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Overwrite a GPOs security filter

Overrides the security filter of the specified GPO.


To add a user or group:

$gpo = Get-Item VCRoot:\SOME_GPO

$filter = Get-SecurityFilter $gpo

$trustee = New-Trustee domain\user


Set-SecurityFilter $gpo $filter

To remove a specific trustee from the security filter, use the Get-SecurityFilter command and store the result in a variable. The result is a zero based list. If you know the index of the trustee you want to remove, use the RemoveAt command on the list.

$gpo = Get-Item VCRoot:\SOME_GPO

$filter = Get-SecurityFilter $gpo


Set-SecurityFilter $gpo $filter

If you know the name, you can first search for the trustee and store the account in a variable then user the Remove command.

$gpo = Get-Item VCRoot:\SOME_GPO

$filter = Get-SecurityFilter $gpo

$trustee = $filter | where{$_.Name –eq ‘domain\user’}


Set-SecurityFilter $gpo $filter

Protected Settings commands

The examples in this section deal with some of the basic GPOADmin Protected Settings commands. Protected Settings policies contain settings that you want to control. They are protected in the sense that they contain and identify the settings that may not be altered by users. This provides an added level of security for the policies within your organization. If a user attempts to create, edit, or remove the flagged settings they are stopped.

Gather Protected Settings information

Returns the status of the "Enable Protected Settings for Group Policy Objects." option. The command informs you if the Protected Settings are enabled.

Get-EnableProtectedSettings [-PipelineVariable <String>]


Returns the status of the "Enable Protected Settings for Group Policy Objects." option.

Enable and disable Protected Settings

This command sets the status of the "Enable Protected Settings for Group Policy Objects." option. If true, then GPO settings are verified against Protected Settings policies during check-in. Only a GPOADmin administrator can run this command.

Set-EnableProtectedSettings [[-EnableProtectedSettings]] [-PipelineVariable <String>] [-WhatIf] [-Confirm]


Disables the Protected Settings for GPOs.

Set-EnableProtectedSettings –EnableProtectedSettings

Enables the Protected Settings for GPOs

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating