GPOADmin 5.16 - User Guide

If required, select Add Servers to include other servers that contain the GPOs that you want to target. Select the server and click Connect. Enter the required credentials and click OK.


	NOTE: The credential entered will be stored and used to connect to the associated server during the synchronization process.This allows for the synchronization of GPOs between untrusted domains.

You can also select to remove any servers that have been added. If you do however, any target GPOs setup from this server for synchronization will also be removed.

Select the required GPOs and choose Synchronization | Add Synchronization Target to select the required target GPOs. The list of all available GPOs will display.

Select the required targets and click OK.

If required, we provide the option to setup a migration table by selecting the target and choosing Synchronization | Select Migration Table. From here, you can add (or remove), create, modify the migration tables that are going to be used during the synchronization using the Microsoft Migration Table Editor.

The migration tables, which are xml files, contain the mapping between the source and the target accounts to ensure they have the same access. If permissions are not an issue, the migration table would not be required. It is stored in C:\Program Files\Quest\GPOADmin\MigrationTables.

You are now ready to set the synchronization options.

Select the target and choose Synchronization to set the synchronization options. You can choose between the following:

•

Clear Migration table: Clear the tables when no longer required.

•

Use Migration Table Exclusively: If enabled, the migration (import operation) will not proceed if any settings security principals or UNC paths configured within the source GPO do not exist in the migration table.

•

Migrate Security Filters: Migrates any security principals from the security filter that are found in the migration table.

•

Target State: Select the state that you want the target to be in after the synchronization completes. You can choose between Available, Checked Out, Pending Approval, or Deployed. The default is Checked Out.


	NOTE: If a target state of Deployed is to be used, it is recommended that this account is a member of the GPOADmin Administrators as they are the only ones who can Approve multiple times.

•

Synchronize Deletions: Select to enable this option, if you want any deleted source GPOs to also be deleted in the target.

•

Set target WMI Filters: Select this option to synchronize WMI filters between domains. You can choose between the following options:

•

None: When you select this option, the WMI filter in the target GPO will not be updated. Use this option to disable previously set WMI Filter synchronizations.

•

Auto-map By Name: When you select this option, if a WMI Filter in the target domain is found with the same name as the WMI Filter linked to the source GPO, it is assigned to the target GPO.

•

Select WMI Filter: This opens a browser that lists all of the WMI Filters in the target domain where the connected account has access. From this list, select the WMI Filter to assign to the target GPO.

Once you have your targets set, it is recommended to validate the synchronization targets by selecting the target GPO and clicking Tools | Validate Synchronization Targets.

The synchronization targets are stored using their version control id and their display name. Over the course of time, the name may change or the object may be deleted. During the validation a connection to the target server is made and a check is performed to see if the synchronization target still exists or if the name has changed.

If there is an issue, the target will be displayed with warning icon and a tool-tip to inform you of the issue.

If you select to Cancel the editor, the warning will not persist.

If you select OK, the warning will remain to alert you that the issues must be addressed. When ready to address the issue, simply select the Correct button at the top of the dialog or right-click and select Correct.

To change the service account used to synchronize GPOs

In the Version Control Root, select the source GPO, and choose Synchronization | Set Synchronization Targets.

This opens a dialog that displays the GPO targets and their synchronization settings.

Select any one of the target GPOs, choose Tools | Update Credentials, and enter the new credentials.

To perform a manual synchronization

Right-click the source GPO and choose Synchronization | Synchronize Now.

This opens the Synchronization Progress dialog and allows you to perform a synchronization without redeploying the source GPO.

Select the GPOs to synchronize (or select all using Ctrl + A) and click Synchronize.


	NOTE: If nothing is selected, all items will be synchronized. NOTE: You can also select a target and click the SynchSource header to select all the associated synchronization targets for that item.

The synchronization progress displays if the synchronization is pending, synchronizing, done, failed, or canceled.


	NOTE: If the synchronization fails, you can view the error by hovering over the faulted item. You can retry by selecting the Synchronize button again.