Chat now with support
Chat with Support

GPOADmin 5.18 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Enable and disable Protected Settings

This command sets the status of the "Enable Protected Settings for Group Policy Objects." option. If true, then GPO settings are verified against Protected Settings policies during check-in. Only a GPOADmin administrator can run this command.

Set-EnableProtectedSettings [[-EnableProtectedSettings]] [-PipelineVariable <String>] [-WhatIf] [-Confirm]


Disables the Protected Settings for GPOs.

Set-EnableProtectedSettings –EnableProtectedSettings

Enables the Protected Settings for GPOs

Get a list of Protected Settings

Use this command to get a list of all Protected Settings policies assigned to the specified container. The 'Enable Protected Settings for Group Policy Objects' must be enabled for this command to return the list. Otherwise a warning stating the Protected Settings feature is not enabled is displayed.

Get-AssignedProtectedSettingsPolicies [-Container] <VersionControlContainerData> [-PipelineVariable <String>]

Get-Item . | Get-AssignedProtectedSettingsPolicies

Gets a list of all Protected Settings Policies assigned to the current container.


Get-Item "VCRoot:\Locations" | Get-AssignedProtectedSettingsPolicies

Gets a list of all Protected Settings Policies assigned to the "Locations" container.

Add Protected Settings

You can add the Protected Settings policy to a container. This command requires the "Modify Protected Settings Assignments" . First you need to have a Protected Setting object configured with the setting you want to check against, then set up the assignment information, and apply it to a container.

Add-ProtectedSettingsPolicies [-Container] <VersionControlContainerData> [-ProtectedSettingsPolicies] <ProtectedSettingsPolicyAssignment> [-PipelineVariable <String>] [-WhatIf] [-Confirm]

$PSP = Get-ProtectedSettingsPolicies | ? {$_.Name -eq "PROT_01"}

$assignment = New-ProtectedSettingsPolicyAssignment -ProtectedSettingsPolicy $PSP -ValidationRule Value

get-item .\locations | Add-ProtectedSettingsPolicies -ProtectedSettingsPolicies $assignment

Adds the "PROT_01" Protected Settings object to the container "Locations" with a Validation Rule of "Value".


Appendix: GPOADmin Event Log

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating