Chat now with support
Chat with Support

GPOADmin 5.19 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Restoring links to a previous version

You can restore the links between a GPO and its Scopes of Management, either to the last backup settings or to a specific history version that you select.

The affected Scopes of Management must be in the Available state, and the user must have rights to edit the SOMs, as well as the Link right, to restore the links. For more information, see Configuring role-based delegation.

To restore links to a previous version using the GPOADmin console
1
Expand the Version Control Root node and the required container.
2
Right-click an object and select Show History.
You will see the date, account, version, comment, and applicable action that generated the history item.
3
Select the version you would like to restore, right-click and select one of the following:
To restore just the links, select Restore Links.
To restore the object and the links together, select Get and then select the Restore GPO Links in the Comment box.
4
In the Restore Links box, you can review the settings that will be restored (right side) and use the toolbar buttons at the top to change the link order, remove links, or set other group policy properties.
Hover over a link to get more information. If a link has an exclamation mark beside it, the Scope of Management Object is not Available.
5
Click OK and close the History box to complete the restore.
At this point the modified SOMs, if registered, are put into a Pending Approval State. If not registered, the changes are made in the live environment.
* 
NOTE: You may need to right-click the object and select Refresh to ensure that you see its updated Status.

You can also restore Scope of Management links when rolling back a noncompliant GPO and when restoring a deleted GPO. For more information see, Checking compliance .

To restore links to a previous version using the GPMC Extension
1
Check out the Group Policy Object you want to restore.
2
Select the object and in the toolbar above, select Show History.
You will see the date, account, version, comment, and applicable action that generated the history item in a list below the Group Policy Objects list on the right.
3
Select the version you would like to restore, right-click and select one of the following:
To restore just the links, select Restore Links.
To restore the object and the links together, select Get and then select the Restore GPO Links in the Comment box.
4
In the Restore Links dialog box, you can review the settings that will be restored (right side) and use the toolbar buttons at the top to change the link order, remove links, or set other group policy properties.
5
Click OK and close the History box to complete the restore.
At this point the modified SOMs, if registered, are put into a Pending Approval State. If not registered, the changes are made in the live environment.

Managing your links with search and replace

You can select a GPO that is currently linked to an OU and search for all occurrences of that link, then choose to replace, remove, or append anywhere that GPO is linked. This can also be done manually, but the Search and Replace is faster and it ensures all links are included.

* 
NOTE: You must have the link right on each GPO and SOM you wish to manage.
To append links
1
Expand the node containing the GPO that you wish to manage and select it, then right-click the GPO and select Search and Replace.
2
To append the new links, leaving the original links intact, select Append.
You will be asked to select the second GPO in the next step.
3
Click Next.
4
Expand the tree to select the GPO to append, then click Next.
The Review Links panel now shows you the links with color coding. Red links are marked for deletion, green links are marked for addition and yellow links indicate that an attribute of the link has changed. If you notice at this point that you have made an error, click Back or Cancel to undo the proposed changes.
5
Right-click a link to change its link order, to remove it, or to set other properties.
6
Click Finish.
To replace links
1
Expand the node containing the GPO that you wish to manage and select it, then right-click the GPO and select Search and Replace.
2
To replace the links to the SOMs, select Replace.
You will be asked to select the second GPO in the next step.
3
Click Next.
4
Expand the tree to select the replacement GPO, then click Next.
The Review Links panel now shows you the links with color coding. Red links are marked for deletion, green links are marked for addition and yellow links indicate that an attribute of the link has changed.If you notice at this point that you have made an error, click Back or Cancel to undo the proposed changes.
5
Right-click a link to change its link order, to remove it, or to set other properties.
6
Click Finish.
To remove links
1
Expand the node containing the GPO that you wish to manage and select it, then right-click the GPO and select Search and Replace.
2
To remove the links, select Remove.
3
Click Next.
The Review Links panel now shows you the links with color coding. Red links are marked for deletion, green links are marked for addition and yellow links indicate that an attribute of the link has changed. If you notice at this point that you have made an error, click Back or Cancel to undo the proposed changes.
4
Right-click a link to change its link order, to remove it, or to set other properties.
5
Click Finish.

Linking GPOs to multiple Scopes of Management

If required, you can easily take existing registered GPOs and link them to any number of SOMs within your deployment.

To link GPOs to multiple SOMs
1
Select two or more registered SOMs, right-click and choose Apply Link.
2
Click the browse button to open the Choose a Group Policy Object dialog.
3
Select the required GPO and click OK.
By default, the links will be applied to all selected Scopes of Management. You can, however, select to remove the application for specific SOMs by clearing the individual check box.
The way in which the link is applied is set through the available options:
If the GPO is not currently linked to a SOM, the default settings are enabled:
•
Enabled: This settings reflects the setting in the Version Control Server properties.
•
Enforced: Not enforced.
•
Link Order: Append link order.
If the GPO is currently linked to one of the selected SOMs, the existing settings for that SOM are displayed.
6
If required, you can change the individual options or use the top level check box to set the options for all the selected SOMs.
* 
NOTE: To set the link as a specific link order, uncheck the check box for the specified SOM under the Link Order column, set the required link order using the up and down arrow. If the link order is set to a higher number than the current link count, the link will be appended.
7
Once you have all your settings in place, click OK.
When the link action completes, the results are displayed in the Link Results dialog. If any of the links failed or an SOM was skipped, an error message displays the details so that you can take corrective action.

Managing compliance issues automatically with remediation rules

You have the option to setup an automatic way to deal with objects that have become non-complaint due to a modification or deletion performed outside of GPOADmin.

By default, the remediation option is set to None (no automatic resolution) at the Version Control Root level. Any remediation option set at this level will filter down to all child objects and containers unless you have specifically configured them to override their parents settings.

 

* 

Watcher Service requirements

•
The Watcher service is required to perform the compliance remediation actions. If the service is not running all remediation settings will be ignored.
•
If the Watcher service account is not the same account as the GPOADmin service, it must be added to GPOADmin as and Administrative account.
•
Remediation is not support on Protected Settings policies and WMI Filters as these objects are not monitored by the Watcher service.
To configure compliance remediation
* 
NOTE: Only users with the Set Remediation Rule can set these options.
1
Right-click the required object or container and select Properties.
2
Select the Remediation tab and choose how you want to handle objects that have become non-compliant due to a modification or deletion.
If an object has become non-compliant due to:
Available options to resolve the compliance issue

Modification

NOTE: Rollback with links and restore with links only apply to GPOs. All other objects will perform either a rollback or a restore remediation action.
•
Rollback
•
Rollback with links
•
Incorporate live
•
Unregister

Deletion

NOTE: Restore and Restore with links remediation is not supported on Scopes of Management.
•
Restore
•
Restore with links
•
Unregister
3
Click OK. Once a rule has been set it will be applied when the object is flagged as non-compliant. If the object does not have a remediation rule applied then the first rule found on a parent container will be applied.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating