Chat now with support
Chat with Support

GPOADmin 5.20 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Exporting GPO registry settings as a Desired State Configuration resource file

Desired State Configuration extends Microsoft PowerShell to facilitate environment configuration – including your GPO deployment. Through GPOADmin, you can export GPO’s user and/or computer registry settings into a resource file to take advantage of this feature. See https://docs.microsoft.com/en-us/powershell/scripting/dsc/overview/overview?view=powershell-7.1 for more information.

To export GPO registry settings:
1
Right-click the required GPO and select Export As Desired State Configuration Resource.
2
Define the resource file and settings that you want to export.
File Name - The full path to the DSC resource file to save.
Configuration Name - The configuration used to “group” the registry settings.
Node Name: The node (computer) the configuration will apply to.
Select whether to export user, computer, or both registry settings.
3
Click Next.
4
To register the exported resources, enable the option, browse to select the target container, and click Next.
5
Review the summary information and click Finish.
* 
NOTE: You can also uses the Select-ExportAsDSCResource PowerShell command to export the settings. You cannot register the resources using this command.

Import objects

Using the Import Wizard, you can import objects from a local directory or network share, a zip file, another version control system, or a version in the live network.

You can also import GPO backups created in Microsoft Security Compliance Manager version 3.0.

Migration table considerations
•
When migrating to an untrusted domain, the source entries must be SIDs and the Source Type must be set to Free Test or SID.
•
If an account cannot be mapped, it is logged in the format that GPMC is looking for.
•
If an entry is logged, change the source format to the format that is logged and try again.
•
You also have the option to use the migration table exclusively, overwrite an existing WMI filter, or to migrate the security filter.
•
If migrating the Security Filter, the source entries (for the Security Filter only) must be in domain\account format. NT AUTHORITY accounts should have a Destination Name of <Same As Source>.
To update an object in the Version Control system
1
Right-click an object and select Import.
* 
NOTE: If you are using the GPMC Extension you can also select the GPO and click Workflow | Import.
2
Select the import source.
If you select a local directory or network share:
•
Select A backup on disk and click Next.
•
Select the backup directory and the backup that you want to import, and click Next.
* 
NOTE: You also have the option to import from a zip file.
•
Select to use the migration table if required, and click Next.
* 
NOTE: You also have the option to use the migration table exclusively and to migrate the security filter.
•
Click Finish.
If you select another version control system:
•
Select A version control system and click Next.
•
Select the Version Control server and click Next.
•
Select the object that has the settings that you want to import and click Next.
•
Select the version of the controlled object that you want to import and click Next.
•
Select to use the migration table if required, and click Next.
* 
NOTE: You also have the option to use the migration table exclusively and to migrate the security filter.
•
Click Finish.
If you select a version in the live environment:
•
Select The live environment and click Next.
•
Select the domain and the object with the settings you want to import and click Next.
•
Select to use the migration table if required, and click Next.
* 
NOTE: You also have the option to use the migration table exclusively and to migrate the security filter.
•
Click Finish.
To import a backup from Security Compliance Manager
1
Right-click an object and select Import Security Compliance Backups.
2
Browse to the location of the backup you want to import and click Next.
3
Review the import details and click Finish to complete the import.
* 
NOTE: This is only supported when using the GPOADmin console. It is not supported when using the GPMC Extension.

Creating Reports

•
Available reports
•
Controlled object reports
•
Diagnostic and troubleshooting reports
•
Live, working copy, latest version, and differences reports
•
Historical Settings Reports
•
Creating RSoP validation reports
•
Exporting registry settings
•
Working with report folders

Available reports

You can generate report templates for quick real-time reporting purposes, and simple point-in-time reports for historical reasons.

When creating reports, consider the following:

•
Report templates are saved as XML files and historical reports are saved as HTML files.
•
If you change regional options on your local compuer, restart the GPOADmin client to ensure that your changes are reflected in your reports.
•
If you are using the GPMC Extension, you only have access to the History, Latest Version, Working Copy, Live, Differences, and Export Live Registry Settings To CVS reports.
•
Times displayed in GPOADmin reports will be in the local time zone of the client computer. Any times displayed in the GPMC settings reports will appear in the time zone of the GPOADmin server.
•
You must use the GPOADmin console to create report templates.
•
Reporting is not supported when using the Run as different user option to open GPOADmin.

To create a report template

•
Run the report wizard and select to save the report settings to a file.
You can double-click the report template to generate a report or right-click the report from within the Reports folder, and select Run.
To create a historical report
•
Run the report wizard and enter a unique filename in the "Save report settings to file" file.
You can double-click the report to view the saved version or -click the report and select Run.

The available reports include:

•
Controlled object reports
•
Diagnostic and troubleshooting reports
•
Live, working copy, latest version, and differences reports
•
Historical Settings Reports
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating