Chat now with support
Chat with Support

GPOADmin 5.21 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Microsoft 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

Editing Intune objects (Configuration profiles and Compliance policies)

Once you have a Intune objects checked out, you can edit its settings and select the user or device group to receive the profile and policies.

* 
NOTE:  
•
See the Quick Start Guide for the required minimum permissions, rights, and roles.
•
GPOADmin does not support:
•
iOS/iPadOS Security Assessment (Education) template from Intune Configuration profiles.
•
Certificate references for Intune Configuration profiles.
To edit Intune objects and assignments
1
Right-click a checked out Intune object, and select Edit.
2
From the Settings tab, click Launch Editor.
3
Update the settings and save your changes. For information on assigning groups, refer to Microsoft documentation.
4
Select the Assignments tab to include and exclude users and device groups from the selected Intune object.
* 
NOTE: The Modify Intune Assignments right is required to edit the Intune object assignment. For more information see Configuring role-based delegation.
5
Clicking Add or Remove allows you to select the required groups. You have the option of locating groups by entering their name in the search bar. Groups that have been previously added display as disabled. For information on assigning groups, refer to Microsoft documentation.
6
Click OK. You now have the option to check in the edited Intune object settings. See Checking in controlled objects for more information.

Editing WMI filters

* 
NOTE: You must edit WMI filters using the GPOADmin console.
To edit a WMI filter
1
Expand the Version Control Root and the required container. Select the WMI filter you want to edit within the version control container node in which it exists.
2
Right-click the WMI filter and select Edit.
3
Edit the settings of the WMI filter.
4
Click OK.
You now have the option to check in the WMI filter to be stored for later use or check in and request approval of the changes.

For information on creating WMI filters, see Creating WMI filters .

Editing scripts

To edit a script
1
Expand the Version Control Root and the required container. Select the script you want to edit within the version control container node in which it exists.
2
Right-click the script and select Edit.
3
Edit the settings.
4
Click OK.
You now have the option to check in the script to be stored for later use or check in and request approval of the changes.

Linking GPOs

Once GPOs have been created and configured, they must be linked to the appropriate sites, domain, or OU. Before you can link a GPO, you must register and check out the site, domain, or OU. For information on registering Scopes of Management, see Registering objects .

Users with the Link right can link a single GPO with numerous sites, domains, or OUs and link multiple GPOs to a site, domain, or OU. (For more information on setting permissions, see Configuring role-based delegation.)

The Link right grants the user the right to add, modify, and remove links. This right must exist on the GPO and the scope of management being linked.

The Modify Link Properties right grants the right to modify the Enabled and Enforce properties of a GPO Link. This right must exist on the scope of management.

The Edit right, grants the user the right to modify the Link order. This right must exist on the scope of management.

If you link more than one GPO, you must pay attention to their order. The first GPO has the highest precedence because it is processed last. The Link Report and Group Policy Results Report can help you understand the inheritance structure of your group policies.

* 
NOTE:  
•
The policies are applied according to the hierarchical structure of Active Directory. You can change the order in which the GPO is applied through the provided arrows.
•
You must have the Link right on each GPO and SOM to which you wish to link.

By default, GPOs affect all users and computers contained within a linked site, domain, or OU. To refine the application of a GPO, see Editing GPOs .

You can also select to restrict the link source to include only policies from specific containers. To restrict linking, see Viewing and editing object properties.

To link GPOs to a single site, domain, or OU
1
Right-click a checked out site, domain, or OU and select Edit.
2
Click New Link to add another GPO.
3
Select the appropriate option to either Enable or Enforce the GPO link.
4
Enable Block Inheritance if required.
You must have the Block Inheritance for SoM links right to enable this option.
5
Click OK.
To link multiple GPOs to multiple sites, domains, or OUs
1
Right-click one or more GPOs and select Link.
Any SOMs that you want to link the GPOs to must be in the available state.
2
In the left pane of the Link dialog box, expand the domains and select the SOMs you want to link to.
3
In the right pane, ensure that the Add check box is selected for the GPOs you want to link.
4
Select the appropriate option to either Enable or Enforce the GPO link. You can use the arrows provided to modify the link order.
5
Click OK.

You can also rollback pre-existing links between GPOs and sites, domains, and OUs when restoring GPOs. For information, see Restoring links to a previous version and Checking compliance .

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating