Category
产品版本
主题
副主题
Create a DNS host record and created a SPN instead of changing all the synchronization targets every time we upgrade to a new server (4372237)
We noticed that the synchronization is dependent on the servername of the GPOADmin service. ... So instead of changing all the synchronization targets every time we upgrade to a new server, we have the following solution:<br>Create a DNS host and created a SPN, is this supported solution?
Do we need SQL server for GPOAdmin? (4371915)
We are building the server to host GPOAdmin. ... If you decide to go with SQL server as configuration store you will need to install a SQL server to host the GPOAdmin database you can also use AD/LDS that use to be the preferred method but nowadays we advise to use SQL specially in large environments
How to collect debug logs from GPOAdmin (4311548)
From within GPOAdmin console right-click the domain and choose options. ... From the options menu go to: ... Logging > Configuration ... Under Log location, tick File System Folder and specify a folder path in which you want to store the log file.
Performance issues in the GPOADmin Console (4214416)
When opening the GPOADmin Console, any or all of the following issues occurs: ... - The specified domain does not exist or cannot be contacted ... - The error message: "Access is denied" appears and after a while, the MMC Snap-in turns unavailable and crashes with a thrown COM Exceptions.
Unable to login from remote except for the service account (4378440)
Both server and client are running version 5.20.0.5. ... The only user account that can authenticate successfully against the GPOAdmin server is the service account used to install the upgrade. ... Even members of Groups that are configured as admins are not able to logon remotely
How to set a preferred domain controller in GPOADmin console? (4373599)
What are the steps required to set a preferred domain controller in GPOADmin console? ... Sometimes there are performance issues due to replication and Quest Support recommends to set a preferred DC less busy and as close as possible to the GPOADmin server to improve performance.
Migrate GPOADmin to another server. (4360777)
Instructions on how to migrate the GPOADmin service to another server. ... Here are the steps to go forward with moving the GPOADmin service to another server ... 1. Stop the existing GPOADmin service.
Microsoft InTune configuration (4370406)
Error related with the setting of account permissions in Azure rather than application permissions. ... They look very similar in the UI, however if the incorrect permissions are set you can see this error.
Migrate GPOAdmin SQL Database to a new SQL server (4276835)
Migrating the GPOADmin SQL database to a new SQL serve can be done with the following steps: ... Check the security on the GPOADmin database in SQL server. ... Note any accounts associated with the GPOADmin database (typically this would only be the service account and one administrator).
DSC feature of GPOADmin (4378413)
What kind of information can be exported using DSC feature? ... Only the registry portion of GPOs may be exported into a Desired State Configuration (DSC). ... Only register information configured on the GPO is exported as a PowerShell, other configurations are not being exported, like: Create a local user, create files, etc.
Report wizard takes time to open (4378404)
When opening or creating reports it may take sometime for the wizard to open. ... This is expected in an environment with many domains managed by GPOADmin. ... When creating a new report one of the checks is for which domains the user has permissions to run reports against.
Force GPOADmin to present the "Configure Version Control" wizard on next logon. (4246734)
If it is required, due to some unrecoverable scenario where the configuration store is unreachable through current means, such as Windows Authentication to the SQL server failing, you may want to reconfigure the server to use another authentication method until this can be resolved.<br>However, since you cannot log in, it's not possible to re-configure the GPOADmin server to do so.<br>This article will outline how to force the GPOADmin server to present the configuration wizard.
Are all Visual C++ Redistributable versions needed on the servers? (4378345)
Visual C++ 2013 Redistributable (32bit and 64bit) ... Visual C++ 2015-2022 Redistributable (32bit and 64bit) ... Are all those necessary? ... GPOADmin currently does not rely on any of the Visual C++ Redistributable packages.
GPOAdmin and the latest LDAP channel binding and LDAP signing requirements for Windows (4225465)
Starting in March 2020, Microsoft will begin enforcing LDAP channel binding and LDAP signing to increase the security of network communications between an Active Directory Domain Services (AD DS) or an Active Directory Lightweight Directory Services (AD LDS) and its clients.
What does the GPOAdmin Watcher Service Do? (4282324)
The Watcher service monitors the configuration store for any changes. ... This is done by implementing a directory synchronization where a single enumeration is performed when the service is started resulting in a cookie being generated.
Unable to delete GPO after upgrade to 5.20.1.5 (4378346)
In this situation, the server and client update for GPOADmin 5.20.1.5 failed to update one file that should have been updated resulting in the crash when deleting a GPO. ... The client-only update does correct this and can be installed atop the server and client update to resolve the issue.
Is it possible to compare all GPOs linked to one OU with those linked in another OU in another domain in the same forest? (4378264)
<p>Is it possible to compare all GPOs linked to one OU with those linked in another OU in another domain in the same forest?</p> <p>There are multiple ways to address this request. ... To view only the registry values, a Policy Analysis report can be performed on each Organizational Unit (OU), allowing for a comparison of registry values.
Multiple "Working copy" gpo's appear in GPMC (4209389)
An error may have occurred during a deploy or check in, as a result GPO Admin could not clean up the working copy. ... The first thing to do is to verify that all of the working copies are indeed orphaned by counting the number of working copies seen in GPMC to and comparing that number to the number of checked out GPOs using the Checked out search folder logged in to GPOADmin as an Administrator.
Cannot install GPOADmin - The Microsoft Evergreen WebView2 Runtime must be installed (4252475)
When attempting to install GPOADmin, you receive a message stating "The Microsoft Evergreen WebView2 Runtime must be installed", but you have already installed this component. ... <div>Uninstall Microsoft Edge WebView2 Runtime and reboot the server.</div>
Connection Problem to Office 365 for SMTP Service in GPOADmin over a http proxy (4378299)
Proxy is setup and Firewall ports open. ... Browser connection to Microsoft Login is working. ... Application in Entra ID is set up and Mailbox has permissions to use it. ... The certificate is setup as well in Entra ID app and GPOAdmin.
Upgrade fails with Quest GPOADmin Setup Wizard ended prematurely. (4372572)
Or, if you want the installer to create a log in verbose mode as well to review possible errors, then add parameter /l*v [log name].
Unable to configure SMTP notification with anonymous authentication (4378206)
We are trying to configure notifications with SMTP server on port 25 windows authentication. ... But it keeps trying to use the credential from the service account. ... Can we modify something, so the application doesn't use authentication.
Encryption used for GPOADmin (4378128)
<p>The communication of the GPOAdmin client with the GPOADmin service is encrypted, if so what is the method of encryption being used.</p> <p>GPOADmin will use the same communication encryption setting used for other network communications between the client and server.
Text displayed in subject field of email approval notifications (4378081)
<p>The text displayed in the subject field of email notifications doesn't provide meaningful information to the users.</p> <p>The identifiers embedded within the subject are utilized by the GPOADmin server in validating the approval and applying it to the correct object.
Email notifications arrive with the time set to the UTC time zone (4378080)
<p>When emails are sent to the service account in GPOADmin, the time is offset and appears to be UTC time.</p> <p>The time displayed in UTC format is an expected behavior.
新产品关联性