立即与支持人员聊天
与支持团队交流

GPOADmin 5.18 - User Guide

Introducing Quest GPOADmin Configuring GPOADmin Using GPOADmin
Connecting to the Version Control system Navigating the GPOADmin console Search folders Accessing the GPMC extension Configuring user preferences Working with the live environment Working with controlled objects (version control root)
Creating a custom container hierarchy Selecting security, levels of approval, and notification options Viewing the differences between objects Copying/pasting objects Proposing the creation of controlled objects Merging GPOs Restoring an object to a previous version Restoring links to a previous version Managing your links with search and replace Linking GPOs to multiple Scopes of Management Managing compliance issues automatically with remediation rules Validating GPOs Managing GPO revisions with lineage Setting the change window for specific actions Working with registered objects Working with available objects Working with checked out objects Working with objects pending approval and deployment
Checking compliance Editing objects Synchronizing GPOs Exporting and importing
Creating Reports Appendix: Windows PowerShell Commands Appendix: GPOADmin Event Log Appendix: GPOADmin Backup and Recovery Procedures Appendix: Customizing your workflow Appendix: GPOADmin Silent Installation Commands Appendix: Configuring Gmail for Notifications Appendix: Registering GPOADmin for Office 365 Exchange Online Appendix: GPOADmin with SQL Replication About Us

GPOADmin scripts

GPOADmin installs the following PowerShell scripts to c:\Program Files\Quest\GPOADmin\Scripts:

Grants the specified service account Edit settings, Delete, and Modify Security privileges and assigns ownership to all the GPOs in the specified domain.

Runs a specified GPOADmin dynamic report and emails the results to a list of recipients.

Sets, revokes, and reports on environment permissions for the service account.

GPOADmin.MinimumPermissions -ServiceAccount <string> -Domain <string> -LDAPServer <string> -Permissions <string> -Report <switch> -Revoke <switch> -Confirm <switch>

GPOADmin.MinimumPermissions.ps1 -ServiceAccount "MyDomain\serviceaccount" -Domain "MyDomain.com" -LDAPServer "MyDC.MyDomain.com" -Permissions "All" -Report

Available commands

The following section lists all available GPOADmin commands. To see examples on how to use some of these commands, see Using the GPOADmin PowerShell commands (Examples) .

NOTE:  

 

Add

Clear

Copy

Get

 

 

Get

New

Push

Remove

Reset

Select

Set

Set

Switch

GPOADmin PowerShell provider extensions

GPOADmin has extended the following standard PowerShell commands:

GPOADmin has extended Microsoft’s New-Item and Remove-Item PowerShell commands to add the ability to create and delete items from the GPOADmin version control.

Example: Create a container name HR

new-item -Path VCRoot:\ -Name HR -ItemType Container

Example: Create a GPO name HR_GPO in the HR container

new-item -Path VCRoot:\HR -Name HR_GPO -ItemType GPO -Comment "Set the minimum password length to 8 characters"

Example: Remove the GPO name HR_GPO in the HR container

remove-item -Path vcroot:\HR\HR_GPO

Example: Remove a container name HR

remove-item -Path VCRoot:\HR

The GPOADmin PowerShell provider has extended the Get-ChildItem and the New-PSDrive command to include the following parameters:

Table 20. Commands

Get-ChildItem extensions

New-PSDrive extensions

New-Item

Remove-Item

Using the GPOADmin PowerShell commands (Examples)

The following examples show how to apply PowerShell commands to perform many of the GPOADmin functions. The commands are especially beneficial in environments where repetitive processes are required.

Example commands are included for the following:

The ability to use a command is related to the role and user running it. For example, if the user has the User role then the commands they can run are limited to the actions associated with the s assigned to this role. This ensures that workflow, security, and protection are maintained with the commands.

For details on what is available for each role, see Configuring role-based delegation.

Before you can use the examples, you must ensure that you have registered the commands. See Registering the GPOADmin PowerShell commands .

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级