GPOADmin

Group policy management and administration simplified

Control and simplify Group Policy management.

GPOADmin automates critical group policy management tasks, reducing your costs and eliminating time-consuming manual processes. You can quickly and effectively administer changes to Group Policy Objects (GPOs) because GPOADmin extends the Microsoft Group Policy Management Console. This also allows you to verify and compare GPO versions over time to confirm the consistency of various GPO settings.

Features

Key Features

  • Version comparisons –Enables you to improve GPO auditing and verify setting consistency quickly and easily with advanced, side-by-side GPO version comparisons at various intervals.
  • Approval-based workflow –Ensures that prior to deployment, changes adhere to change management best practices.
  • Delete version history –Enables you to delete the history of multiple versions to help you manage and reduce the size of the backup store.
  • Workflow commenting –Enables you to track requests, reviews and approvals with comments and e-mail notifications at any stage in the process.
  • Scheduling –Allows you to immediately implement or schedule approved changes.
  • Microsoft Group Policy Management Console –Maintains a familiar visual experience for your users with GPMC.
  • Enhanced Group Policy comparison –Helps you verify setting consistency with side-by-side GPO version comparisons.
  • Group Policy lineage –Gives you the ability to test pre-production GPO "clones" before rolling them out.
  • Hidden pre-production GPO –Limits pre-production GPO access to you and other selected administrators.
  • GPO check-in and check-out –Helps your organization prevent simultaneous editing conflicts.
  • GPO locking –Enables you to prevent unwanted and unauthorized changes to production GPOs.
  • Pre- and post-actions –Enables users to execute custom actions before or after a GPOADmin change to facilitate integration with internal processes and systems.
  • Mobile integration –Allows you to rerun the deployment from your mobile device with Dell™ Mobile IT if the previous deployment fails.

Key Benefits

  • Automates critical tasks, enabling you to close the gap in the native GPO management processes.
  • Helps you prove compliance to MOF, ITIL, Basel II, SOX, C-198 and HIPAA.
  • Saves you time by eliminating the need to learn a third-party interface because it integrates with your existing Microsoft tools,
  • Provides you with advanced backup and rollback capabilities to drive availability.
  • Reduces your organization’s risk of outages and saves valuable time by eliminating scripts and manual processes.
  • Centralizes desktop management, thus reducing your organization’s total cost of ownership (TCO).
  • Simplifies your organization’s enforcement of enterprise-wide business policies with streamlined GPO control.
  • Restricts access to production GPOs to drive your organization’s network security.

Specifications

Before installing Quest GPOADmin, ensure your system meets the following minimum hardware and software requirements:

Client Install
  • 1 GHz processor
  • 512 MB RAM or greater
  • 100 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2,Windows Server 2012 or Windows 7 operating systems, Windows 8 operating system
  • MMC 3.0
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools
Server Install
  • 1 GHz processor
  • 1 GB RAM or greater
  • 200 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2,Windows Server 2012, or Windows 7 operating systems,Windows 8 operating system
  • MMC 3.0
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools
  • Either ADAM/AD LDS or Active Directory must be available on the network to be used for the application's configuration storage.
GPMC Extension
  • 1 GHz processor
  • 512 MB RAM or greater
  • 100 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 or Windows 7 operating systems , Windows 8 operating system
  • MMC 3.0
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools
Watcher Service
  • 1 GHz processor
  • 1 GB RAM or greater
  • 200 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2,Windows Server 2012 or Windows 7 operating systems , Windows 8 operating system
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools
  • Either ADAM/AD LDS or Active Directory must be available on the network to be used for the application’s configuration storage
Port Requirements

Important! It is recommended that you conduct a thorough threat analysis before opening these services to an untrusted network.

The following ports must be open for the application to function correctly:
Name resolution can be achieved using DNS on port 53 or WINS (down-level) on port 137.

Between the client and the Quest GPOADmin Server:
      Inbound: Port 40200 (default)
      Outbound: all TCP ports

Note: To run the Version Control server on a custom port, you must set the following registry value:
Key:                HKLM/Software/Quest Software/Quest GPOADmin/ RemotingValue 
Name:             Port
Value Type:    DWord
Valid Values:  1-65536
If this value is not set, the default (port 40200) will be used.

From the Quest GPOADmin Server: 

Configuration Storage

  • LDAP Service - TCP/UDP - 389 -or- ADAM port (defaults to 389 or 50000)

GPO Archives

  • If you are using a network share for GPO backup storage, you may require open ports on 135, 136, 138, 139, and/or 445.
  • If you are using SQL Server for GPO backup storage, the appropriate ports will need to be open. SQL Server’s default port is 1433 or 1533 if the "hide server" option is enabled.
  • If you are using Named Pipes with SQL, arbitrary ports may be required. SQL Named Pipes is not a recommended configuration through firewalls.
  • If you are using ADAM for GPO backup storage or configuration data, ADAM will default to port 389 if not coexisting with AD. If AD is already installed, ADAM will default to port 50000.

Screenshots

loading

GPOAdmin

Take a tour of key functionality in GPOAdmin interface to experience its capabilities and ease of use.

Take a Screenshot Tour

GPOAdmin - Overview

GPOAdmin Overview

GPOADmin snaps into the Microsoft Group Policy Management Console (GPMC) to help streamline and automate critical tasks and provide enhanced auditing, version control and reporting capabilities.

GPOAdmin - GPO Comparison

GPOAdmin GPO Comparison

Industry-leading GPO comparison capabilities ensure the integrity of GPO settings and reduce the risk of policy violations..

GPOAdmin - Rollback

GPOAdmin Rollback

With GPOADmin, you can easily rollback Group Policy Objects to their previous versions, eliminating any ill effects of an undesired change.