GPOADmin
Visit shop.quest.com to buy this product online.
Buy online »

Webcast on Demand

Watch a brief demo about how GPO Containers provides organizations the flexibility to create different approval processes for different GPO’s.

Watch now »

Community

Not everyone can be a “Group Policy” expert. However, you’d be surprised about how much you know and could share in this area. This Community was established to foster a place for all users to learn from each other in the area of Group Policy and Quest GPOADmin.

Visit it now »
Trial Download
Use some of our software for a trial period and decide if you like it before you buy it.
Try »

White Paper

In this whitepaper, we’ll examine the top seven Group Policy tips and tricks for Windows 7.

Read now »

GPOADmin

Simplified Group Policy Management and Administration

As one of the most robust configuration tools in your Windows infrastructure, Group Policy plays a major role in establishing a secure and compliant networking environment for your users. With Group Policy regulating everything from critical business processes and security settings to individual workstations and printers, managing Group Policy Objects (GPOs) can become time-consuming and expensive.

Award-winning GPOADmin automates critical group policy management tasks to reduce costs and eliminate manual processes.  GPOADmin extends the Microsoft Group Policy Management Console so you can quickly and effectively administer GPO changes, and verify and compare GPO versions over time to confirm the consistency of different GPO settings.

GPOADmin

Key Features

  • Version Comparisons: Quickly verify setting consistency and improve GPO auditing with advanced, side-by-side GPO version comparisons at different intervals. 
  • Approval-based workflow: process to ensure that changes adhere to change management best practices before their deployment.
  • Delete version history: to manage and reduce size of backup store
  • Configure workflow:  to enable organizational requirements and set for specified users or groups on edit settings, cloak and uncloak and lock and unlock.
  • Workflow Commenting: Track the request, review and approval process with comments and e-mail notifications at any stage.
  • Scheduling: Enable approved changes to be implemented immediately or on a schedule.
  • Microsoft Group Policy Management Console (GPMC) for familiar look and feel.
  • Enhanced Group Policy Comparison and side-by-side GPO version comparisons to verify setting consistency.
  • Group Policy Lineage for testing of pre-production GPO "clones" before they're rolled out.
  • Hidden pre-production GPS from all but selected administrators.
  • GPO check-in and check-out to prevent simultaneous editing conflicts.
  • GPO locking: to prevent unwanted changes to product GPOs.
 

Key Benefits

 
  • Closes the gap in the native GPO management processes by automating critical tasks.
  • Helps prove compliance to ITIL, MOF, SOX, Basel II, HIPAA and C-198.
  • Integrates with existing Microsoft tools, eliminating the need to learn a third-party interface.
  • Drives availability with advanced backup and rollback capabilities.
  • Saves valuable time and reduces risk of outages by eliminating scripts and manual processes.
  • Reduces total cost of ownership (TCO) by centralizing desktop management.
  • Simplifies the enforcement of enterprise-wide business policies by enabling streamlined GPO control.
  • Drives network security by restricting access to production GPOs.

Before installing Quest GPOADmin, ensure your system meets the following minimum hardware and software requirements:

Client Install

  • 1 GHz processor
  • 512 MB RAM or greater
  • 100 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2 or Windows 7 operating systems
  • MMC 3.0
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools

Server Install

  • 1 GHz processor
  • 1 GB RAM or greater
  • 200 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2 or Windows 7 operating systems
  • MMC 3.0
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools
  • Either ADAM/AD LDS or Active Directory must be available on the network to be used for the application's configuration storage.

GPMC Extension

  • 1 GHz processor
  • 512 MB RAM or greater
  • 100 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2 or Windows 7 operating systems
  • MMC 3.0
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools

Watcher Service

  • 1 GHz processor
  • 1 GB RAM or greater
  • 200 MB hard disk space
  • Windows XP Service Pack 2, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows Server 2008 R2 or Windows 7 operating systems
  • .NET Framework 3.5 Service Pack 1
  • Microsoft Group Policy Management Console with Service Pack 1 or Remote Server Administration Tools
  • Either ADAM/AD LDS or Active Directory must be available on the network to be used for the application’s configuration storage

Port Requirements

Important! It is recommended that you conduct a thorough threat analysis before opening these services to an untrusted network.

The following ports must be open for the application to function correctly:
Name resolution can be achieved using DNS on port 53 or WINS (down-level) on port 137.

Between the client and the Quest GPOADmin Server:
      Inbound: Port 40200 (default)
      Outbound: all TCP ports

Note: To run the Version Control server on a custom port, you must set the following registry value:

Key:                HKLM/Software/Quest Software/Quest GPOADmin/RemotingValue 
Name:             Port
Value Type:    DWord
Valid Values:  1-65536
If this value is not set, the default (port 40200) will be used.

From the Quest GPOADmin Server:

Configuration Storage

  • LDAP Service - TCP/UDP - 389 -or- ADAM port (defaults to 389 or 50000)

GPO Archives

  • If you are using a network share for GPO backup storage, you may require open ports on 135, 136, 138, 139, and/or 445.
  • If you are using SQL Server for GPO backup storage, the appropriate ports will need to be open. SQL Server’s default port is 1433 or 1533 if the "hide server" option is enabled.
  • If you are using Named Pipes with SQL, arbitrary ports may be required. SQL Named Pipes is not a recommended configuration through firewalls.
  • If you are using ADAM for GPO backup storage or configuration data, ADAM will default to port 389 if not coexisting with AD. If AD is already installed, ADAM will default to port 50000.

Language Supported:

  • US English
  • GPO Containers

    Watch a brief demo about how GPO Containers provides organizations the flexibility to create different approval processes for different GPO’s.

    Watch the video »

Take a tour of GPOADmin

Screenshots 1 of 3

Screenshot #2 Screenshot #3

GPOAdmin

GPOADmin snaps into the Microsoft Group Policy Management Console (GPMC) to help streamline and automate critical tasks and provide enhanced auditing, version control and reporting capabilities.
Image 1 of 3 GPOAdmin

GPO Comparison

Industry-leading GPO comparison capabilities ensure the integrity of GPO settings and reduce the risk of policy violations..
Image 2 of 3 GPO Comparison

Rollback

With GPOADmin, you can easily rollback Group Policy Objects to their previous versions, eliminating any ill effects of an undesired change..
Image 3 of 3 Rollback
 

Learn More

Related Products

Support for This Product