Active Directory GPO Management

    View GPOs.

    ADManager Plus offers different ways to view GPOs, and an administrator can choose a view depending on the requirement. The different ways to view GPOs and the objects linked to these are:

    View all available GPOs in a domain.

    Administrators can view the list of all available GPOs in a domain using this option.

    Procedure:

    The GPOs available in a domain can be viewed using 'Select Domain' available on the 'Manage GPO' page.

    Steps:

    To view all the GPO(s) available in a domain:

    1. Click 'Management tab'.
    2. In 'GPO Management', click 'Manage GPOs'.
    3. Select the required domain using 'Select Domain.

    View all the GPOs linked to a specific domain/OU/site.

    Administrators can instantly view the list of all the GPOs that are linked to any specific domain/OU/site using this option.

    Procedure:

    Using 'Select' on the 'Manage GPO Links' page, the GPOs linked to specific domain, OUs, or sites can be viewed.

    Steps:

    To view all the GPO(s) linked to a domain, OU, or site:

    1. Click 'Management tab'.
    2. In 'GPO Management', click'Manage GPO Links'.
    3. Select the required domain, OUs, or sites using 'Select'.
    4. This will list all the GPO(s) linked to the selected domain, OUs, or sites. You can also view other details like 'Link Status', 'Enforce Status', 'GPO Inheritance Status', 'GPO Status' etc...

    View all the OUs/sites that a GPO is linked to.

    This option enables the administrators to know the OUs/sites that any GPO is linked to.

    Procedure:

    The OUs/sites that a GPO is linked to can be viewed by clicking on the particular GPO from the list of GPOs generated using 'Select Domain'.

    Steps:

    To view all the OUs/sites to which a GPO is linked:

    1. Click 'Management tab'.
    2. In 'GPO Management', click 'Manage GPO'.
    3. Select the required domain using 'Select Domain'.
    4. Click on the GPO for which you need to view the linked OUs/sites.
    5. You can also view the 'Link Status' and 'Enforce Status' status of this particular GPO, for each of the OUs and sites it is linked to.

    Create GPOs.

    New GPOs can be created using ADManager Plus, thus eliminating the need to install GPMC in the machine that runs ADManager Plus.

    Procedure:

    Using 'Create new GPO' at the top right corner of the'Manage GPOs' page, administrators can create GPOs and link those to OUs, sites, or domain.

    Steps:

    To create a new GPO:

    1. Click 'Management tab'.
    2. In 'GPO Management', click 'Manage GPOs'.
    3. Click 'Create new GPO' on the top right corner of the page.
    4. In the 'Create GPO' window that opens, enter the name of the new GPO in the text box beside 'GPO name'.
    5. Click 'Link Later' to link the new GPO to a domain, OUs, or sites at a later point in time.
    6. Click 'Link Now' to link the new GPO to a domain, OUs, or sites right at the time of GPO creation.
      1. To link the new GPO to OUs or domain, select 'OU/Domain'. Select the domain or OUs to be linked using the check box.
      2. To link the new GPO to sites, select 'Sites'. Select the sites to be linked using the check box.

    Edit GPOs.

    Administrative template settings of both user and computer configuration can be edited using ADManager Plus.

    Procedure:
    The 'Edit GPO Settings' in the action column beside each GPO helps edit the administrative template settings associated with each GPO.

    Steps:

    To edit administrative template settings of a GPO:

    1. Click 'Management tab'.
    2. In 'GPO Management', click 'Manage GPOs'.
    3. Select the domain where the required GPOs are located using 'Select Domain'.
    4. In the 'Edit GPO Settings' window that opens, navigate to the administrative template setting to be modified as follows:
      GPO Name → Computer/User Configuration → Policies → Administrative Templates
    5. Select the folder where the setting to be edited is available. (You can also directly search a setting using the search option available at the top of the page.)
    6. Click on the setting to be edited.
    7. In the window that opens, you can enable,disable, or not configure the setting.
    8. Make other changes, if any, in the space provided below 'Options'.
    9. Click 'Apply' to apply the modifications made to the setting.

    Note: You can edit only settings present in "Administrative templates" based on Windows server 2016 admx files.

    Enable/disable GPOs.

    With ADManager Plus 'GPO Management', administrators can enable or disable, at one go, multiple GPOs in the required domains. Administrators can also choose to enable/disable the GPOs completely or partially (either the user configuration or computer configuration settings), as needed.Administrators can also enable/ disable a single GPO or GPOs in bulk.

    Procedure:

    Using 'Select Domain' in 'Manage GPOs' get the list of all GPOs, and enable/disable them completely or partially, as required.

    Steps:

    To enable/disable GPO(s):

    1. Click 'Management tab'.
    2. In 'GPO Management', click 'Manage GPOs'.
    3. Select the domain where the required GPOs are located using 'Select Domain'.
    4. Select the required GPO(s). (You can also locate the required GPO(s) using the search option located at the top of this page)
    5. GPO(s) can be enabled completely or partially as follows:
      • To enable GPO(s) completely: Select 'Enable' from the 'Manage' option located above the GPO list to fully enable the GPO(s), or, enable both 'User Configuration Settings' and 'Computer Configuration Settings' using the toggle buttons located beside each GPO.
      • To enable user configuration only: Select 'Enable User Configuration' from the 'Manage' option located above the GPO list, or, enable the 'User Configuration Settings' and disable the 'Computer Configuration Settings' using the toggle buttons located beside each GPO.
      • To enable computer configuration only: Select 'Enable Computer Configuration' from the 'Manage' option located above the GPO list, or, enable the 'Computer Configuration Settings' and disable the 'User Configuration Settings' using the toggle buttons located beside each GPO.
    6. GPOs can be disabled completely or partially as follows:
      • To disable GPO(s) completely: Select 'Disable' from 'Manage' option located above the GPO list to fully disable the GPO(s), or, disable both 'User Configuration Settings' and 'Computer Configuration Settings' using the toggle buttons located beside each GPO.
      • To disable user configuration only: Disable the 'User Configuration Settings' and enable the 'Computer Configuration Settings' using the toggle buttons located beside each GPO.
      • To disable computer configuration only: Disable the 'Computer Configuration Settings' and enable the 'Enable User Configuration' settings using the toggle buttons located beside each GPO.

    Delete GPOs.

    Administrators can delete those GPOs which are no longer required using the 'Delete' option available in ADManager Plus.

    Procedure:

    After selecting the required domain using 'Select Domain' in the 'Manage GPO' page, choose the GPOs which are to be deleted. Select 'Delete' from the 'Manage' option above the GPO list.

    Steps:

    To delete GPO(s):

    1. Click 'Management tab'.
    2. In 'GPO Management', click 'Manage GPOs'.
    3. Select the domain where the required GPOs are located using 'Select Domain'.
    4. Select the GPO(s) to be deleted. (You can also locate the required GPO(s) using the search option located at the top of this page)
    5. Select 'Delete' from the 'Manage' option located above the GPO list to delete the GPO(s).