...
Role | Available Actions | How Someone Falls into Scope of the Role | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| When a Department OU is created, the requestor provides a list of the initial OU Owners. Department OU Owners can edit (add/remove) owners of the Department OU. If a Department falls in the scenario where there are no valid OU Owners (for example, all of the owners are former staff), the owners can be updated by one of the following processes:
| |||||||||
| GPO Administrators can create, delete, and manage a Department’s GPOs. | A Department OU Owner sets the GPO Administrators. In addition, Department OU Owners are considered GPO Administrators by the Tool’s permission model even if not explicitly declared as GPO Administrators. | ||||||||
| GPO Editors have permission to edit a Department’s GPOs. GPO Editors have no permissions within the Department GPO Tools. GPO Editors must be Departmental user accounts (Not EIDs.) | A Department OU Owner sets the GPO Editors. |
...
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.
Select the desired Department OU from the Select a Department OU drop down list.
The current GPO Administrators are listed under Current GPO Administrators.
Add GPO Administrators
| Status | ||||||
|---|---|---|---|---|---|---|
|
...
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Current GPO Administrators, select the user that you want to remove.
Click the Remove Selected Admin button.
View GPO Editors
| Status | ||||||
|---|---|---|---|---|---|---|
|
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.
Select the desired Department OU from the Select a Department OU drop down list.
The current GPO Editors are listed under Current GPO Editors.
Add GPO Editors
| Status | ||||||
|---|---|---|---|---|---|---|
|
...
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Rename GPO.
Select the desired Department OU from the Select a Department OU drop down list.
Under Select a GPO to Rename, select the GPO that you want to rename.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ………trying to remember…..what does this do………..????????????????????????????????????????????????????????????????????????????????????????include GPOs where permissions exist for a <DEPT>- user, indicating the GPO was likely created outside the Department GPO Tools. These GPOs may not be named correctly.Under Enter the new name for the GPO, provide the new name for the GPO. Note that the name is automatically prefixed with the Department OU Name followed by a dash.
(You do not need to enter the DEPT- prefix when setting the GPO Name.)Click the Rename GPO button.
...
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Delete GPO.
Select the desired Department OU from the Select a Department OU drop down list.
Under Select a GPO to Delete, select the GPO that you want to delete.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????<DEPT>Trustee's checkbox to include GPOs where permissions exist for a <DEPT>- user, indicating the GPO was likely created outside the Department GPO Tools.Click the Delete GPO button.
...
Reset GPO Permissions
| Status | ||||
|---|---|---|---|---|
|
| Note |
|---|
Reset GPO Permissions will restore the Tool’s default departmental permissions. This will provide your Department’s GPO Editors with GpoEditDeleteModifySecurity rights. Permissions for other departmental users and groups will be removed! |
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Reset GPO Permissions.
Select the desired Department OU from the Select a Department OU drop down list.
Next to Select a GPO, select the GPO that you want to reset the permissions on.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ????????????????????????????????????????????????????????????????????????????????????????????????????????????????<DEPT>Trustee's checkbox to include GPOs where permissions exist for a <DEPT>- user, indicating the GPO was likely created outside the Department GPO Tools. These GPOs may not have the desired permissions set.Click the Reset Permissions button.
...
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Show GPO Information.
Select the desired Department OU from the Select a Department OU drop down list.
Next to Select a GPO, select the GPO that you want to view information for.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ????????????????????????????????????????????????????????????????????????????????????????????????????????????????<DEPT>Trustee's checkbox to include GPOs where permissions exist for a <DEPT>- user, indicating the GPO was likely created outside the Department GPO Tools.
Optionally check the Show Sub-Links checkbox to ???????????????????????????????????????????????????????????????????????????????????????????????????show all GPOs linked to the OU(s) where the selected GPO is linked.