The Department GPO Tools allow departments to create and manage Group Policy Objects using a convenient and easy to use web interface.
There are two roles within the tool: OU Owner, GPO Administrator.
Role | Available Actions | How Someone Falls into Scope of the Role |
|---|---|---|
OU OWNER |
| When a Department OU is created, the requestor provides a list of the initial OU Owners. Department OU Owners can edit (add/remove) owners of the Department OU. If a Department falls in the scenario where there are no valid OU Owners (for example, all of the owners are former staff), the owners can be updated by one of the following processes:
|
GPO ADMINISTRATOR | GPO Administrators can create, delete, and manage a Department’s GPOs.
| A Department OU Owner sets the GPO Administrators. |
GPO EDITOR | GPO Editors have permission to edit a Department’s GPOs. GPO Editors have no permissions within the Department GPO Tools. GPO Editors must be Departmental user accounts (Not EIDs.) | A Department OU Owner sets the GPO Editors. |
View GPO Administrators OU OWNER
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.
Select the desired Department OU from the Select a Department OU drop down list.
The current GPO Administrators are listed under GPO Administrators.
Add GPO Administrators OU OWNER
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Enter the EID to Add, enter the EID of the person you want to add to the GPO Administrators for your Department.
GPO Administrators must be current faculty, staff or students.
Optionally check the Exact Match checkbox if you have entered the exact EID to search on.
(For example, when searching abc1 with the checkbox unchecked, the search results will include abc1, abc12, abc123, etc.).Click the Check Names button.
The search will only return the EIDs of current faculty, staff, and students.
Select the desired user in the Search Results.
Click the Add New Admin button.
Remove GPO Administrators OU OWNER
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Current GPO Administrators, select the user that you want to remove.
Click the Remove Selected Admin button.
Add GPO Editors OU OWNER
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Admins Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Enter the Native AD account or Group to Add, enter the name of a Departmental user or a group containing only Departmental users (no EIDs) that want to add to the GPO Administrators for your Department.
Optionally check the Exact Match checkbox if you have entered the exact EID to search on.
(For example, when searching abc1 with the checkbox unchecked, the search results will include abc1, abc12, abc123, etc.).Click the Check Names button.
The search will not return EIDs or any group that contains EIDs. GPO Editors must only be Departmental user accounts.
Select the desired user or group in the Search Results.
Click the Add New Editor button.
Remove GPO Editors OU OWNER
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the OU Owners section, click on GPO Editors Group.
Select the desired Department OU from the Select a Department OU drop down list.
Under Current GPO Editors, select the user that you want to remove.
Click the Remove Selected Editor button.
Create GPO GPO ADMINISTRATOR
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Create GPO.
Select the desired Department OU from the Select a Department OU drop down list.
Under GPO Name, enter the name for the new GPO that you are creating. Note that the name is automatically prefixed with the Department OU Name followed by a dash.
(You do not need to enter the DEPT- prefix when setting the GPO Name.)Optionally provide a description for the new GPO under Description.
Click the Create GPO button.
Copy GPO GPO ADMINISTRATOR
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Copy GPO.
Select the desired Department OU from the Select a Department OU drop down list.
Under Select a GPO to Copy, select the GPO that you want to copy.
By default, only the selected Department’s GPOs are shown. Check the Show all GPOs on the AD Domain checkbox to see all GPOs in the domain if you want to copy another Department’s GPO.Under Enter the name for the copy, enter the name for the new GPO that you are creating. Note that the name is automatically prefixed with the Department OU Name followed by a dash.
(You do not need to enter the DEPT- prefix when setting the GPO Name.)Click the Copy GPO button.
Rename GPO GPO ADMINISTRATOR
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Rename GPO.
Select the desired Department OU from the Select a Department OU drop down list.
Under Select a GPO to Rename, select the GPO that you want to rename.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ………trying to remember…..what does this do………..????????????????????????????????????????????????????????????????????????????????????????Under Enter the new name for the GPO, provide the new name for the GPO. Note that the name is automatically prefixed with the Department OU Name followed by a dash.
(You do not need to enter the DEPT- prefix when setting the GPO Name.)Click the Rename GPO button.
Delete GPO GPO ADMINISTRATOR
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Delete GPO.
Select the desired Department OU from the Select a Department OU drop down list.
Under Select a GPO to Delete, select the GPO that you want to delete.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????Click the Delete GPO button.
Only GPOs without links can be deleted. If the GPO is currently linked anywhere, the Delete GPO button will be greyed out. You must first unlink it before deleting it.
This limitation is a precaution against adverse effects caused by accidentally deleting the wrong GPO or a GPO incorrectly thought of as not in use.
Reset GPO Permissions GPO ADMINISTRATOR
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Reset GPO Permissions.
Select the desired Department OU from the Select a Department OU drop down list.
Next to Select a GPO, select the GPO that you want to reset the permissions on.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ????????????????????????????????????????????????????????????????????????????????????????????????????????????????Click the Reset Permissions button.
Show GPO Information GPO ADMINISTRATOR
Log into the Department GPO Tools on https://www.austin.utexas.edu/deptgpotools.
From the menu on the left side of the page, under the GPO Administrators section, click on Show GPO Information.
Select the desired Department OU from the Select a Department OU drop down list.
Next to Select a GPO, select the GPO that you want to view information for.
Optionally check the Find all GPOs with AAD Trustee's checkbox to ????????????????????????????????????????????????????????????????????????????????????????????????????????????????
Optionally check the Show Sub-Links checkbox to ???????????????????????????????????????????????????????????????????????????????????????????????????