GPO Management

Active Administrator Group Policy provides organizations with a quick, secure and manageable way to edit and create Group Policy Objects (GPOs). You can assess the status of Group Policies, copy Group Policies across domains, see where Group Policies are stored, edit Group Policy Objects safely, and perform “what if” modeling to determine how changes will affect Group Policy.

See detailed information about your GPOs

Active Administrator provides extended information not readily available with native tools. With the Group Policy Object viewer, you can see which GPOs are unlinked, where GPOs are linked, security group filters for a GPO, the number of revisions and other statistical data points. You can also see which containers store Group Policy Objects.

Edit GPOs offline to keep your production environment stable

Edit a live Group Policy Object and you risk causing problems in your production environment. To mitigate this risk, Active Administrator makes a copy of the GPO that you can edit in an offline repository, without interfering with the normal operation of Active Directory. When editing is complete, you can publish the changed GPO to Active Directory in a single operation. To maintain the integrity of the GPO, the offline repository uses a check-in/check-out system.

Safely test proposed changes with “what if” modeling

“What if” modeling further mitigates the risk of pushing a Group Policy to your production environment by projecting how changes will affect a GPO. You can get an exact picture of how your actions will affect Group Policies by testing how the removal of objects from OUs, sites and security groups will affect application and errors on remote machines. You can then run and export reports that document the resultant set of policies.

Review and roll back changes to your GPOs

Active Administrator includes a specialized service that watches your domain controllers for GPO changes and archives all changes in the GPO history area. You can quickly view all edits made to a GPO and easily roll back to any previously archived version.

Compare two versions of a GPO to see what changed over time

Comparison reporting allows you to see the differences between two historical versions of a Group Policy Object to see exactly what changes were made between two different points in time. You can see what was changed, added or removed, along with a statistical summary of variances. You can also run a variety of other GPO reports, including reports on GPO settings and affected registry keys, and you can easily export any report.

Review Group Policy application and software deployment on remote machines

Client-side troubleshooting allows you to quickly detect errors or view Group Policy application on remote machines. The log files can be sorted by type, date/time, source and more. You can also view software deployment and user configuration log files.