Compartilhar via

Edit a GPO Offline

  • Artigo

To make changes to a controlled GPO (Objeto de Política de Grupo), you must first check out a copy of the GPO from the archive. No one else will be able to modify the GPO until it is checked in again, preventing the introduction of conflicting changes by multiple Group Policy administrators. When you have finished modifying the GPO, you check it into the archive so that it can be reviewed and deployed to the production environment.

A user account with the Editor or Administrador AGPM (Controle Total) role, the user account of the Approver who created the GPO, or a user account with the necessary permissions in AGPM (Gerenciamento Avançado de Política de Grupo) is required to complete this procedure. Consulte os detalhes em "Considerações adicionais" neste tópico.

Editing a GPO offline

To edit a GPO, you check out the GPO from the archive, edit the GPO offline, and then check the GPO into the archive so that it can be reviewed and deployed (or modified by other Editors).

  • Check out a GPO from the archive for editing

  • Edit a GPO offline

  • Check a GPO into the archive

To check out a GPO from the archive for editing

  1. Na árvore Console de Gerenciamento de Política de Grupo, clique em Alterar Controle na floresta e no domínio nos quais você deseja gerenciar GPOs.

  2. Na guia Conteúdo, clique na guia Controlado para exibir os GPOs controlados.

  3. Right-click the GPO to be edited, and then click Check Out.

  4. Type a comment to be displayed in the History of the GPO while it is checked out, and then click OK.

  5. When the Progress window indicates that overall progress is complete, click Close. On the Controlled tab, the state of the GPO is now identified as Checked Out.

To edit a GPO offline

  1. On the Controlled tab, right-click the GPO to be edited, and then click Edit.

  2. In the Group Policy Management Editor window, make changes to an offline copy of the GPO.

    Dica

    To disable all Computer Configuration settings or all User Configuration settings, right-click the GPO in the Group Policy Management Editor window and click Properties. Select Disable Computer Configuration settings or Disable User Configuration settings as appropriate.

  3. When you have finished modifying the GPO, close the Group Policy Management Editor window.

To check a GPO into the archive

  1. On the Controlled tab:

    • If you have made no changes to the GPO, right-click the GPO and click Undo Check Out, and then click Yes to confirm.

    • If you have made changes to the GPO, right-click the GPO and click Check In.

  2. Type a comment to be displayed in the audit trail of the GPO, and then click OK.

  3. Quando a janela Progresso indicar que o progresso geral está concluído, clique em Fechar. On the Controlled tab, the state of the GPO is identified as Checked In.

Additional considerations

  • To check out and edit a GPO, by default you must be the Approver who created or controlled the GPO, an Editor, or an Administrador AGPM (Controle Total). Specifically, you must have List Contents and Edit Settings permissions for the GPO. Additionally, to edit the GPO you must be the individual who has checked out the GPO.

  • To check in a GPO, by default, you must be an Editor, an Approver, or an Administrador AGPM (Controle Total). Specifically, you must have List Contents and either Edit Settings or Deploy GPO permissions for the GPO. If you are not an Approver or AGPM Administrator (or other Group Policy administrator with Deploy GPO permission), you must be the Editor who has checked out the GPO.

  • When editing a GPO, any Group Policy Software Installation upgrade of a package in another GPO should reference the deployed GPO, and not the checked-out copy.

Additional references

-----
É possível obter mais informações sobre o MDOP na Biblioteca do TechNet, pesquisar sobre solução de problemas no Wiki da TechNet ou nos seguir no Facebook ou Twitter.
-----