Upload GPO Package to Workspace ONE UEM

With a range of GPO backups now available, we can use the GPO migration tool to upload the package to Workspace ONE UEM for distribution.  This exercise will cover selecting a GPO package to upload to the Workspace ONE UEM Console that we can distribute to our devices.

1. Uploading GPOs to Workspace ONE UEM

  1. Return to the PowerShell terminal by clicking the PowerShell icon from the task bar.
  2. For the Task selection, enter 3 to Upload the GPO to AirWatch and press ENTER.
  3. Enter https://labs.awmdm.com for the awServer and press ENTER.
  4. Enter your email address for the awUsername and press ENTER.  This is the same username you used to login to the Workspace ONE UEM Console in previous steps.
  5. Enter VMware1! for the awPassword and press ENTER.

Continue to the next step for instructions on obtaining the remaining parameter values from the Workspace ONE UEM Console (awTenantAPIKey and awGroupID).

1.1. Navigate to the Workspace ONE UEM Administration Console

  1. Click Chrome icon from the task bar.
  2. From the Workspace ONE UEM Console, click Groups & Settings.
  3. Click All Settings.

2. Retrieve the REST API Key

  1. Click System.
  2. Click Advanced.
  3. Click API.
  4. Click REST API.
  5. Click and drag or double-click to highlight the API Key text for the AirWatchAPI service.
  6. Right-click and select Copy.
  7. Click Close to exit the REST API menu.

2.1. Paste the Copied API Key

  1. Return to the PowerShell Terminal by clicking the PowerShell icon from the task bar.
  2. Paste the copied API Key for the awTenantAPIKey parameter by right-clicking, then press ENTER.

3. Retrieve the Organization Group Numerical ID

Return to the Workspace ONE UEM Console.

  1. Click Groups & Settings.
  2. Click Groups.
  3. Click Organization Groups.
  4. Click Details.
  5. The numerical ID at the end of the URL is your Organization Group Numerical ID.  Highlight this text and right-click.
  6. Click Copy.

3.1. Paste the Copied Organization Group Numerical ID

  1. Return to the PowerShell Terminal by clicking the PowerShell icon from the task bar.
  2. Paste the copied Organization Group Numerical ID for the awGroupID parameter by right-clicking, then press ENTER.

4. Wait for API Authentication

After inputting the connection details, a prompt will be displayed stating Confirming AirWatch API authentication... this may take a few moments.  This process will check that the API Authentication was successful and that the Group ID provided exists and can be accessed with the provided API Key.

Once this completes, you will be presented with a popup to select the GPO Backup for Upload.  Continue to the next step.

5. Select GPO to Upload

  1. Select the GPO you captured in the previous steps. This GPO is in the format GPO <machinename> <date> <time>.
  2. Click OK.

A series of loading tasks will begin to run, notated by the progress bars at the top of the PowerShell terminal.  These will inform you what step the process is currently on.

5.1. Confirm the GPO Package App was uploaded to the Workspace ONE UEM Console Successfully

When the process has completed successfully, you should see the following text:

Successfully saved GPO package app to the AirWatch Console!

----- IMPORTANT -----
Be sure to navigate to the AirWatch Console and assign the application '{filename}' to the appropriate users and devices!
----- IMPORTANT -----

The app is now uploaded to the Workspace ONE UEM Console and is ready for assignment.  You will assign this package to a device in an upcoming exercise.

NOTE: If you are uploading multiple GPOs in a single package, they will be applied to enrolled devices in the order in which they are selected from the Select GPO Backups to Upload prompt. If the order of the GPOs matters for your deployment, ensure you select them in the intended order!

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.