AGPM: GPLinks are being destroyed each time I deploy

A customer reported an issue to me recently where the customer reported that when using AGPM 3.0, each time they deployed out to production, their GPLinks were being destroyed. Why is this occurring? What’s probably relevant here is to outline what’s happening and why. When AGPM manages GPO’s it performs all its editing offline. When…

1

AGPM 4.0 to be released in October

As part of the official announcement on the MDOP blog, Advanced Group Policy Management 4.0 (AGPM) will be releasing in October to customers. With this release we had strong feedback on two main areas of improvement and an additional area that improves discoverability and manageability. 1. Multi Forest/Multi Domain Support We heard strong feedback that…

3

Migration Tables do not work with Group Policy Preferences

We have had an issue raised to us about Migration Tables and GPP that we wanted to take a moment to clarify. What are Migration Tables you might ask? GPMC provides a mechanism for Importing and Exporting policies. This is especially useful for moving tested GPO’s from one forest to another such as from the…

0

AGPM: Install the right version, backup and restore the archive, and learn more

There is new content lurking in the Advanced Group Policy Management (AGPM) TechNet Library. Stop by for information about everything from choosing which version to install to how to back up and restore the archive. What’s new and choosing which version to install To support a broader range of operating systems, both AGPM 3.0 and…

1

Locking down AGPM for least privilege

I actually wrote this post awhile ago on my blog and forgot to cross post this to the GP blog. Bad me…though I have updated it recently with new information! 🙂 Essentially its the minimum permissions you need to run AGPM without Domain Admins access given to the service account… Hope this helps!  Michael Kleef,…

0

AGPM 3.0 doesnt preserve all the Deny ACEs

We had a great customer question today on AGPM 3.0 that would probably interest quite a few of you using AGPM.   “…A customer imports some GPOs [into AGPM] in order to change control them. Some of the GPOs have Deny permission for particular users’ that have administrative rights or similar. After changing the GPOs with…

3