2003 server - Wednesday, February 27, 2008 4:13 - 0 Comments

Using AGPM for Advanced Group Policy Delegation

Microsoft’s AGPM tool is a great way to have an extra layer of security when managing group policy on your network.

The Advanced Group Policy Management (AGPM) tool from Microsoft is a great new tool that goes well beyond the abilities of the traditionally used Group Policy Management Console (GPMC).

One of the strengths of the AGPM tool is how it has extended the delegation of group policy objects. One of these features is the more granular control over delegation. The AGPM has its own delegation model which allows for more specific settings giving greater leverage over delegation assignments. AGPM also allows for a new feature in the offline editing of GPO’s. This means that group policy administrators will now have to check-in and check-out GPO’s for editing. This not only provides better security but also prevents multiple people from editing the same live GPO at the same time.

Article written by MyComputerAid.com