Export (0) Print
Expand All

Performing AGPM Administrator Tasks

Applies To: Windows Server 2008, Windows Server 2008 R2

Advanced Group Policy Management (AGPM) lets an AGPM Administrator (Full Control) configure domain-wide options and delegate permissions to Approvers, Editors, Reviewers, and AGPM Administrators. By default, an AGPM Administrator is someone who has Full Control— all AGPM permissions—and who therefore can perform tasks associated with any role.

In an environment in which multiple people develop Group Policy Objects (GPOs), you can choose to let all Group Policy administrators perform the same tasks and have the same level of access. Or, you can choose to let AGPM Administrators delegate permissions to Editors who can change GPOs and to Approvers who deploy GPOs to the production environment. AGPM Administrators can configure permissions to meet the needs of your organization.

  • Configuring Advanced Group Policy Management: Configure the AGPM Server Connection and e-mail notification, delegate access to GPOs in the production environment, and configure logging and tracing for troubleshooting.

  • Managing the Archive: Delegate access to GPOs in the archive, limit the number of versions of each GPO stored, import a GPO from another domain, and back up and restore the archive.

  • Managing the AGPM Service: Stop and start the AGPM Service or change the archive path, the AGPM Service Account, or the port on which the AGPM Service listens.

  • Move the AGPM Server and the Archive: Move the AGPM Service, the archive, or both to a different server.

noteNote
Because the AGPM Administrator role includes the permissions for all other roles, an AGPM Administrator can perform the tasks usually associated with any other role.

Additional considerations

By default, the AGPM Administrator role has Full Control—all AGPM permissions:

  • List Contents

  • Read Settings

  • Edit Settings

  • Create GPO

  • Deploy GPO

  • Delete GPO

  • Export GPO

  • Import GPO

  • Create Template

  • Modify Options

  • Modify Security

The Modify Options and Modify Security permissions are unique to the role of AGPM Administrator.

-----
You can learn more about MDOP in the TechNet Library, search for troubleshooting on the TechNet Wiki, or follow us on Facebook or Twitter.
-----
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft