13
Step 3: Review and deploy a GPO
Step 4: Use a template to create a GPO
Step 5: Delete and restore a GPO
Step 1: Create a GPO
In an environment that has multiple Group Policy administrators, those with the Editor role can
request that new GPOs be created. However, that request must be approved by someone with
the Approver role.
In this step, you use an account that has the Editor role to request that a new GPO be created.
Using an account that has the Approver role, you approve this request to create the GPO.
1. On a computer on which you have installed AGPM Client, log on with a user account that
is assigned the Editor role in AGPM.
2. In the
Group Policy Management Console tree, click
Change Control in the forest and
domain in which you want to manage GPOs.
3.
Right-click the Change Control node, and then click
New Controlled GPO.
4. In the
New Controlled GPO dialog box:
a. To receive a copy of the request, type your e-mail address in the
Cc field.
b. Type
MyGPO as the name for the new GPO.
c. Type a comment for the new GPO.
d. Click
Create live so that the new GPO will be deployed to the production
environment immediately upon approval. Click
Submit.
5. When the
AGPM Progress window indicates that overall progress is complete, click
Close. The new GPO is displayed on the
Pending tab.
1. On a computer on which you have installed AGPM Client, log on with a user account that
has the role of Approver in AGPM.
2. Open the e-mail inbox for the account, and notice that you have received an e-mail
message from the AGPM alias with the Editor's request to create a GPO.
3. In the
Group Policy Management Console tree, click
Change Control in the forest and
domain in which you want to manage GPOs.
4. On the
Contents tab, click the
Pending tab to display the pending GPOs.
5.
Right-click MyGPO, and then click
Approve.
6. Click
Yes to confirm approval and move the GPO to the
Controlled tab.
Dostları ilə paylaş: 
