policy management mea architect microsoft...
TRANSCRIPT
![Page 1: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/1.jpg)
[TITLE] MDOP : Advanced Group
Policy Management
Vijay Kolli
MEA Architect
Microsoft Corp
![Page 2: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/2.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
AGPM : The Sell
• GPO Management – Offline editing
– History
– Difference reporting
– Search
– Multi forest
• Workflow – Delegation
– Source control
![Page 3: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/3.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE] Archive/Offline
GPO 1 GPO 2
Architecture
Domain Controller AGPM Server
Administrative
Desktop
Backups
GPO 1
Backups
of GPO 2
GPO 1
GPO 2
Production
AGPM Client (GPMC)
XML File of backups
![Page 4: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/4.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
AGPM 4.0 Client and Server Support
Operating system on which AGPM Server 4.0 runs
Operating system on which AGPM Client 4.0 runs
Status of AGPM 4.0 support
Windows Server 2008 R2
Windows 7/R2 Supported Best Experience
Windows Vista with SP1/2008
Partially supported Cannot edit policy settings or preference items that exist only in Windows Server 2008 R2 or Windows 7
Windows Server 2008
Windows 7/R2 Unsupported
Windows Vista with SP1/2008
Supported with limitations Cannot report or edit policy settings or preference items that exist only in Windows Server 2008 R2 or Windows 7
![Page 5: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/5.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
AGPM : The Sell
• GPO Management – Offline editing
– History
– Difference reporting
– Search
– Multi forest
• Workflow – Delegation
– Source control
![Page 6: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/6.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Offline Editing
Edit GPOs offline before deploying live
![Page 7: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/7.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE] Auditing
Get complete details on what happened, who did it, and why
![Page 8: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/8.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
History
History is a list of complete backups
Rollback to a safe state
Safeguard live environment from unapproved changes and untested settings
![Page 9: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/9.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
MDOP AGPM
Authoring, History
Demo
![Page 10: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/10.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Differences
Compare settings between GPOs
changed
added
removed
![Page 11: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/11.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Reporting
• Settings
– Parity with Group Policy settings reports
• Difference
– Versions: older compared to newer
– Any 2 GPOs
– Template: GPO compared to its baseline
![Page 12: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/12.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Search (Filtering)
• What it does
– Filters GPOs by properties
– Allows for column precision
– Maintains a list of the recent 10 searches
• What it doesn’t do
– Search for settings
![Page 13: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/13.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Multi Forest Support
• What it does
– Allows GPO movement from AGPM to AGPM
– Preserves origin metadata
– Supports migration tables
• What it doesn’t do
– Online moves between domains/forests
– GPP and Migrations Tables limitation
![Page 14: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/14.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Windows 7/Server 2008 R2
• What was supported
– Group Policy Preferences
– Reporting for all new extensions
• Applocker, DNSSEC, IE8, Scheduled Tasks
– Service execution
– RSAT
![Page 15: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/15.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
MDOP AGPM
Differences Demo
![Page 16: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/16.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
AGPM : The Sell
• GPO Management – Offline editing
– Difference reporting
– History
– Search
– Multi forest
• Workflow – Delegation
– Source control
![Page 17: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/17.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Service
Archive/Offline GPO 1 GPO 2 Domain Controller AGPM Server
Administrative
Desktop
GPO 1
GPO 2
Production
AGPM Client (GPMC)
Proxy
Permissions
![Page 18: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/18.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Delegation - Roles
Reviewer
Full Control Editor
Approver
Define granular control without making everyone a Domain Admin
![Page 19: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/19.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
MDOP AGPM
Role Delegation
Demo
![Page 20: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/20.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Workflow Control
Check-out
Edit
Check-in Requests
Reporting
Deployment
Offline
![Page 21: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/21.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Granular change tracking
![Page 22: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/22.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Purge historical data
![Page 23: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/23.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
Last Step Delegation
![Page 24: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/24.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE]
MDOP AGPM
Workflow
Demo
![Page 25: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/25.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE] Q&A
Q & A
![Page 26: Policy Management MEA Architect Microsoft Corpdownload.microsoft.com/download/A/D/7/AD763779-A86... · [PRESENTATION TITLE] [PRESENTATION TITLE] AGPM 4.0 Client and Server Support](https://reader034.vdocuments.us/reader034/viewer/2022050501/5f93c1616bc792425b382fc5/html5/thumbnails/26.jpg)
[PRESENTATION TITLE]
[PRESENTATION TITLE] Partners to go to: