deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-24 14:53:44 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

CI Update

Browse Source
This commit is contained in:
VSC-Service-Account
2019-06-04 22:13:57 +00:00
parent 13bd3bfe64
commit 858476cf2f
1820 changed files with 28427 additions and 28190 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
mdop/agpm/agpm-server-tab-agpm30ops.md
View File

@ -36,7 +36,7 @@ The maximum number of unique versions to store for each GPO does not include the
When a GPO version is deleted, a record of that version remains in the history of the GPO, but the GPO version itself is deleted from the archive. You can prevent a GPO version from being deleted by marking it in the history as not deletable.
 
### Additional references
@ -46,9 +46,9 @@ When a GPO version is deleted, a record of that version remains in the history o
- [Performing Reviewer Tasks](performing-reviewer-tasks-agpm30ops.md)
 
 

6
mdop/agpm/agpm-server-tab-agpm40.md
View File

@ -36,7 +36,7 @@ The maximum number of unique versions to store for each GPO does not include the
When a GPO version is deleted, a record of that version remains in the history of the GPO, but the GPO version itself is deleted from the archive. You can prevent a GPO version from being deleted by marking it in the history as not deletable.
 
### Additional references
@ -46,9 +46,9 @@ When a GPO version is deleted, a record of that version remains in the history o
- [Performing Reviewer Tasks](performing-reviewer-tasks-agpm40.md)
 
 

6
mdop/agpm/approve-or-reject-a-pending-action-agpm30ops.md
View File

@ -42,7 +42,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
If an Approver's e-mail address is included in the **To e-mail address** field on the **Domain** **Delegation** tab, the Approver will receive e-mail from the AGPM alias when an Editor or Reviewer submits a request.
 
### Additional considerations
@ -52,9 +52,9 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
- [Performing Approver Tasks](performing-approver-tasks-agpm30ops.md)
 
 

6
mdop/agpm/approve-or-reject-a-pending-action-agpm40.md
View File

@ -42,7 +42,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
If an Approver's e-mail address is included in the **To e-mail address** field on the **Domain** **Delegation** tab, the Approver will receive e-mail from the AGPM alias when an Editor or Reviewer submits a request.
 
### Additional considerations
@ -52,9 +52,9 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
- [Performing Approver Tasks](performing-approver-tasks-agpm40.md)
 
 

6
mdop/agpm/approve-or-reject-a-pending-action.md
View File

@ -42,7 +42,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
If an Approver's e-mail address is included in the **To** field on the **Domain** **Delegation** tab, the Approver will receive e-mail from the AGPM alias when an Editor or Reviewer submits a request.
 
### Additional considerations
@ -52,9 +52,9 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
- [Performing Approver Tasks](performing-approver-tasks.md)
 
 

6
mdop/agpm/back-up-the-archive-agpm40.md
View File

@ -34,7 +34,7 @@ A user account that has access to both the AGPM Server—the computer on which t
**Note**  
If an AGPM Administrator backs up the archive infrequently, the Group Policy Objects (GPOs) in the archive backup will not be current. To better ensure that the archive backup is current, back up the archive as part of your organization’s daily backup strategy.
 
### Additional references
@ -44,9 +44,9 @@ If an AGPM Administrator backs up the archive infrequently, the Group Policy Obj
- [Managing the Archive](managing-the-archive-agpm40.md)
 
 

6
mdop/agpm/back-up-the-archive.md
View File

@ -34,7 +34,7 @@ A user account that has access to both the AGPM Server—the computer on which t
**Note**  
If an AGPM Administrator backs up the archive infrequently, the Group Policy Objects (GPOs) in the archive backup will not be current. To better ensure that the archive backup is current, back up the archive as part of your organization’s daily backup strategy.
 
### Additional references
@ -44,9 +44,9 @@ If an AGPM Administrator backs up the archive infrequently, the Group Policy Obj
- [Managing the Archive](managing-the-archive.md)
 
 

24
mdop/agpm/checklist-administer-the-agpm-server-and-archive-agpm40.md
View File

@ -33,17 +33,17 @@ In Advanced Group Policy Management (AGPM), both the AGPM Service and the archiv
<tbody>
<tr class="odd">
<td align="left"><p>Delegate access to Group Policy Objects (GPOs) in the archive.</p></td>
<td align="left"><p>[Delegate Domain-Level Access to the Archive](delegate-domain-level-access-to-the-archive-agpm40.md)</p>
<p>[Delegate Access to an Individual GPO in the Archive](delegate-access-to-an-individual-gpo-in-the-archive-agpm40.md)</p></td>
<td align="left"><p><a href="delegate-domain-level-access-to-the-archive-agpm40.md" data-raw-source="[Delegate Domain-Level Access to the Archive](delegate-domain-level-access-to-the-archive-agpm40.md)">Delegate Domain-Level Access to the Archive</a></p>
<p><a href="delegate-access-to-an-individual-gpo-in-the-archive-agpm40.md" data-raw-source="[Delegate Access to an Individual GPO in the Archive](delegate-access-to-an-individual-gpo-in-the-archive-agpm40.md)">Delegate Access to an Individual GPO in the Archive</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Back up the archive to enable disaster recovery.</p></td>
<td align="left"><p>[Back Up the Archive](back-up-the-archive-agpm40.md)</p></td>
<td align="left"><p><a href="back-up-the-archive-agpm40.md" data-raw-source="[Back Up the Archive](back-up-the-archive-agpm40.md)">Back Up the Archive</a></p></td>
</tr>
</tbody>
</table>
 
<table>
<colgroup>
@ -59,33 +59,33 @@ In Advanced Group Policy Management (AGPM), both the AGPM Service and the archiv
<tbody>
<tr class="odd">
<td align="left"><p>Restore the archive from a backup to recover from a disaster.</p></td>
<td align="left"><p>[Restore the Archive from a Backup](restore-the-archive-from-a-backup-agpm40.md)</p></td>
<td align="left"><p><a href="restore-the-archive-from-a-backup-agpm40.md" data-raw-source="[Restore the Archive from a Backup](restore-the-archive-from-a-backup-agpm40.md)">Restore the Archive from a Backup</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Move the AGPM Service, the archive, or both to a different server.</p></td>
<td align="left"><p>[Move the AGPM Server and the Archive](move-the-agpm-server-and-the-archive-agpm40.md)</p></td>
<td align="left"><p><a href="move-the-agpm-server-and-the-archive-agpm40.md" data-raw-source="[Move the AGPM Server and the Archive](move-the-agpm-server-and-the-archive-agpm40.md)">Move the AGPM Server and the Archive</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Change the archive path, the AGPM Service Account, or the port on which the AGPM Service listens.</p></td>
<td align="left"><p>[Modify the AGPM Service](modify-the-agpm-service-agpm40.md)</p></td>
<td align="left"><p><a href="modify-the-agpm-service-agpm40.md" data-raw-source="[Modify the AGPM Service](modify-the-agpm-service-agpm40.md)">Modify the AGPM Service</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Troubleshoot common problems with the AGPM Server.</p></td>
<td align="left"><p>[Troubleshooting AGPM](troubleshooting-agpm-agpm40.md)</p>
<p>[Configure Logging and Tracing](configure-logging-and-tracing-agpm40.md)</p></td>
<td align="left"><p><a href="troubleshooting-agpm-agpm40.md" data-raw-source="[Troubleshooting AGPM](troubleshooting-agpm-agpm40.md)">Troubleshooting AGPM</a></p>
<p><a href="configure-logging-and-tracing-agpm40.md" data-raw-source="[Configure Logging and Tracing](configure-logging-and-tracing-agpm40.md)">Configure Logging and Tracing</a></p></td>
</tr>
</tbody>
</table>
 
### Additional references
- [Advanced Group Policy Management 4.0](advanced-group-policy-management-40.md)
 
 

24
mdop/agpm/checklist-administer-the-agpm-server-and-archive.md
View File

@ -33,17 +33,17 @@ In Advanced Group Policy Management (AGPM), both the AGPM Service and the archiv
<tbody>
<tr class="odd">
<td align="left"><p>Delegate access to Group Policy Objects (GPOs) in the archive.</p></td>
<td align="left"><p>[Delegate Domain-Level Access to the Archive](delegate-domain-level-access-to-the-archive-agpm30ops.md)</p>
<p>[Delegate Access to an Individual GPO in the Archive](delegate-access-to-an-individual-gpo-in-the-archive-agpm30ops.md)</p></td>
<td align="left"><p><a href="delegate-domain-level-access-to-the-archive-agpm30ops.md" data-raw-source="[Delegate Domain-Level Access to the Archive](delegate-domain-level-access-to-the-archive-agpm30ops.md)">Delegate Domain-Level Access to the Archive</a></p>
<p><a href="delegate-access-to-an-individual-gpo-in-the-archive-agpm30ops.md" data-raw-source="[Delegate Access to an Individual GPO in the Archive](delegate-access-to-an-individual-gpo-in-the-archive-agpm30ops.md)">Delegate Access to an Individual GPO in the Archive</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Back up the archive to enable disaster recovery.</p></td>
<td align="left"><p>[Back Up the Archive](back-up-the-archive.md)</p></td>
<td align="left"><p><a href="back-up-the-archive.md" data-raw-source="[Back Up the Archive](back-up-the-archive.md)">Back Up the Archive</a></p></td>
</tr>
</tbody>
</table>
 
<table>
<colgroup>
@ -59,33 +59,33 @@ In Advanced Group Policy Management (AGPM), both the AGPM Service and the archiv
<tbody>
<tr class="odd">
<td align="left"><p>Restore the archive from a backup to recover from a disaster.</p></td>
<td align="left"><p>[Restore the Archive from a Backup](restore-the-archive-from-a-backup.md)</p></td>
<td align="left"><p><a href="restore-the-archive-from-a-backup.md" data-raw-source="[Restore the Archive from a Backup](restore-the-archive-from-a-backup.md)">Restore the Archive from a Backup</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Move the AGPM Service, the archive, or both to a different server.</p></td>
<td align="left"><p>[Move the AGPM Server and the Archive](move-the-agpm-server-and-the-archive.md)</p></td>
<td align="left"><p><a href="move-the-agpm-server-and-the-archive.md" data-raw-source="[Move the AGPM Server and the Archive](move-the-agpm-server-and-the-archive.md)">Move the AGPM Server and the Archive</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Change the archive path, the AGPM Service Account, or the port on which the AGPM Service listens.</p></td>
<td align="left"><p>[Modify the AGPM Service](modify-the-agpm-service-agpm30ops.md)</p></td>
<td align="left"><p><a href="modify-the-agpm-service-agpm30ops.md" data-raw-source="[Modify the AGPM Service](modify-the-agpm-service-agpm30ops.md)">Modify the AGPM Service</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Troubleshoot common problems with the AGPM Server.</p></td>
<td align="left"><p>[Troubleshooting Advanced Group Policy Management](troubleshooting-advanced-group-policy-management-agpm30ops.md)</p>
<p>[Configure Logging and Tracing](configure-logging-and-tracing-agpm30ops.md)</p></td>
<td align="left"><p><a href="troubleshooting-advanced-group-policy-management-agpm30ops.md" data-raw-source="[Troubleshooting Advanced Group Policy Management](troubleshooting-advanced-group-policy-management-agpm30ops.md)">Troubleshooting Advanced Group Policy Management</a></p>
<p><a href="configure-logging-and-tracing-agpm30ops.md" data-raw-source="[Configure Logging and Tracing](configure-logging-and-tracing-agpm30ops.md)">Configure Logging and Tracing</a></p></td>
</tr>
</tbody>
</table>
 
### Additional references
- [Operations Guide for Microsoft Advanced Group Policy Management 3.0](operations-guide-for-microsoft-advanced-group-policy-management-30-agpm30ops.md)
 
 

20
mdop/agpm/checklist-create-edit-and-deploy-a-gpo-agpm30ops.md
View File

@ -33,41 +33,41 @@ In an environment where multiple people make changes to Group Policy Objects (GP
<tbody>
<tr class="odd">
<td align="left"><p>Editor requests the creation of a new GPO or an Approver creates a new GPO.</p></td>
<td align="left"><p>[Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm30ops.md)</p>
<p>[Create a New Controlled GPO](create-a-new-controlled-gpo-agpm30ops.md)</p></td>
<td align="left"><p><a href="request-the-creation-of-a-new-controlled-gpo-agpm30ops.md" data-raw-source="[Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm30ops.md)">Request the Creation of a New Controlled GPO</a></p>
<p><a href="create-a-new-controlled-gpo-agpm30ops.md" data-raw-source="[Create a New Controlled GPO](create-a-new-controlled-gpo-agpm30ops.md)">Create a New Controlled GPO</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Approver approves the creation of the GPO if it was requested by an Editor.</p></td>
<td align="left"><p>[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm30ops.md)</p></td>
<td align="left"><p><a href="approve-or-reject-a-pending-action-agpm30ops.md" data-raw-source="[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm30ops.md)">Approve or Reject a Pending Action</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Editor checks out a copy of the GPO from the archive, so no one else can modify the GPO. Editor makes changes to the GPO, and then checks the modified GPO into the archive.</p></td>
<td align="left"><p>[Edit a GPO Offline](edit-a-gpo-offline-agpm30ops.md)</p></td>
<td align="left"><p><a href="edit-a-gpo-offline-agpm30ops.md" data-raw-source="[Edit a GPO Offline](edit-a-gpo-offline-agpm30ops.md)">Edit a GPO Offline</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Editor requests deployment of the GPO to the production environment.</p></td>
<td align="left"><p>[Request Deployment of a GPO](request-deployment-of-a-gpo-agpm30ops.md)</p></td>
<td align="left"><p><a href="request-deployment-of-a-gpo-agpm30ops.md" data-raw-source="[Request Deployment of a GPO](request-deployment-of-a-gpo-agpm30ops.md)">Request Deployment of a GPO</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Reviewers, such as Approvers or Editors, analyze the GPO.</p></td>
<td align="left"><p>[Performing Reviewer Tasks](performing-reviewer-tasks-agpm30ops.md)</p></td>
<td align="left"><p><a href="performing-reviewer-tasks-agpm30ops.md" data-raw-source="[Performing Reviewer Tasks](performing-reviewer-tasks-agpm30ops.md)">Performing Reviewer Tasks</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Approver approves and deploys the GPO to the production environment or rejects the GPO.</p></td>
<td align="left"><p>[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm30ops.md)</p></td>
<td align="left"><p><a href="approve-or-reject-a-pending-action-agpm30ops.md" data-raw-source="[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm30ops.md)">Approve or Reject a Pending Action</a></p></td>
</tr>
</tbody>
</table>
 
### Additional references
[Operations Guide for Microsoft Advanced Group Policy Management 3.0](operations-guide-for-microsoft-advanced-group-policy-management-30-agpm30ops.md)
 
 

22
mdop/agpm/checklist-create-edit-and-deploy-a-gpo-agpm40.md
View File

@ -33,45 +33,45 @@ In an environment where multiple people change Group Policy Objects (GPOs) by us
<tbody>
<tr class="odd">
<td align="left"><p>Editor requests that a new GPO be created or an Approver creates a new GPO.</p></td>
<td align="left"><p>[Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm40.md)</p>
<p>[Create a New Controlled GPO](create-a-new-controlled-gpo-agpm40.md)</p></td>
<td align="left"><p><a href="request-the-creation-of-a-new-controlled-gpo-agpm40.md" data-raw-source="[Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm40.md)">Request the Creation of a New Controlled GPO</a></p>
<p><a href="create-a-new-controlled-gpo-agpm40.md" data-raw-source="[Create a New Controlled GPO](create-a-new-controlled-gpo-agpm40.md)">Create a New Controlled GPO</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Approver approves the creation of the GPO if it was requested by an Editor.</p></td>
<td align="left"><p>[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm40.md)</p></td>
<td align="left"><p><a href="approve-or-reject-a-pending-action-agpm40.md" data-raw-source="[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm40.md)">Approve or Reject a Pending Action</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Editor checks out a copy of the GPO from the archive so that no one else can modify the GPO. Editor makes changes to the GPO, and then checks the modified GPO into the archive.</p></td>
<td align="left"><p>[Edit a GPO Offline](edit-a-gpo-offline-agpm40.md)</p></td>
<td align="left"><p><a href="edit-a-gpo-offline-agpm40.md" data-raw-source="[Edit a GPO Offline](edit-a-gpo-offline-agpm40.md)">Edit a GPO Offline</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>If developing in a test forest, Editor exports the GPO to a file, transfers the file to the production forest, and imports the file. Additionally, an Editor can link the GPO to an organizational unit that contains test computers and users.</p></td>
<td align="left"><p>[Using a Test Environment](using-a-test-environment.md)</p></td>
<td align="left"><p><a href="using-a-test-environment.md" data-raw-source="[Using a Test Environment](using-a-test-environment.md)">Using a Test Environment</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Editor requests deployment of the GPO to the production environment of the domain.</p></td>
<td align="left"><p>[Request Deployment of a GPO](request-deployment-of-a-gpo-agpm40.md)</p></td>
<td align="left"><p><a href="request-deployment-of-a-gpo-agpm40.md" data-raw-source="[Request Deployment of a GPO](request-deployment-of-a-gpo-agpm40.md)">Request Deployment of a GPO</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Reviewers, such as Approvers or Editors, analyze the GPO.</p></td>
<td align="left"><p>[Performing Reviewer Tasks](performing-reviewer-tasks-agpm40.md)</p></td>
<td align="left"><p><a href="performing-reviewer-tasks-agpm40.md" data-raw-source="[Performing Reviewer Tasks](performing-reviewer-tasks-agpm40.md)">Performing Reviewer Tasks</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Approver approves and deploys the GPO to the production environment of the domain or rejects the GPO.</p></td>
<td align="left"><p>[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm40.md)</p></td>
<td align="left"><p><a href="approve-or-reject-a-pending-action-agpm40.md" data-raw-source="[Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm40.md)">Approve or Reject a Pending Action</a></p></td>
</tr>
</tbody>
</table>
 
### Additional references
[Advanced Group Policy Management 4.0](advanced-group-policy-management-40.md)
 
 

20
mdop/agpm/checklist-create-edit-and-deploy-a-gpo.md
View File

@ -33,37 +33,37 @@ In an environment where multiple people make changes to Group Policy objects (GP
<tbody>
<tr class="odd">
<td align="left"><p>Editor requests the creation of a new GPO or an Approver creates a new GPO.</p></td>
<td align="left"><p>[Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo.md)</p>
<p>[Create a New Controlled GPO](create-a-new-controlled-gpo.md)</p></td>
<td align="left"><p><a href="request-the-creation-of-a-new-controlled-gpo.md" data-raw-source="[Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo.md)">Request the Creation of a New Controlled GPO</a></p>
<p><a href="create-a-new-controlled-gpo.md" data-raw-source="[Create a New Controlled GPO](create-a-new-controlled-gpo.md)">Create a New Controlled GPO</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Approver approves the creation of the GPO if it was requested by an Editor.</p></td>
<td align="left"><p>[Approve or Reject a Pending Action](approve-or-reject-a-pending-action.md)</p></td>
<td align="left"><p><a href="approve-or-reject-a-pending-action.md" data-raw-source="[Approve or Reject a Pending Action](approve-or-reject-a-pending-action.md)">Approve or Reject a Pending Action</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Editor checks out a copy of the GPO from the archive, so no one else can modify the GPO. Editor makes changes to the GPO, and then checks the modified GPO into the archive.</p></td>
<td align="left"><p>[Edit a GPO Offline](edit-a-gpo-offline.md)</p></td>
<td align="left"><p><a href="edit-a-gpo-offline.md" data-raw-source="[Edit a GPO Offline](edit-a-gpo-offline.md)">Edit a GPO Offline</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Editor requests deployment of the GPO to the production environment.</p></td>
<td align="left"><p>[Request Deployment of a GPO](request-deployment-of-a-gpo.md)</p></td>
<td align="left"><p><a href="request-deployment-of-a-gpo.md" data-raw-source="[Request Deployment of a GPO](request-deployment-of-a-gpo.md)">Request Deployment of a GPO</a></p></td>
</tr>
<tr class="odd">
<td align="left"><p>Reviewers, such as Approvers or Editors, analyze the GPO.</p></td>
<td align="left"><p>[Performing Reviewer Tasks](performing-reviewer-tasks.md)</p></td>
<td align="left"><p><a href="performing-reviewer-tasks.md" data-raw-source="[Performing Reviewer Tasks](performing-reviewer-tasks.md)">Performing Reviewer Tasks</a></p></td>
</tr>
<tr class="even">
<td align="left"><p>Approver approves and deploys the GPO to the production environment or rejects the GPO.</p></td>
<td align="left"><p>[Approve or Reject a Pending Action](approve-or-reject-a-pending-action.md)</p></td>
<td align="left"><p><a href="approve-or-reject-a-pending-action.md" data-raw-source="[Approve or Reject a Pending Action](approve-or-reject-a-pending-action.md)">Approve or Reject a Pending Action</a></p></td>
</tr>
</tbody>
</table>
 
 
 

16
mdop/agpm/choosing-which-version-of-agpm-to-install.md
View File

@ -56,7 +56,7 @@ Table 1 lists the operating systems on which you can install AGPM 4.0 SP3, and
<tr class="even">
<td align="left"><p>Windows Server 2012 R2</p></td>
<td align="left"><p>Windows 10</p></td>
<td align="left"><p>Supported with the caveats outlined in [KB 4015786](https://support.microsoft.com/help/4015786/known-issues-managing-a-windows-10-group-policy-client-in-windows-serv)
<td align="left"><p>Supported with the caveats outlined in <a href="https://support.microsoft.com/help/4015786/known-issues-managing-a-windows-10-group-policy-client-in-windows-serv" data-raw-source="[KB 4015786](https://support.microsoft.com/help/4015786/known-issues-managing-a-windows-10-group-policy-client-in-windows-serv)">KB 4015786</a>
</p></td>
</tr>
<tr class="odd">
@ -92,7 +92,7 @@ Table 1 lists the operating systems on which you can install AGPM 4.0 SP3, and
</tbody>
</table>
 
## AGPM 4.0 SP2
@ -150,7 +150,7 @@ Table 1 lists the operating systems on which you can install AGPM 4.0 SP2, and
</tbody>
</table>
 
## AGPM 4.0 SP1
@ -201,7 +201,7 @@ Table 2 lists the operating systems on which you can install AGPM 4.0 SP1, and t
</tbody>
</table>
 
## AGPM 4.0
@ -247,7 +247,7 @@ Table 3 lists the operating systems on which you can install AGPM 4.0, and the p
</tbody>
</table>
 
## Versions of AGPM that precede AGPM 4.0
@ -287,7 +287,7 @@ Table 4 lists the operating systems on which you can install the versions of AGP
</tbody>
</table>
 
## How to Get MDOP Technologies
@ -299,9 +299,9 @@ AGPM 4.0 SP2 is a part of the Microsoft Desktop Optimization Pack (MDOP). MDOP i
[Advanced Group Policy Management](index.md)
 
 

6
mdop/agpm/configure-e-mail-security-for-agpm-agpm30ops.md
View File

@ -24,7 +24,7 @@ By encrypting AGPM e-mail notifications, you can better protect those that could
**Caution**  
Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer.
 
A user account that has the AGPM Administrator (Full Control) role, the user account of the Approver who created the Group Policy Object (GPO) used in these procedures, or a user account that has the necessary permissions in AGPM is required to complete these procedures. Review the details in "Additional considerations" in this topic.
@ -82,9 +82,9 @@ A user account that has the AGPM Administrator (Full Control) role, the user acc
- [Configuring Advanced Group Policy Management](configuring-advanced-group-policy-management.md)
 
 

6
mdop/agpm/configure-e-mail-security-for-agpm-agpm40.md
View File

@ -24,7 +24,7 @@ By encrypting AGPM e-mail notifications, you can better protect those that could
**Caution**  
Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer.
 
A user account that has the AGPM Administrator (Full Control) role, the user account of the Approver who created the Group Policy Object (GPO) used in these procedures, or a user account that has the necessary permissions in AGPM is required to complete these procedures. Review the details in "Additional considerations" in this topic.
@ -78,9 +78,9 @@ A user account that has the AGPM Administrator (Full Control) role, the user acc
- [Configuring Advanced Group Policy Management](configuring-advanced-group-policy-management-agpm40.md)
 
 

6
mdop/agpm/create-a-template-agpm30ops.md
View File

@ -22,7 +22,7 @@ Creating a template enables you to save all of the settings of a particular vers
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.
@ -52,9 +52,9 @@ A user account with the Editor or AGPM Administrator (Full Control) role or nece
- [Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm30ops.md)
 
 

6
mdop/agpm/create-a-template-agpm40.md
View File

@ -22,7 +22,7 @@ Creating a template enables you to save all of the settings of a particular vers
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.
@ -52,9 +52,9 @@ A user account with the Editor or AGPM Administrator (Full Control) role or nece
- [Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm40.md)
 
 

6
mdop/agpm/create-a-template.md
View File

@ -22,7 +22,7 @@ Creating a template enables you to save all of the settings of a particular vers
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management is required to complete this procedure. Review the details in "Additional considerations" in this topic.
@ -52,9 +52,9 @@ A user account with the Editor or AGPM Administrator (Full Control) role or nece
- [Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo.md)
 
 

6
mdop/agpm/creating-a-template-and-setting-a-default-template-agpm30ops.md
View File

@ -34,15 +34,15 @@ Some potential uses for a template include the following:
**Note**  
A template is a static version of a GPO that cannot be edited, yet can be used as a starting point for creating new, editable GPOs. Renaming or deleting a template does not affect GPOs created from that template.
 
- [Create a Template](create-a-template-agpm30ops.md)
- [Set a Default Template](set-a-default-template-agpm30ops.md)
 
 

6
mdop/agpm/creating-a-template-and-setting-a-default-template-agpm40.md
View File

@ -34,15 +34,15 @@ Some potential uses for a template include the following:
**Note**  
A template is a static version of a GPO that cannot be edited, yet can be used as a starting point for creating new, editable GPOs. Renaming or deleting a template does not affect GPOs created from that template.
 
- [Create a Template](create-a-template-agpm40.md)
- [Set a Default Template](set-a-default-template-agpm40.md)
 
 

6
mdop/agpm/creating-a-template-and-setting-a-default-template.md
View File

@ -22,15 +22,15 @@ Creating a template enables you to save all of the settings of a particular vers
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs. Renaming or deleting a template does not impact GPOs created from that template.
 
- [Create a Template](create-a-template.md)
- [Set a Default Template](set-a-default-template.md)
 
 

8
mdop/agpm/delegate-access-to-an-individual-gpo-in-the-archive-agpm30ops.md
View File

@ -34,14 +34,14 @@ A user account with the AGPM Administrator (Full Control) role, the user account
**Note**  
If a user or group inherits domain-wide access, the **Remove** button is unavailable. You can modify domain-wide access on the **Domain Delegation** tab.
 
3. To modify the roles and permissions delegated to a user or group, click the **Advanced** button. In the **Permissions** dialog box, select the user or group, select the check box for each role to be assigned to that user or group, and click **OK**.
**Note**  
Editor and Approver include Reviewer permissions.
 
### Additional considerations
@ -57,9 +57,9 @@ A user account with the AGPM Administrator (Full Control) role, the user account
- [Managing the Archive](managing-the-archive.md)
 
 

8
mdop/agpm/delegate-access-to-an-individual-gpo-in-the-archive-agpm40.md
View File

@ -34,14 +34,14 @@ A user account with the AGPM Administrator (Full Control) role, the user account
**Note**  
If a user or group inherits domain-wide access, the **Remove** button is unavailable. You can modify domain-wide access on the **Domain Delegation** tab.
 
3. To modify the roles and permissions delegated to a user or group, click the **Advanced** button. In the **Permissions** dialog box, select the user or group, select the check box for each role to be assigned to that user or group, and click **OK**.
**Note**  
Editor and Approver include Reviewer permissions.
 
### Additional considerations
@ -57,9 +57,9 @@ A user account with the AGPM Administrator (Full Control) role, the user account
- [Managing the Archive](managing-the-archive-agpm40.md)
 
 

6
mdop/agpm/delegate-domain-level-access-to-the-archive-agpm30ops.md
View File

@ -36,7 +36,7 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
**Note**  
Editor and Approver include Reviewer permissions.
 
### Additional considerations
@ -52,9 +52,9 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
- [Managing the Archive](managing-the-archive.md)
 
 

6
mdop/agpm/delegate-domain-level-access-to-the-archive-agpm40.md
View File

@ -36,7 +36,7 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
**Note**  
Editor and Approver include Reviewer permissions.
 
### Additional considerations
@ -52,9 +52,9 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
- [Managing the Archive](managing-the-archive-agpm40.md)
 
 

6
mdop/agpm/delegate-domain-level-access.md
View File

@ -32,7 +32,7 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
**Note**  
Editor and Approver include Reviewer permissions.
 
4. In the **Advanced Security Settings** dialog box, select a Group Policy administrator, and then click **Edit**.
@ -56,9 +56,9 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
- [Performing AGPM Administrator Tasks](performing-agpm-administrator-tasks.md)
 
 

8
mdop/agpm/delegate-management-of-a-controlled-gpo-agpm30ops.md
View File

@ -34,14 +34,14 @@ A user account with the AGPM Administrator (Full Control) role, the user account
**Note**  
If a user or group inherits domain-wide access, the **Remove** button is unavailable. You can modify domain-wide access on the **Domain Delegation** tab.
 
3. To modify the roles and permissions delegated to a user or group, click the **Advanced** button. In the **Permissions** dialog box, select the user or group, select the check box for each role to be assigned to that user or group, and then click **OK**.
**Note**  
Editor and Approver include Reviewer permissions.
 
### Additional considerations
@ -55,9 +55,9 @@ A user account with the AGPM Administrator (Full Control) role, the user account
- [Creating, Controlling, or Importing a GPO](creating-controlling-or-importing-a-gpo-editor-agpm30ops.md)
 
 

8
mdop/agpm/delegate-management-of-a-controlled-gpo-agpm40.md
View File

@ -34,14 +34,14 @@ A user account with the AGPM Administrator (Full Control) role, the user account
**Note**  
If a user or group inherits domain-wide access, the **Remove** button is unavailable. You can modify domain-wide access on the **Domain Delegation** tab.
 
3. To modify the roles and permissions delegated to a user or group, click the **Advanced** button. In the **Permissions** dialog box, select the user or group, select the check box for each role to be assigned to that user or group, and then click **OK**.
**Note**  
Editor and Approver include Reviewer permissions.
 
### Additional considerations
@ -55,9 +55,9 @@ A user account with the AGPM Administrator (Full Control) role, the user account
- [Creating or Controlling a GPO](creating-or-controlling-a-gpo-agpm40-app.md)
 
 

6
mdop/agpm/deploy-a-gpo-agpm30ops.md
View File

@ -42,7 +42,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
To verify whether the most recent version of a GPO has been deployed, on the **Controlled** tab, double-click the GPO to display its **History**. In the **History** for the GPO, the **State** column indicates whether a GPO has been deployed.
 
### Additional considerations
@ -52,9 +52,9 @@ To verify whether the most recent version of a GPO has been deployed, on the **C
- [Performing Approver Tasks](performing-approver-tasks-agpm30ops.md)
 
 

6
mdop/agpm/deploy-a-gpo-agpm40.md
View File

@ -42,7 +42,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
To verify whether the most recent version of a GPO has been deployed, on the **Controlled** tab, double-click the GPO to display its **History**. In the **History** for the GPO, the **State** column indicates whether a GPO has been deployed.
 
### Additional considerations
@ -52,9 +52,9 @@ To verify whether the most recent version of a GPO has been deployed, on the **C
- [Performing Approver Tasks](performing-approver-tasks-agpm40.md)
 
 

6
mdop/agpm/deploy-a-gpo.md
View File

@ -42,7 +42,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
To verify whether the most recent version of a GPO has been deployed, on the **Controlled** tab, double-click the GPO to display its **History**. In the **History** for the GPO, the **State** column indicates whether a GPO has been deployed.
 
### Additional considerations
@ -52,9 +52,9 @@ To verify whether the most recent version of a GPO has been deployed, on the **C
- [Performing Approver Tasks](performing-approver-tasks.md)
 
 

6
mdop/agpm/edit-a-gpo-offline-agpm30ops.md
View File

@ -57,7 +57,7 @@ To edit a GPO, you check out the GPO from the archive, edit the GPO offline, and
**Note**  
To disable all Computer Configuration settings or all User Configuration settings, right-click the GPO in the **Group Policy Management Editor** window and click **Properties**. Select **Disable Computer Configuration settings** or **Disable User Configuration settings** as appropriate.
 
3. When you have finished modifying the GPO, close the **Group Policy Management Editor** window.
@ -101,9 +101,9 @@ To edit a GPO, you check out the GPO from the archive, edit the GPO offline, and
- [Deploy a GPO](deploy-a-gpo-agpm30ops.md)
 
 

6
mdop/agpm/edit-a-gpo-offline-agpm40.md
View File

@ -57,7 +57,7 @@ To edit a GPO, you check out the GPO from the archive, edit the GPO offline, and
**Note**  
To disable all Computer Configuration settings or all User Configuration settings, right-click the GPO in the **Group Policy Management Editor** window and click **Properties**. Select **Disable Computer Configuration settings** or **Disable User Configuration settings** as appropriate.
 
3. When you have finished modifying the GPO, close the **Group Policy Management Editor** window.
@ -101,9 +101,9 @@ To edit a GPO, you check out the GPO from the archive, edit the GPO offline, and
- [Deploy a GPO](deploy-a-gpo-agpm40.md)
 
 

19
mdop/agpm/history-window-agpm30ops.md
View File

@ -49,7 +49,7 @@ The tabs within the **History** window filter the states in the history of the G
</tbody>
</table>
 
## Event information
@ -88,11 +88,10 @@ Information is provided for each state in the history of the GPO.
<td align="left"><p><strong>Deletable</strong></p></td>
<td align="left"><p>Whether this version of the GPO can be deleted if the number of unique versions of each GPO retained in the archive is limited.</p>
<div class="alert">
<strong>Note</strong>  
<p>You can modify whether a version of a GPO is deletable by right-clicking it and then clicking <strong>Do Not Allow Deletion</strong> or <strong>Allow Deletion</strong>.</p>
<strong>Note</strong><br/><p>You can modify whether a version of a GPO is deletable by right-clicking it and then clicking <strong>Do Not Allow Deletion</strong> or <strong>Allow Deletion</strong>.</p>
</div>
<div>
 
</div></td>
</tr>
<tr class="even">
@ -114,7 +113,7 @@ Information is provided for each state in the history of the GPO.
</tbody>
</table>
 
## Reports
@ -144,7 +143,7 @@ The **Settings** and **Differences** buttons display reports about GPO settings
</tbody>
</table>
 
### Key to difference reports
@ -185,7 +184,7 @@ The **Settings** and **Differences** buttons display reports about GPO settings
</tbody>
</table>
 
- For items with changed settings, the changed settings are identified when the item is expanded. The value for the attribute in each GPO is displayed in the same order that the GPOs are displayed in the report.
@ -195,9 +194,9 @@ The **Settings** and **Differences** buttons display reports about GPO settings
- [Contents Tab](contents-tab-agpm30ops.md)
 
 

19
mdop/agpm/history-window-agpm40.md
View File

@ -49,7 +49,7 @@ The tabs within the **History** window filter the states in the history of the G
</tbody>
</table>
 
## Event information
@ -88,11 +88,10 @@ Information is provided for each state in the history of the GPO.
<td align="left"><p><strong>Deletable</strong></p></td>
<td align="left"><p>Whether this version of the GPO can be deleted if the number of unique versions of each GPO retained in the archive is limited.</p>
<div class="alert">
<strong>Note</strong>  
<p>You can change whether a version of a GPO can be deleted by right-clicking the GPO and then clicking <strong>Do Not Allow Deletion</strong> or <strong>Allow Deletion</strong>.</p>
<strong>Note</strong><br/><p>You can change whether a version of a GPO can be deleted by right-clicking the GPO and then clicking <strong>Do Not Allow Deletion</strong> or <strong>Allow Deletion</strong>.</p>
</div>
<div>
 
</div></td>
</tr>
<tr class="even">
@ -114,7 +113,7 @@ Information is provided for each state in the history of the GPO.
</tbody>
</table>
 
## Reports
@ -144,7 +143,7 @@ The **Settings** and **Differences** buttons display reports about GPO settings
</tbody>
</table>
 
### Key to difference reports
@ -185,7 +184,7 @@ The **Settings** and **Differences** buttons display reports about GPO settings
</tbody>
</table>
 
- For items with changed settings, the changed settings are identified when the item is expanded. The value for the attribute in each GPO is displayed in the same order that the GPOs are displayed in the report.
@ -195,9 +194,9 @@ The **Settings** and **Differences** buttons display reports about GPO settings
- [Contents Tab](contents-tab-agpm40.md)
 
 

10
mdop/agpm/index.md
View File

@ -44,17 +44,17 @@ In addition to the product documentation available online, supplemental product
<tbody>
<tr class="even">
<td align="left"><p><strong>MDOP Virtual Labs</strong></p></td>
<td align="left"><p>For a list of available MDOP virtual labs, go to [Microsoft Desktop Optimization Pack (MDOP) Virtual Labs](https://go.microsoft.com/fwlink/?LinkId=234276) (https://go.microsoft.com/fwlink/?LinkId=234276).</p></td>
<td align="left"><p>For a list of available MDOP virtual labs, go to <a href="https://go.microsoft.com/fwlink/?LinkId=234276" data-raw-source="[Microsoft Desktop Optimization Pack (MDOP) Virtual Labs](https://go.microsoft.com/fwlink/?LinkId=234276)">Microsoft Desktop Optimization Pack (MDOP) Virtual Labs</a> (<a href="https://go.microsoft.com/fwlink/?LinkId=234276" data-raw-source="https://go.microsoft.com/fwlink/?LinkId=234276">https://go.microsoft.com/fwlink/?LinkId=234276</a>).</p></td>
</tr>
<tr class="odd">
<td align="left"><p><strong>MDOP TechCenter</strong></p></td>
<td align="left"><p>For technical whitepapers, evaluation materials, blogs, and additional MDOP resources, go to [MDOP TechCenter](https://go.microsoft.com/fwlink/?LinkId=225286) (https://go.microsoft.com/fwlink/?LinkId=225286)</p>
<td align="left"><p>For technical whitepapers, evaluation materials, blogs, and additional MDOP resources, go to <a href="https://go.microsoft.com/fwlink/?LinkId=225286" data-raw-source="[MDOP TechCenter](https://go.microsoft.com/fwlink/?LinkId=225286)">MDOP TechCenter</a> (<a href="https://go.microsoft.com/fwlink/?LinkId=225286" data-raw-source="https://go.microsoft.com/fwlink/?LinkId=225286">https://go.microsoft.com/fwlink/?LinkId=225286</a>)</p>
<p></p></td>
</tr>
</tbody>
</table>
 
## <a href="" id="bkmk-getmdop"></a>How to Get MDOP
@ -70,9 +70,9 @@ MDOP subscribers can download the software at the [Microsoft Volume Licensing we
<a href="" id="purchase-mdop"></a>**Purchase MDOP**
Visit the enterprise [Purchase Windows Enterprise Licensing](https://www.microsoft.com/windows/enterprise/how-to-buy.aspx) website to find out how to purchase MDOP for your business.
 
 

6
mdop/agpm/limit-the-gpo-versions-stored-agpm30ops.md
View File

@ -32,7 +32,7 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
**Important**  
Only GPO versions displayed on the **Unique Versions** tab of the **History** window count toward the limit.
 
4. Click the **Apply** button.
@ -46,9 +46,9 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
- [Managing the Archive](managing-the-archive.md)
 
 

6
mdop/agpm/limit-the-gpo-versions-stored-agpm40.md
View File

@ -32,7 +32,7 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
**Important**  
Only GPO versions displayed on the **Unique Versions** tab of the **History** window count toward the limit.
 
4. Click the **Apply** button.
@ -46,9 +46,9 @@ A user account with the AGPM Administrator (Full Control) role or necessary perm
- [Managing the Archive](managing-the-archive-agpm40.md)
 
 

6
mdop/agpm/managing-the-agpm-service-agpm30ops.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
- [Start and Stop the AGPM Service](start-and-stop-the-agpm-service-agpm30ops.md)
@ -34,9 +34,9 @@ Do not modify settings for the AGPM Service through **Administrative Tools** and
- [Performing AGPM Administrator Tasks](performing-agpm-administrator-tasks-agpm30ops.md)
 
 

6
mdop/agpm/managing-the-agpm-service-agpm40.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
- [Start and Stop the AGPM Service](start-and-stop-the-agpm-service-agpm40.md)
@ -34,9 +34,9 @@ Do not modify settings for the AGPM Service through **Administrative Tools** and
- [Performing AGPM Administrator Tasks](performing-agpm-administrator-tasks-agpm40.md)
 
 

6
mdop/agpm/managing-the-agpm-service.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
- [Start and Stop the AGPM Service](start-and-stop-the-agpm-service.md)
@ -32,9 +32,9 @@ Do not modify settings for the AGPM Service through **Administrative Tools** and
- [Modify the Port on Which the AGPM Service Listens](modify-the-port-on-which-the-agpm-service-listens.md)
 
 

8
mdop/agpm/modify-the-agpm-service-account.md
View File

@ -24,7 +24,7 @@ The archive path and AGPM Service Account are configured during the installation
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
A user account that is a member of the Domain Admins group and has access to the AGPM Server (the computer on which Microsoft Advanced Group Policy Management - Server is installed) is required to complete this procedure.
@ -33,7 +33,7 @@ The AGPM Service Account must have full access to the GPOs that it will manage a
If you will be managing GPOs on multiple domains or if a member server will be the AGPM Server, you should configure a different account as the AGPM Service Account because the Local System account for one domain controller cannot access GPOs on other domains.
 
**To modify the AGPM Service Account**
@ -57,9 +57,9 @@ If you will be managing GPOs on multiple domains or if a member server will be t
- [Managing the AGPM Service](managing-the-agpm-service.md)
 
 

14
mdop/agpm/modify-the-agpm-service-agpm30ops.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
A user account that is a member of the Domain Admins group and has access to the AGPM Server (the computer on which Microsoft Advanced Group Policy Management - Server is installed) is required to complete this procedure. Additionally, you must provide credentials for the AGPM Service Account to complete this procedure.
@ -45,7 +45,7 @@ A user account that is a member of the Domain Admins group and has access to the
**Important**  
The archive path can point to a folder on the AGPM Server or elsewhere, but the location should have sufficient space to store all GPOs and history data managed by this AGPM Server.
 
2. In the **AGPM Service Account** dialog box, enter credentials for a service account under which the AGPM Service will run, and click **Next**.
@ -56,14 +56,14 @@ A user account that is a member of the Domain Admins group and has access to the
If you will be managing GPOs on multiple domains or if a member server will be the AGPM Server, you should configure a different account as the AGPM Service Account because the Local System account for one domain controller cannot access GPOs on other domains.
 
3. In the **Archive Owner** dialog box, enter the user name of an AGPM Administrator (Full Control) or group of AGPM Administrators, and click **Next**.
**Note**  
Modifying the installation clears the credentials for the Archive Owner. You must re-enter credentials, but they are not required to match the credentials used during the original installation.
 
4. In the **Port Configuration** dialog box, type a new port on which the AGPM Service should listen or confirm the port currently selected, and click **Next**.
@ -72,7 +72,7 @@ A user account that is a member of the Domain Admins group and has access to the
If you manually configure port exceptions or have rules configuring port exceptions, you can clear the **Add port exception to firewall** check box.
 
5. Click **Change**, and when the installation is complete click **Finish**.
@ -84,9 +84,9 @@ A user account that is a member of the Domain Admins group and has access to the
- [Managing the AGPM Service](managing-the-agpm-service-agpm30ops.md)
 
 

14
mdop/agpm/modify-the-agpm-service-agpm40.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
A user account that is a member of the Domain Admins group and has access to the AGPM Server (the computer on which Microsoft Advanced Group Policy Management - Server is installed) is required to complete this procedure. Additionally, you must provide credentials for the AGPM Service Account to complete this procedure.
@ -41,7 +41,7 @@ A user account that is a member of the Domain Admins group and has access to the
**Important**  
The archive path can point to a folder on the AGPM Server or elsewhere, but the location should have sufficient space to store all GPOs and history data managed by this AGPM Server.
 
2. In the **AGPM Service Account** dialog box, enter credentials for a service account under which the AGPM Service will run, and click **Next**.
@ -52,14 +52,14 @@ A user account that is a member of the Domain Admins group and has access to the
If you will be managing GPOs on multiple domains or if a member server will be the AGPM Server, you should configure a different account as the AGPM Service Account because the Local System account for one domain controller cannot access GPOs on other domains.
 
3. In the **Archive Owner** dialog box, enter the user name of an AGPM Administrator (Full Control) or group of AGPM Administrators, and click **Next**.
**Note**  
Modifying the installation clears the credentials for the Archive Owner. You must re-enter credentials, but they are not required to match the credentials used during the original installation.
 
4. In the **Port Configuration** dialog box, type a new port on which the AGPM Service should listen or confirm the port currently selected, and click **Next**.
@ -68,7 +68,7 @@ A user account that is a member of the Domain Admins group and has access to the
If you manually configure port exceptions or have rules configuring port exceptions, you can clear the **Add port exception to firewall** check box.
 
5. Click **Change**, and when the installation is complete click **Finish**.
@ -80,9 +80,9 @@ A user account that is a member of the Domain Admins group and has access to the
- [Managing the AGPM Service](managing-the-agpm-service-agpm40.md)
 
 

6
mdop/agpm/modify-the-archive-path.md
View File

@ -44,7 +44,7 @@ A user account that is a member of the Domain Admins group and has access to the
If you will be managing GPOs on multiple domains or if a member server will be the AGPM Server, you should configure a different account as the AGPM Service Account because the Local System account for one domain controller cannot access GPOs on other domains.
 
3. For the archive owner, enter the credentials of an AGPM Administrator (Full Control).
@ -54,9 +54,9 @@ A user account that is a member of the Domain Admins group and has access to the
- [Managing the AGPM Service](managing-the-agpm-service.md)
 
 

6
mdop/agpm/modify-the-port-on-which-the-agpm-service-listens.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Note**  
Before modifying the port on which the AGPM Service listens, it is recommended that you back up the AGPM archive index file (gpostate.xml). This file is located in the folder entered as the archive path during the installation of Advanced Group Policy Management - Server. By default, this location of this file is %CommonAppData%\\Microsoft\\AGPM\\gpostate.xml on the AGPM Server. If you do not know which computer hosts the archive, you can follow the procedure for modifying the archive path to display the current archive path. For more information, see [Modify the Archive Path](modify-the-archive-path.md).
 
A user account with access to the AGPM Server (the computer on which the AGPM Service is installed) and the archive index file is required to complete this procedure.
@ -44,9 +44,9 @@ A user account with access to the AGPM Server (the computer on which the AGPM Se
- [Managing the AGPM Service](managing-the-agpm-service.md)
 
 

10
mdop/agpm/move-the-agpm-server-and-the-archive-agpm40.md
View File

@ -24,7 +24,7 @@ If you are replacing the AGPM Server and the server on which the archive is host
- By default, the archive is hosted on the AGPM Server, but you can specify an archive path to host it on another server instead.
 
A user account that is a member of the Domain Admins group and has access to the previous and new AGPM Servers is required to complete this procedure. Additionally, you must provide credentials for the AGPM Service Account to be used by the new AGPM Server to complete this procedure.
@ -43,7 +43,7 @@ A user account that is a member of the Domain Admins group and has access to the
**Note**  
As a best practice, you should uninstall Microsoft Advanced Group Policy Management – Server from the previous AGPM Server. This will ensure that the AGPM Service cannot be unintentionally restarted on that server and potentially cause confusion if any AGPM Server connections to it remain.
 
3. Copy the archive from the backup to the new server that will host the archive. For more information, see [Restore the Archive from a Backup](restore-the-archive-from-a-backup-agpm40.md).
@ -54,7 +54,7 @@ A user account that is a member of the Domain Admins group and has access to the
2. You must re-enter and confirm the password on the **Domain Delegation** tab. For more information, see [Configure E-Mail Notification](configure-e-mail-notification-agpm40.md).
 
### Additional references
@ -72,9 +72,9 @@ A user account that is a member of the Domain Admins group and has access to the
- [Performing AGPM Administrator Tasks](performing-agpm-administrator-tasks-agpm40.md)
 
 

10
mdop/agpm/move-the-agpm-server-and-the-archive.md
View File

@ -24,7 +24,7 @@ If you are replacing the AGPM Server and the server on which the archive is host
- By default, the archive is hosted on the AGPM Server, but you can specify an archive path to host it on another server instead.
 
A user account that is a member of the Domain Admins group and has access to the previous and new AGPM Servers is required to complete this procedure. Additionally, you must provide credentials for the AGPM Service Account to be used by the new AGPM Server to complete this procedure.
@ -43,7 +43,7 @@ A user account that is a member of the Domain Admins group and has access to the
**Note**  
As a best practice, you should uninstall Microsoft Advanced Group Policy Management – Server from the previous AGPM Server. This will ensure that the AGPM Service cannot be unintentionally restarted on that server and potentially cause confusion if any AGPM Server connections to it remain.
 
3. Copy the archive from the backup to the new server that will host the archive. For more information, see [Restore the Archive from a Backup](restore-the-archive-from-a-backup.md).
@ -54,7 +54,7 @@ A user account that is a member of the Domain Admins group and has access to the
2. You must re-enter and confirm the password on the **Domain Delegation** tab. For more information, see [Configure E-Mail Notification](configure-e-mail-notification-agpm30ops.md).
 
### Additional references
@ -72,9 +72,9 @@ A user account that is a member of the Domain Admins group and has access to the
- [Performing AGPM Administrator Tasks](performing-agpm-administrator-tasks-agpm30ops.md)
 
 

6
mdop/agpm/performing-agpm-administrator-tasks-agpm40.md
View File

@ -38,7 +38,7 @@ Because the AGPM Administrator role includes the permissions for all other roles
[Performing Reviewer Tasks](performing-reviewer-tasks-agpm40.md), such as reviewing settings and comparing GPOs
 
### Additional considerations
@ -68,9 +68,9 @@ By default, the AGPM Administrator role has Full Control—all AGPM permissions:
The **Modify Options** and **Modify Security** permissions are unique to the role of AGPM Administrator.
 
 

8
mdop/agpm/performing-approver-tasks-agpm30ops.md
View File

@ -22,7 +22,7 @@ An Approver is a person authorized by an AGPM Administrator (Full Control) to cr
**Important**  
Make sure that you are connecting to the central archive for GPOs. For more information, see [Configure an AGPM Server Connection](configure-an-agpm-server-connection-reviewer-agpm30ops.md).
 
- [Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm30ops.md)
@ -39,7 +39,7 @@ Make sure that you are connecting to the central archive for GPOs. For more info
**Note**  
Before approving a GPO, an Approver should review the policy settings that it contains. The Approver role includes the permissions for the Reviewer role, so that an Approver can review policy settings and compare GPOs. See [Performing Reviewer Tasks](performing-reviewer-tasks-agpm30ops.md) for more information.
 
### Additional considerations
@ -57,9 +57,9 @@ By default, the following permissions are provided for the Approver role:
Also, an Approver has full control over GPOs that he created or controlled.
 
 

8
mdop/agpm/performing-approver-tasks-agpm40.md
View File

@ -22,7 +22,7 @@ An Approver is a person authorized by an AGPM Administrator (Full Control) to cr
**Important**  
Make sure that you are connecting to the central archive for GPOs. For more information, see [Configure an AGPM Server Connection](configure-an-agpm-server-connection-agpm40.md).
 
- [Approve or Reject a Pending Action](approve-or-reject-a-pending-action-agpm40.md)
@ -39,7 +39,7 @@ Make sure that you are connecting to the central archive for GPOs. For more info
**Note**  
Before approving a GPO, an Approver should review the policy settings that it contains. The Approver role includes the permissions for the Reviewer role, so that an Approver can review policy settings and compare GPOs. See [Performing Reviewer Tasks](performing-reviewer-tasks-agpm40.md) for more information.
 
### Additional considerations
@ -57,9 +57,9 @@ By default, the following permissions are provided for the Approver role:
Also, an Approver has full control over GPOs that he created or controlled.
 
 

8
mdop/agpm/performing-approver-tasks.md
View File

@ -22,7 +22,7 @@ An Approver is a person authorized by an AGPM Administrator (Full Control) to cr
**Important**  
Ensure that you are connecting to the central archive for GPOs. For more information, see [Configure the AGPM Server Connection](configure-the-agpm-server-connection-reviewer.md).
 
- [Approve or Reject a Pending Action](approve-or-reject-a-pending-action.md)
@ -39,7 +39,7 @@ Ensure that you are connecting to the central archive for GPOs. For more informa
**Note**  
Because the Approver role includes the permissions for the Reviewer role, an Approver can also review settings and compare GPOs. See [Performing Reviewer Tasks](performing-reviewer-tasks.md) for more information.
 
### Additional considerations
@ -57,9 +57,9 @@ By default, the following permissions are provided for the Approver role:
Also, an Approver has full control over GPOs that he created or controlled.
 
 

8
mdop/agpm/performing-editor-tasks-agpm30ops.md
View File

@ -22,7 +22,7 @@ An Editor is a person authorized by an AGPM Administrator (Full Control) to make
**Important**  
Ensure that you are connecting to the central archive for GPOs. For more information, see [Configure an AGPM Server Connection](configure-an-agpm-server-connection-reviewer-agpm30ops.md).
 
- [Creating, Controlling, or Importing a GPO](creating-controlling-or-importing-a-gpo-agpm30ops.md)
@ -35,7 +35,7 @@ Ensure that you are connecting to the central archive for GPOs. For more informa
**Note**  
Because the Editor role includes the permissions for the Reviewer role, an Editor can also review settings and compare GPOs. See [Performing Reviewer Tasks](performing-reviewer-tasks-agpm30ops.md) for more information.
 
### Additional considerations
@ -49,9 +49,9 @@ By default, the following permissions are provided for the Editor role:
- Create Template
 
 

8
mdop/agpm/performing-editor-tasks-agpm40.md
View File

@ -22,7 +22,7 @@ In Advanced Group Policy Management (AGPM), an Editor is a person authorized by
**Important**  
Make sure that you are connecting to the central archive for GPOs. For more information, see [Configure an AGPM Server Connection](configure-an-agpm-server-connection-agpm40.md).
 
- [Creating or Controlling a GPO](creating-or-controlling-a-gpo-agpm40-ed.md)
@ -39,7 +39,7 @@ Make sure that you are connecting to the central archive for GPOs. For more info
**Note**  
Because the Editor role includes the permissions for the Reviewer role, an Editor can also review settings and compare GPOs. See [Performing Reviewer Tasks](performing-reviewer-tasks-agpm40.md) for more information.
 
### Additional considerations
@ -57,9 +57,9 @@ By default, the following permissions are provided for the Editor role:
- Create Template
 
 

8
mdop/agpm/performing-editor-tasks.md
View File

@ -22,7 +22,7 @@ An Editor is a person authorized by an AGPM Administrator (Full Control) to make
**Important**  
Ensure that you are connecting to the central archive for GPOs. For more information, see [Configure the AGPM Server Connection](configure-the-agpm-server-connection-reviewer.md).
 
- [Creating, Controlling, or Importing a GPO](creating-controlling-or-importing-a-gpo-editor.md)
@ -35,7 +35,7 @@ Ensure that you are connecting to the central archive for GPOs. For more informa
**Note**  
Because the Editor role includes the permissions for the Reviewer role, an Editor can also review settings and compare GPOs. See [Performing Reviewer Tasks](performing-reviewer-tasks.md) for more information.
 
### Additional considerations
@ -49,9 +49,9 @@ By default, the following permissions are provided for the Editor role:
- Create Template
 
 

6
mdop/agpm/request-restoration-of-a-deleted-gpo-agpm30ops.md
View File

@ -36,7 +36,7 @@ A user account with the Editor role or necessary permissions in Advanced Group P
**Note**  
If a GPO was deleted from the production environment, restoring it to the archive will not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO. For information, see [Deploy a GPO](deploy-a-gpo-agpm30ops.md).
 
### Additional considerations
@ -48,9 +48,9 @@ If a GPO was deleted from the production environment, restoring it to the archiv
- [Deleting, Restoring, or Destroying a GPO](deleting-restoring-or-destroying-a-gpo-agpm30ops.md)
 
 

6
mdop/agpm/request-restoration-of-a-deleted-gpo-agpm40.md
View File

@ -36,7 +36,7 @@ A user account with the Editor role or necessary permissions in Advanced Group P
**Note**  
If a GPO was deleted from the production environment, restoring it to the archive will not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO. For information, see [Request Deployment of a GPO](request-deployment-of-a-gpo-agpm40.md).
 
### Additional considerations
@ -48,9 +48,9 @@ If a GPO was deleted from the production environment, restoring it to the archiv
- [Deleting or Restoring a GPO](deleting-or-restoring-a-gpo-agpm40.md)
 
 

6
mdop/agpm/restore-a-deleted-gpo-agpm30ops.md
View File

@ -36,7 +36,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
If a GPO was deleted from the production environment, restoring it to the archive will not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO. For information, see [Deploy a GPO](deploy-a-gpo-agpm30ops.md).
 
### Additional considerations
@ -46,9 +46,9 @@ If a GPO was deleted from the production environment, restoring it to the archiv
- [Deleting, Restoring, or Destroying a GPO](deleting-restoring-or-destroying-a-gpo-agpm30ops.md)
 
 

6
mdop/agpm/restore-a-deleted-gpo-agpm40.md
View File

@ -36,7 +36,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
If a GPO was deleted from the production environment, restoring it to the archive will not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO. For information, see [Deploy a GPO](deploy-a-gpo-agpm40.md).
 
### Additional considerations
@ -46,9 +46,9 @@ If a GPO was deleted from the production environment, restoring it to the archiv
- [Deleting, Restoring, or Destroying a GPO](deleting-restoring-or-destroying-a-gpo-agpm40.md)
 
 

6
mdop/agpm/restore-a-deleted-gpo.md
View File

@ -36,7 +36,7 @@ A user account with the Editor, Approver, or AGPM Administrator (Full Control) r
**Note**  
If a GPO was deleted from the production environment, restoring it to the archive will not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO. For information, see [Deploy a GPO](deploy-a-gpo.md).
 
### Additional considerations
@ -46,9 +46,9 @@ If a GPO was deleted from the production environment, restoring it to the archiv
- [Deleting, Restoring, or Destroying a GPO](deleting-restoring-or-destroying-a-gpo.md)
 
 

6
mdop/agpm/roll-back-to-a-previous-version-of-a-gpo-agpm30ops.md
View File

@ -36,7 +36,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
To verify that the version that has been redeployed matches the version intended, examine a difference report for the two versions. In the **History** window for the GPO, highlight the two versions, and then right-click and select **Difference** and either **HTML Report** or **XML Report**.
 
### Additional considerations
@ -46,9 +46,9 @@ To verify that the version that has been redeployed matches the version intended
- [Performing Approver Tasks](performing-approver-tasks-agpm30ops.md)
 
 

6
mdop/agpm/roll-back-to-a-previous-version-of-a-gpo.md
View File

@ -36,7 +36,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
To verify that the version that has been redeployed matches the version intended, examine a difference report for the two versions. In the **History** window for the GPO, highlight the two versions, and then right-click and select **Difference** and either **HTML Report** or **XML Report**.
 
### Additional considerations
@ -46,9 +46,9 @@ To verify that the version that has been redeployed matches the version intended
- [Performing Approver Tasks](performing-approver-tasks.md)
 
 

6
mdop/agpm/roll-back-to-an-earlier-version-of-a-gpo-agpm40.md
View File

@ -36,7 +36,7 @@ A user account with the Approver or AGPM Administrator (Full Control) role or ne
**Note**  
To verify that the version that has been redeployed matches the version intended, examine a difference report for the two versions. In the **History** window for the GPO, highlight the two versions, and then right-click and select **Difference** and either **HTML Report** or **XML Report**.
 
### Additional considerations
@ -46,9 +46,9 @@ To verify that the version that has been redeployed matches the version intended
- [Performing Approver Tasks](performing-approver-tasks-agpm40.md)
 
 

6
mdop/agpm/set-a-default-template-agpm30ops.md
View File

@ -22,7 +22,7 @@ As an Editor, you can specify which of the available templates will be the defau
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.
@ -54,9 +54,9 @@ A user account with the Editor or AGPM Administrator (Full Control) role or nece
- [Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm30ops.md)
 
 

6
mdop/agpm/set-a-default-template-agpm40.md
View File

@ -22,7 +22,7 @@ As an Editor, you can specify which of the available templates will be the defau
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.
@ -54,9 +54,9 @@ A user account with the Editor or AGPM Administrator (Full Control) role or nece
- [Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo-agpm40.md)
 
 

6
mdop/agpm/set-a-default-template.md
View File

@ -22,7 +22,7 @@ As an Editor, you can specify which of the available templates will be the defau
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management is required to complete this procedure. Review the details in "Additional considerations" in this topic.
@ -54,9 +54,9 @@ A user account with the Editor or AGPM Administrator (Full Control) role or nece
- [Request the Creation of a New Controlled GPO](request-the-creation-of-a-new-controlled-gpo.md)
 
 

8
mdop/agpm/start-and-stop-the-agpm-service-agpm30ops.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Important**  
Stopping or disabling the AGPM Service will prevent AGPM Clients from performing any operations (such as listing or editing GPOs) through the server.
 
A user account with access to the AGPM Server (the computer on which the AGPM Service is installed) is required to complete this procedure.
@ -35,15 +35,15 @@ A user account with access to the AGPM Server (the computer on which the AGPM Se
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
### Additional references
- [Managing the AGPM Service](managing-the-agpm-service-agpm30ops.md)
 
 

8
mdop/agpm/start-and-stop-the-agpm-service-agpm40.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Important**  
Stopping or disabling the AGPM Service will prevent AGPM Clients from performing any operations (such as listing or editing GPOs) through the server.
 
A user account with access to the AGPM Server (the computer on which the AGPM Service is installed) is required to complete this procedure.
@ -35,15 +35,15 @@ A user account with access to the AGPM Server (the computer on which the AGPM Se
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting.
 
### Additional references
- [Managing the AGPM Service](managing-the-agpm-service-agpm40.md)
 
 

8
mdop/agpm/start-and-stop-the-agpm-service.md
View File

@ -22,7 +22,7 @@ The AGPM Service is a Windows service that acts as a security proxy, managing cl
**Important**  
Stopping or disabling the AGPM Service will prevent AGPM clients from performing any operations (such as listing or editing GPOs) through the server.
 
A user account with access to the AGPM Server (the computer on which the AGPM Service is installed) is required to complete this procedure.
@ -35,15 +35,15 @@ A user account with access to the AGPM Server (the computer on which the AGPM Se
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting. To modify settings for the service, see [Managing the AGPM Service](managing-the-agpm-service.md).
 
### Additional references
- [Managing the AGPM Service](managing-the-agpm-service.md)
 
 

22
mdop/agpm/step-by-step-guide-for-microsoft-advanced-group-policy-management-25.md
View File

@ -68,7 +68,7 @@ Archives cannot be migrated from an AGPM Server or a GPOVault Server running Win
For Windows Server 2003, if GPOVault Server is installed on the computer on which you want to install AGPM Server, it is recommended that you do not uninstall GPOVault Server before beginning the installation. The installation of AGPM Server will uninstall GPOVault Server and automatically transfer your existing GPOVault archive data to an AGPM archive.
 
### AGPM Client requirements
@ -81,16 +81,16 @@ Before you begin this scenario, create four user accounts. During the scenario,
**Note**  
**Link GPOs** permission is assigned to members of Domain Administrators and Enterprise Administrators by default. To assign **Link GPOs** permission to additional users or groups (such as accounts with the roles of AGPM Administrator or Approver), click the node for the domain and then click the **Delegation** tab, select **Link GPOs**, click **Add**, and select users or groups to which to assign the permission.
 
For this scenario, you perform actions with different accounts. You can either log on with each account as indicated, or you can use the **Run as** command to start the GPMC with the indicated account.
**Note**  
To use the **Run as** command with GPMC on Windows Server 2003, click **Start**, point to **Administrative Tools**, right-click **Group Policy Management**, and click **Run as**. Click **The following user** and enter credentials for an account.
To use the **Run as** command with GPMC on Windows Vista, click the **Start** button, point to **Run**, and type **runas /user:***DomainName\\UserName***"mmc %windir%\\system32\\gpmc.msc"**, and click **OK**. Type the password for the account when prompted.
To use the **Run as** command with GPMC on Windows Vista, click the **Start** button, point to **Run**, and type **runas /user:**<em>DomainName\\UserName</em>**"mmc %windir%\\system32\\gpmc.msc"**, and click **OK**. Type the password for the account when prompted.
 
## Steps for installing and configuring AGPM
@ -134,7 +134,7 @@ In this step, you install AGPM Server on the member server or domain controller
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting. For information on how to modify settings for the service, see Help for Advanced Group Policy Management.
 
### <a href="" id="bkmk-config2"></a>Step 2: Install AGPM Client
@ -211,12 +211,12 @@ As an AGPM Administrator (Full Control), you delegate domain-level access to GPO
**Note**  
You can also delegate access at the GPO level rather than the domain level. For details, see Help for Advanced Group Policy Management.
 
**Important**  
You should restrict membership in the Group Policy Creator Owners group, so it cannot be used to circumvent AGPM management of access to GPOs. (In the **Group Policy Management Console**, click **Group Policy Objects** in the forest and domain in which you want to manage GPOs, click **Delegation**, and then configure the settings to meet the needs of your organization.)
 
**To delegate access to all GPOs throughout a domain**
@ -512,7 +512,7 @@ Occasionally you may discover after deleting a GPO that it is still needed. In t
**Note**  
Restoring a GPO to the archive does not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO as in [Step 3: Review and deploy a GPO](#bkmk-manage3).
 
After editing and deploying a GPO, you may discover that recent changes to the GPO are causing a problem. In this step, you act as an Approver to roll back to a previous version of the GPO. You can roll back to any version in the history of the GPO. You can use comments and labels to identify known good versions and when specific changes were made.
@ -529,11 +529,11 @@ After editing and deploying a GPO, you may discover that recent changes to the G
**Note**  
To verify that the version that has been redeployed is the version intended, examine a difference report for the two versions. In the **History** window for the GPO, select the two versions, right-click them, point to **Difference**, and then click either **HTML Report** or **XML Report**.
 
 
 

44
mdop/agpm/step-by-step-guide-for-microsoft-advanced-group-policy-management-30.md
View File

@ -56,7 +56,7 @@ Computers on which you want to install AGPM must meet the following requirements
**Note**  
If you have AGPM 2.5 installed and are upgrading from Windows Server® 2003 to Windows Server 2008 or Windows Vista® with no service packs installed to Windows Vista with Service Pack 1, you must upgrade the operating system before you can upgrade to AGPM 3.0.
 
### AGPM Server requirements
@ -105,7 +105,7 @@ Before you begin this scenario, create four user accounts. During the scenario,
**Note**  
**Link GPOs** permission is assigned to members of Domain Administrators and Enterprise Administrators by default. To assign **Link GPOs** permission to additional users or groups (such as accounts with the roles of AGPM Administrator or Approver), click the node for the domain and then click the **Delegation** tab, select **Link GPOs**, click **Add**, and select users or groups to which to assign the permission.
 
## Steps for installing and configuring AGPM
@ -153,7 +153,7 @@ In this step, you install AGPM Server on the member server or domain controller
**Caution**  
Do not modify settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing so can prevent the AGPM Service from starting. For information on how to modify settings for the service, see Help for Advanced Group Policy Management.
 
### <a href="" id="bkmk-config2"></a>Step 2: Install AGPM Client
@ -220,12 +220,12 @@ As an AGPM Administrator (Full Control), you delegate domain-level access to GPO
**Note**  
You can also delegate access at the GPO level rather than the domain level. For details, see Help for Advanced Group Policy Management.
 
**Important**  
You should restrict membership in the Group Policy Creator Owners group, so it cannot be used to circumvent AGPM management of access to GPOs. (In the **Group Policy Management Console**, click **Group Policy Objects** in the forest and domain in which you want to manage GPOs, click **Delegation**, and then configure the settings to meet the needs of your organization.)
 
**To delegate access to all GPOs throughout a domain**
@ -348,31 +348,31 @@ In this step, you act as an Approver, creating reports and analyzing the setting
**To review settings in the GPO**
1. On a computer on which you have installed AGPM Client, log on with a user account that has been assigned the role of Approver in AGPM. (Any Group Policy administrator with the Reviewer role, which is included in all of the other roles, can review the settings in a GPO.)
1. On a computer on which you have installed AGPM Client, log on with a user account that has been assigned the role of Approver in AGPM. (Any Group Policy administrator with the Reviewer role, which is included in all of the other roles, can review the settings in a GPO.)
2. Open the e-mail inbox for the account and note that you have received an e-mail message from the AGPM alias with an Editor's request to deploy a GPO.
2. Open the e-mail inbox for the account and note that you have received an e-mail message from the AGPM alias with an Editor's request to deploy a GPO.
3. In the **Group Policy Management Console** tree, click **Change Control** in the forest and domain in which you want to manage GPOs.
3. In the **Group Policy Management Console** tree, click **Change Control** in the forest and domain in which you want to manage GPOs.
4. On the **Contents** tab in the details pane, click the **Pending** tab.
4. On the **Contents** tab in the details pane, click the **Pending** tab.
5. Double-click **MyGPO** to display its history.
5. Double-click **MyGPO** to display its history.
6. Review the settings in the most recent version of MyGPO:
6. Review the settings in the most recent version of MyGPO:
1. In the **History** window, right-click the GPO version with the most recent timestamp, click **Settings**, and then click **HTML Report** to display a summary of the GPO's settings.
1. In the **History** window, right-click the GPO version with the most recent timestamp, click **Settings**, and then click **HTML Report** to display a summary of the GPO's settings.
2. In the Web browser, click **show all** to display all of the settings in the GPO. Close the browser.
2. In the Web browser, click **show all** to display all of the settings in the GPO. Close the browser.
7. Compare the most recent version of MyGPO to the first version checked in to the archive:
7. Compare the most recent version of MyGPO to the first version checked in to the archive:
1. In the **History** window, click the GPO version with the most recent time stamp. Press CTRL and click the oldest GPO version for which the **Computer Version** is not **\***.
1. In the **History** window, click the GPO version with the most recent time stamp. Press CTRL and click the oldest GPO version for which the **Computer Version** is not **\\***.
2. Click the **Differences** button. The **Account Policies/Password Policy** section is highlighted in green and preceded by **\[+\]**, indicating that this setting is configured only in the latter version of the GPO.
2. Click the **Differences** button. The **Account Policies/Password Policy** section is highlighted in green and preceded by **\[+\]**, indicating that this setting is configured only in the latter version of the GPO.
3. Click **Account Policies/Password Policy**. The **Minimum password length** setting is also highlighted in green and preceded by **\[+\]**, indicating that it is configured only in the latter version of the GPO.
3. Click **Account Policies/Password Policy**. The **Minimum password length** setting is also highlighted in green and preceded by **\[+\]**, indicating that it is configured only in the latter version of the GPO.
4. Close the Web browser.
4. Close the Web browser.
**To deploy the GPO to the production environment**
@ -501,7 +501,7 @@ Occasionally you may discover after deleting a GPO that it is still needed. In t
**Note**  
Restoring a GPO to the archive does not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO as in [Step 3: Review and deploy a GPO](#bkmk-manage3).
 
After editing and deploying a GPO, you may discover that recent changes to the GPO are causing a problem. In this step, you act as an Approver to roll back to a previous version of the GPO. You can roll back to any version in the history of the GPO. You can use comments and labels to identify known good versions and when specific changes were made.
@ -518,11 +518,11 @@ After editing and deploying a GPO, you may discover that recent changes to the G
**Note**  
To verify that the version that has been redeployed is the version intended, examine a difference report for the two versions. In the **History** window for the GPO, select the two versions, right-click them, point to **Difference**, and then click either **HTML Report** or **XML Report**.
 
 
 

46
mdop/agpm/step-by-step-guide-for-microsoft-advanced-group-policy-management-40.md
View File

@ -60,7 +60,7 @@ If you have AGPM 2.5 installed and are upgrading from Windows Server® 2003 to
If you have AGPM 3.0 installed, you do not have to upgrade the operating system before you upgrade to AGPM 4.0
 
In a mixed environment that includes both newer and older operating systems, there are some limitations to functionality, as indicated in the following table.
@ -101,7 +101,7 @@ In a mixed environment that includes both newer and older operating systems, the
</tbody>
</table>
 
### AGPM Server requirements
@ -162,7 +162,7 @@ Before you begin this scenario, create four user accounts. During the scenario,
**Note**  
**Link GPOs** permission is assigned to members of Domain Administrators and Enterprise Administrators by default. To assign **Link GPOs** permission to additional users or groups (such as accounts that have the roles of AGPM Administrator or Approver), click the node for the domain and then click the **Delegation** tab, select **Link GPOs**, click **Add**, and select users or groups to which you want to assign the permission.
 
## Steps for installing and configuring AGPM
@ -222,7 +222,7 @@ In this step, you install AGPM Server on the member server or domain controller
**Caution**  
Do not change settings for the AGPM Service through **Administrative Tools** and **Services** in the operating system. Doing this can prevent the AGPM Service from starting. For information about how to change settings for the service, see Help for Advanced Group Policy Management.
 
### <a href="" id="bkmk-config2"></a>Step 2: Install AGPM Client
@ -289,12 +289,12 @@ As an AGPM Administrator (Full Control), you delegate domain-level access to GPO
**Note**  
You can also delegate access at the GPO level instead of the domain level. For more information, see Help for Advanced Group Policy Management.
 
**Important**  
You should restrict membership in the Group Policy Creator Owners group so that it cannot be used to circumvent AGPM management of access to GPOs. (In the **Group Policy Management Console**, click **Group Policy Objects** in the forest and domain in which you want to manage GPOs, click **Delegation**, and then configure the settings to meet the needs of your organization.)
 
**To delegate access to all GPOs throughout a domain**
@ -417,31 +417,31 @@ In this step, you act as an Approver, creating reports and analyzing the setting
**To review settings in the GPO**
1. On a computer on which you have installed AGPM Client, log on with a user account that is assigned the role of Approver in AGPM. Any Group Policy administrator with the Reviewer role, which is included in all of the other roles, can review the settings in a GPO.
1. On a computer on which you have installed AGPM Client, log on with a user account that is assigned the role of Approver in AGPM. Any Group Policy administrator with the Reviewer role, which is included in all of the other roles, can review the settings in a GPO.
2. Open the e-mail inbox for the account and notice that you have received an e-mail message from the AGPM alias with an Editor's request to deploy a GPO.
2. Open the e-mail inbox for the account and notice that you have received an e-mail message from the AGPM alias with an Editor's request to deploy a GPO.
3. In the **Group Policy Management Console** tree, click **Change Control** in the forest and domain in which you want to manage GPOs.
3. In the **Group Policy Management Console** tree, click **Change Control** in the forest and domain in which you want to manage GPOs.
4. On the **Contents** tab in the details pane, click the **Pending** tab.
4. On the **Contents** tab in the details pane, click the **Pending** tab.
5. Double-click **MyGPO** to display its history.
5. Double-click **MyGPO** to display its history.
6. Review the settings in the most recent version of MyGPO:
6. Review the settings in the most recent version of MyGPO:
1. In the **History** window, right-click the GPO version with the most recent time stamp, click **Settings**, and then click **HTML Report** to display a summary of the GPO's settings.
1. In the **History** window, right-click the GPO version with the most recent time stamp, click **Settings**, and then click **HTML Report** to display a summary of the GPO's settings.
2. In the Web browser, click **show all** to display all the settings in the GPO. Close the browser.
2. In the Web browser, click **show all** to display all the settings in the GPO. Close the browser.
7. Compare the most recent version of MyGPO to the first version checked in to the archive:
7. Compare the most recent version of MyGPO to the first version checked in to the archive:
1. In the **History** window, click the GPO version with the most recent time stamp. Press CTRL and then click the oldest GPO version for which the **Computer Version** is not **\***.
1. In the **History** window, click the GPO version with the most recent time stamp. Press CTRL and then click the oldest GPO version for which the **Computer Version** is not **\\***.
2. Click the **Differences** button. The **Account Policies/Password Policy** section is highlighted in green and preceded by **\[+\]**. This indicates that the setting is configured only in the latter version of the GPO.
2. Click the **Differences** button. The **Account Policies/Password Policy** section is highlighted in green and preceded by **\[+\]**. This indicates that the setting is configured only in the latter version of the GPO.
3. Click **Account Policies/Password Policy**. The **Minimum password length** setting is also highlighted in green and preceded by **\[+\]**, indicating that it is configured only in the latter version of the GPO.
3. Click **Account Policies/Password Policy**. The **Minimum password length** setting is also highlighted in green and preceded by **\[+\]**, indicating that it is configured only in the latter version of the GPO.
4. Close the Web browser.
4. Close the Web browser.
**To deploy the GPO to the production environment**
@ -570,7 +570,7 @@ Occasionally you may discover after you delete a GPO that it is still needed. In
**Note**  
Restoring a GPO to the archive does not automatically redeploy it to the production environment. To return the GPO to the production environment, deploy the GPO as in [Step 3: Review and deploy a GPO](#bkmk-manage3).
 
After editing and deploying a GPO, you may discover that recent changes to the GPO are causing a problem. In this step, you act as an Approver to roll back to an earlier version of the GPO. You can roll back to any version in the history of the GPO. You can use comments and labels to identify known good versions and when specific changes were made.
@ -587,11 +587,11 @@ After editing and deploying a GPO, you may discover that recent changes to the G
**Note**  
To verify that the version that was redeployed is the version intended, examine a difference report for the two versions. In the **History** window for the GPO, select the two versions, right-click them, point to **Difference**, and then click either **HTML Report** or **XML Report**.
 
 
 

12
mdop/agpm/technical-overview-of-agpm.md
View File

@ -101,7 +101,7 @@ Table 1 describes both the items that AGPM installs or creates and the parts of
</tbody>
</table>
 
### Additional references
@ -119,7 +119,7 @@ The gpostate.xml file records the state of each GPO in the archive. The file is
**Caution**  
Do not manually edit gpostate.xml or the GPOs the archive contains. This information is provided only to enhance understanding of the AGPM archive. Instead, use the AGPM snap-in to change GPOs.
 
When AGPM creates the archive, it gives Full Control to SYSTEM, Administrators, and the AGPM Service Account (specified in the setup of AGPM Server). Changing permissions by using the AGPM user interface on the AGPM snap-in does not alter permissions on the archive, because the AGPM Service Account performs all operations on behalf of the logged-on user.
@ -261,22 +261,22 @@ AGPM gives AGPM Administrators the flexibility to configure permissions at a mor
</tbody>
</table>
 
**Note**  
**Export GPO** and **Import GPO** permissions are not available in AGPM 3.0 or 2.5.
The ability to delegate access to GPOs in the production environment for a domain and the ability to limit the number of GPO versions stored are not available in AGPM 2.5.
 
### Additional references
For information about what tasks can be performed by Group Policy administrators assigned a particular role or about which permissions are required to perform a specific task, see the [Operations Guide for AGPM](https://go.microsoft.com/fwlink/?LinkId=160061).
 
 

14
mdop/agpm/template-commands-agpm30ops.md
View File

@ -30,7 +30,7 @@ Because a template cannot be altered, templates have no history. However, like a
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
Right-clicking the **Group Policy Objects** list on this tab displays a shortcut menu, including whichever of the following options are applicable.
@ -56,7 +56,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Reports
@ -84,7 +84,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Template management
@ -116,7 +116,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Miscellaneous
@ -144,7 +144,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
### Additional references
@ -154,9 +154,9 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
- [Performing Reviewer Tasks](performing-reviewer-tasks-agpm30ops.md)
 
 

14
mdop/agpm/template-commands-agpm40.md
View File

@ -30,7 +30,7 @@ Because a template cannot be altered, templates have no history. However, like a
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
Right-clicking the **Group Policy Objects** list on this tab displays a shortcut menu, including whichever of the following options are applicable.
@ -56,7 +56,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Reports
@ -84,7 +84,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Template management
@ -116,7 +116,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Miscellaneous
@ -144,7 +144,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
### Additional references
@ -154,9 +154,9 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
- [Performing Reviewer Tasks](performing-reviewer-tasks-agpm40.md)
 
 

14
mdop/agpm/templates-tab.md
View File

@ -30,7 +30,7 @@ Because a template cannot be altered, templates have no history. However, like a
**Note**  
A template is an uneditable, static version of a GPO for use as a starting point for creating new, editable GPOs.
 
Right-clicking the **Group Policy Objects** list on this tab displays a shortcut menu, including whichever of the following options are applicable.
@ -56,7 +56,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Reports
@ -84,7 +84,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Template management
@ -116,7 +116,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
## Miscellaneous
@ -144,7 +144,7 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
</tbody>
</table>
 
### Additional references
@ -154,9 +154,9 @@ Right-clicking the **Group Policy Objects** list on this tab displays a shortcut
- [Performing Reviewer Tasks](performing-reviewer-tasks.md)
 
 

6
mdop/agpm/using-a-test-environment.md
View File

@ -28,11 +28,11 @@ Before you request that a Group Policy Object (GPO) be deployed to the productio
**Note**  
You can also import a GPO from the production environment of the domain. For more information, see [Import a GPO from Production](import-a-gpo-from-production-agpm40-ed.md).