Create, Edit, and Deploy GPO Tasks
In an environment where multiple people make changes to Group Policy Objects (GPOs) using Advanced Group Policy Management (AGPM), an AGPM Administrator (Full Control) delegates permission to Editors, Approvers, and Reviewers, either as groups or as individuals. The following is a typical GPO development process for an Editor and an Approver.
| Task | Reference |
|---|---|
Editor requests the creation of a new GPO or an Approver creates a new GPO. |
|
Approver approves the creation of the GPO if it was requested by an Editor. |
|
Editor checks out a copy of the GPO from the archive, so no one else can modify the GPO. Editor makes changes to the GPO, and then checks the modified GPO into the archive. |
|
Editor requests deployment of the GPO to the production environment. |
|
Reviewers, such as Approvers or Editors, analyze the GPO. |
|
Approver approves and deploys the GPO to the production environment or rejects the GPO. |
Additional references
Operations Guide for Microsoft Advanced Group Policy Management 3.0