Controlled GPO Commands

  • [アーティクル]

The Controlled tab:

  • Displays a list of Group Policy Objects (GPOs) managed by Advanced Group Policy Management (AGPM).

  • Provides a shortcut menu with commands for managing GPOs and for displaying the history and reports for GPOs.

  • Displays a list of the groups and users who have permission to access a selected GPO.

Right-clicking the Group Policy Objects list on this tab displays a shortcut menu, including whichever of the following options are applicable.

Control and history

Command Effect

New Controlled GPO

Create a new GPO with change control managed through AGPM and deploy it to the production environment. If you do not have permission to create a GPO, you will be prompted to submit a request. (This option is displayed if no GPO is selected when right-clicking in the Group Policy Objects list.)

History

Open a window listing all versions of the selected GPO saved within the archive. From the history, you can obtain a report of the settings within a GPO, compare two versions of a GPO, compare a GPO to a template, or roll back to a previous version of a GPO.

 

Reports

Command Effect

Settings

Generate an HTML-based or XML-based report displaying the settings within the selected GPO or display links to the selected GPO(s) from organizational units as of when the GPO(s) was most recently controlled, imported, or checked in.

Differences

Generate an HTML-based or XML-based report comparing the settings within two selected GPOs or within the selected GPO and a template.

 

Editing

Command Effect

Edit

Open the Group Policy Management Editor window to make changes to the selected GPO.

Check Out

Obtain a copy of the selected GPO from the archive for offline editing and prohibit anyone else from editing it until it is checked back into the archive. (Check Out can be overridden by an AGPM Administrator (Full Control).)

Check In

Check the edited version of the selected GPO into the archive, so other authorized Editors can make changes or an Approver can deploy it to the production environment.

Undo Check Out

Return a checked out GPO to the archive without any changes.

 

Version management

Command Effect

Import from Production

For the selected GPO, copy the version in the production environment to the archive.

Delete

Move the selected GPO to the Recycle Bin and indicate whether to leave the deployed version (if one exists) in production or to delete it as well as the version in the archive. If you do not have permission to delete a GPO, you will be prompted to submit a request.

Deploy

Move the selected GPO that is checked into the archive to the production environment. This action makes it active on the network and overwrites the previously active version of the GPO if one existed. If you do not have permission to deploy a GPO, you will be prompted to submit a request.

Label

Mark the selected GPO with a descriptive label (such as "Known good") and comment for record keeping. Labels appear in the State column and comments in the Comment column of the History window, enabling you to easily identify previous versions of a GPO identified with a particular label, so you can roll back if a problem occurs.

Rename

Change the name of the selected GPO. If the GPO has already been deployed, the name will be updated in the production environment when the GPO is redeployed.

Save as Template

Create a new template based on the settings of the selected GPO.

 

Miscellaneous

Command Effect

Refresh

Update the display of the Group Policy Management Console (GPMC) to incorporate any changes. Some changes are not visible until the display is refreshed.

Help

Display help for AGPM.

 

Additional references