1. MDOP: Advanced Group Policy Management 4.0
Tech Ed North America 2010
9/13/2018 5:39 AM
Required Slide
SESSION CODE: WCL322
MDOP: Advanced Group Policy Management 4.0
Mark Gray
Program Manager
Microsoft Corporation
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. What We Want
meat (start)
mat (removed ‘e’)
man (changed ‘t’ to ‘n’)
mane (added ‘e’)
mine (changed ‘a’ to ‘i’)
Know what changed and undo bad changes

3. Take Control!

4. Agenda GPO Management Workflow Architecture Offline editing Search
Multi forest
Auditing
History
Reporting
Workflow
Permissions
Delegation
Architecture

5. Offline Editing
Edit GPOs offline before deploying live

6. Templates Use templates to create consistent GPO’s
Supports all GPO content

7. Search (Filtering) What it does Filters GPOs by properties
Allows for column precision
Maintains a list of the recent 10 searches
What it doesn’t do
Search for settings

8. Multi Forest Support What it does What it doesn’t do
Allows GPO movement from AGPM to AGPM
Preserves origin metadata
Supports migration tables
What it doesn’t do
Online moves between domains/forests
GPP and Migration Tables limitation

9. Windows 7/Server 2008 R2 What is supported Group Policy Preferences
Reporting for all new extensions
Applocker, DNSSEC, IE8, Scheduled Tasks
Service
RSAT

10. Demo GPO Management Authoring 9/13/2018 5:39 AM
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Auditing
Get complete details on what happened,
who did it, and why

12. History is a list of complete backups
Rollback to Known good GPO version
Safeguard live environment from unapproved changes and untested settings

13. Granular change tracking

14. Demo GPO Management History 9/13/2018 5:39 AM
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. vs Reporting Security Template GPO 1.0 GPO A Security Kiosk GPO B GPO
Settings
Parity with Group Policy settings reports
Difference
Security Template
GPO
1.0
GPO A
Security
Kiosk
GPO B
GPO
1.5 vs

16. Differences
added
changed
removed
Compare settings between GPOs

17. Demo GPO Management Reporting 9/13/2018 5:39 AM
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Agenda GPO Management Workflow Architecture Offline editing Search
Multi forest
Auditing
History
Reporting
Workflow
Permissions
Delegation
Architecture

19. Permissions - Roles
Full Control
Editor
Define granular control without making everyone a Domain Admin
Approver
Reviewer 19

20. Delegation

21. Workflow Create a repeatable workflow that you can track Offline
Control
Check-out
Edit
Check-in
Requests
Reporting
Deployment
Create a repeatable workflow that you can track
Offline

22. Permissions and delegation
9/13/2018 5:39 AM
Workflow
Permissions and delegation
Demo
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Agenda GPO Management Workflow Architecture Offline editing Search
Multi forest
Auditing
History
Reporting
Workflow
Permissions
Delegation
Architecture

24. Administrative Desktop
Architecture
Production
Archive/Offline
AGPM Server
Domain Controller
GPO 1
GPO 2
XML File of backups
GPO 2
Direct link
GPO 1
Server
Component
Backups of GPO 2
Backups GPO 1
Direct link
AGPM Client (GPMC)
Admin Component
Administrative Desktop 24

25. Administrative Desktop
Service
Production
Archive/Offline
Proxy
AGPM Server
Domain Controller
GPO 1
GPO 2
GPO 2
GPO 1
Permissions
AGPM Client (GPMC)
Administrative Desktop

26. AGPM 4.0 Client and Server Support
Tech Ed North America 2010
9/13/2018 5:39 AM
AGPM 4.0 Client and Server Support
AGPM Support matrix
Operating system on which AGPM Server 4.0 runs
Operating system on which AGPM Client 4.0 runs
Status of AGPM 4.0 support
Windows Server 2008 R2
Windows 7/R2
Supported
Best Experience
Windows Vista with SP1/2008
Partially supported
Cannot edit policy settings or preference items that exist only in Windows Server 2008 R2 or Windows 7
Windows Server 2008
Unsupported
Supported with limitations
Cannot report or edit policy settings or preference items that exist only in Windows Server 2008 R2 or Windows 7
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Q&A

28. AGPM Resources MDOP Blog http://blogs.technet.com/MDOP/
Required Slide
Track PMs will supply the content for this slide, which will be inserted during the final scrub.
Tech Ed North America 2010
9/13/2018 5:39 AM
AGPM Resources
MDOP Blog
MDOP TechNet page
Group Policy TechNet page
Group Policy Team Blog
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Required Slide
Speakers, please list the Breakout Sessions, Interactive Sessions, Labs and Demo Stations that are related to your session.
Tech Ed North America 2010
9/13/2018 5:39 AM
Related Content
WCL323 - Rm 295 Thursday, June 10 5:00 PM - 6:15 PM How to Save Money, Time, and Headaches with Group Policy in Windows 7 / Windows Server 2008 R2
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. Required Slide
Track PMs will supply the content for this slide, which will be inserted during the final scrub.
Tech Ed North America 2010
9/13/2018 5:39 AM
Track Resources
Learn about Windows Client Development:
Try out the Internet Explorer 9 Platform Preview:
Interested in Windows hardware or software? Check it out:
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

31. Resources Learning Required Slide www.microsoft.com/teched
Tech Ed North America 2010
9/13/2018 5:39 AM
Required Slide
Resources
Learning
Sessions On-Demand & Community
Microsoft Certification & Training Resources
Resources for IT Professionals
Resources for Developers
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. Complete an evaluation on CommNet and enter to win!
Tech Ed North America 2010
9/13/2018 5:39 AM
Required Slide
Complete an evaluation on CommNet and enter to win!
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. Sign up for Tech·Ed 2011 and save $500 starting June 8 – June 31st
You can also register at the North America 2011 kiosk located at registration Join us in Atlanta next year

34. Tech Ed North America 2010 9/13/2018 5:39 AM
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. Required Slide Tech Ed North America 2010 9/13/2018 5:39 AM
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.