none
AGPM with 2 domains

    Question

  • Hello IT guru's,

    I have a question, I have 2 domains with a trust.

    We have AGPM installed and configured in domain A, now we want to install AGPM also on a DC in Domain B with the same configuration as we used in domain A.

    We get no errors, Domain B is getting the right setting, reads all the policies but all the options are greyed out so we can't check out policies etc.

    Does anyone have the same problem or does somebody have an solution for this?

    Thank you for reading this and i hope we can come up with a solution

    Best regards,

    Pascal

    The Netherlands

    Tuesday, July 05, 2016 12:52 PM

Answers

  • Hi Pascal,

    Have you checked the permissions provided to the service accounts?

    This link has some great tips on the https://blogs.technet.microsoft.com/askds/2008/12/16/agpm-least-privilege-scenario/

    also check out similar thread on this issue.

    https://social.technet.microsoft.com/Forums/en-US/7b7f4ded-00c2-4b99-afae-e09abc51a09a/agpm-service-account-permissions-required-to-manage-gpos-in-multiple-domains?forum=winserverGP


    Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer

    • Marked as answer by pascaladmin Monday, July 11, 2016 1:46 PM
    Tuesday, July 05, 2016 1:08 PM

All replies

  • Hi Pascal,

    Have you checked the permissions provided to the service accounts?

    This link has some great tips on the https://blogs.technet.microsoft.com/askds/2008/12/16/agpm-least-privilege-scenario/

    also check out similar thread on this issue.

    https://social.technet.microsoft.com/Forums/en-US/7b7f4ded-00c2-4b99-afae-e09abc51a09a/agpm-service-account-permissions-required-to-manage-gpos-in-multiple-domains?forum=winserverGP


    Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer

    • Marked as answer by pascaladmin Monday, July 11, 2016 1:46 PM
    Tuesday, July 05, 2016 1:08 PM
  • Hi Pascal,

    Thanks for your post.

    In my opinion, the problem may be caused by the permission of the user.

    To edit group policy in AGPM, you need have permission of Editor.

    AGPM gives AGPM Administrators the flexibility to configure permissions at a more detailed level than roles by using the AGPM snap-in.

    The article below has descripted what permission should have when you perform an action in AGPM.

    Technical Overview of AGPM

    https://technet.microsoft.com/en-us/itpro/mdop/agpm/technical-overview-of-agpm

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, July 06, 2016 8:00 AM
    Moderator
  • Hi Jim,

    Thank you very much for the response, I Think my issue is solved!

    Monday, July 11, 2016 1:51 PM