AGPM recommendations


  • We have a 2012r2 domain and I am the only person that normally creates GPOs.  We have 3 Domain Admins who can create GPOs, and 7 people the have read-only permissions on all GPOs.  When I deploy AGPM 4.0, should I install the server service on a DC with local system account? or spin up a VM with service account for that?  Where am I required to install the AGPM client? Are all Group Policy users required to have that client? Are my read-only users required to have that client? or can they get by with the normal client?  Should I put the client on each of my Domain Controllers even though I do not normally create GPOs there?



    • Edited by DaveBryan37 Friday, March 03, 2017 10:50 PM
    Monday, February 20, 2017 10:22 PM

All replies