Managing change control for Group Policy Objects (GPOs) in a more structured way typically involves using Microsoft Advanced Group Policy Management (AGPM), an add-on tool for the Group Policy Management Console (GPMC). The provided reference specifically details how to initiate change control for a new GPO within AGPM.
While standard GPMC allows direct editing and linking of GPOs, AGPM introduces a robust workflow including check-in/check-out, version history, and approval processes, providing true change control.
According to the reference, one way to interact with change control is by creating a new GPO that is immediately brought under AGPM's management.
Creating a New GPO with Change Control (Using AGPM)
To create a new GPO where changes are managed through AGPM's change control process, you follow these steps within the AGPM interface integrated into the Group Policy Management Console:
- Open the Group Policy Management Console (GPMC).
- In the GPMC tree, navigate to the Change Control section located under the forest and domain where you intend to manage your GPOs.
- Right-click on Change Control.
- From the context menu, select New Controlled GPO.
- In the New Controlled GPO dialog box that appears:
- Type a descriptive name for your new GPO.
- (Optional) Add a comment or description for the GPO.
- Click OK.
This action creates a new GPO placeholder within the AGPM archive. The GPO is now "controlled," meaning any subsequent changes to it must go through the AGPM workflow (checking out, editing offline, checking in, seeking approval, and deploying).
This process initiates the change control lifecycle for that specific GPO from its creation, ensuring all modifications are tracked, versioned, and potentially reviewed before being applied to the live environment.
