12.1. The Challenge of Group Policy Change Management

Group Policy offers a huge amount of power. (That's why our logo at www.GPanswers.com looks like a deity hurling a lightning bolt.) Actually, some could argue that Group Policy has too much power. Not too much power in the hands of someone skilled in the ways of Group Policy kung fu. But rather, it can be too much power for someone who's a mere white belt.

With that in mind, Microsoft's AGPM product seeks to fill in several gaps within the GPMC when it comes to who can do what to Group Policy. In Chapter 2, "Managing Group Policy with the GPMC," you learned about the Group Policy delegation model. Sure, it's possible to say, "Carl can create GPOs," "Ed can edit these GPOs," and "Larry can ...

Get Group Policy: Fundamentals, Security, and Troubleshooting now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.