We are using AGPM to control over 50 GPOs (out of 200+). I admit that I’m not too crazy about it either and that the support seems like an afterthought. I would say that we’re making it work though, more or less. We just have to remember to “import from production” if we change the ACLs, change links, etc, which is annoying. Also, delegation of roles is a problem. I have full access and was the one that set it up initially, but the day-to-day support is done by another group. Not only did I need to give the other group both Editor and Approver rights, but I needed to give that group full access to the controlled GPOs in order for them to really do what they need to do.
As far as I know you can’t compare settings between different GPOs. In fact, I find that comparing different versions of the same GPO is confusing. *From:* listsadmin@lists.myitforum.com [mailto: listsadmin@lists.myitforum.com] *On Behalf Of *Andrea Suatoni *Sent:* Tuesday, October 20, 2015 4:19 AM *To:* ntsys...@lists.myitforum.com *Subject:* [NTSysADM] GPO tools We are looking for some advanced tools to deal with GPOs. We have access to and have installed AGPM 4.0 SP3, but frankly it is so badly supported and full of bugs that we are thinking about scrapping it from our systems. It’s a pity, because most of its supposed functionalities is exactly what we are after to, especially the possibility of comparing different versions of the same GPO, or comparing two arbitrary GPOs (which I am not sure it is supported by AGPM), as well as dealing with a decent backup/restore function. Do you have any suggestion on where to look for? Has anybody any experience with the GPO tools form SDM Software, for instance? Thanks in advance, Andrea ------------------------------ This message is sent in confidence and is only intended for the named recipient. If you receive this message by mistake, you may not use, copy, distribute or forward this message, or any part of its contents or rely upon the information contained in it. Should you receive this message in error, you are kindly requested to inform the sender and to definitively remove it from any computer. The opinions expressed in this e-mail are solely those of the author. This message does not constitute any formal commitment on behalf of the European Union Satellite Centre.