+1 In general, the only time you should be signing in to your domain controllers is to do things like patch them. Likewise, your domain admin accounts should essentially only be necessary for managing the DCs and things related to them.
Thanks, Brian Desmond w – 312.625.1438 | c – 312.731.3132 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Charles F Sullivan Sent: Thursday, June 1, 2017 9:15 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Group Policy management I think you have the right idea. We have a small, dedicated VM running AGPM. If I were starting now, I would definitely put it on Windows 2016 and make sure the AGPM Client is installed on Windows 10 1607 or later machines to do all the GPO editing. The migration is pretty easy, just find the MS article if you’re not already familiar with it. Be sure to get AGPM 4, SP3 and this current update release: https://support.microsoft.com/en-us/help/4014009/march-2017-servicing-release-for-microsoft-desktop-optimization-pack From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] On Behalf Of Heaton, Joseph@Wildlife Sent: Wednesday, May 31, 2017 6:58 PM To: 'NT System Admin Issues Discussion list' <ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com>> Subject: [NTSysADM] Group Policy management Was curious how everyone has Group Policy Management setup. I currently use one of my domain controllers as my “main” Group Policy management server, with AGPM installed there. I’m preparing to install PolicyPak, and don’t want to do this on a domain controller, so I’m thinking that I’ll build just a really basic server, put PolicyPak on it, and AGPM, so that the traffic from clients to the PolicyPak server is not going to a domain controller trying to do other things. Joe Heaton Information Technology Operations Branch Data and Technology Division CA Department of Fish and Wildlife 1700 9th Street, 3rd Floor Sacramento, CA 95811 Desk: (916) 323-1284 Every Californian should conserve water. Find out how at: [SaveOurWater_Logo]<http://saveourwater.com/> SaveOurWater.com<http://saveourwater.com/> · Drought.CA.gov<http://drought.ca.gov/>
