Roll Back to an Earlier Version of a GPO
An Approver can roll back changes to a Group Policy Object (GPO) by redeploying an earlier version of the GPO from its history. Deploying an earlier version of a GPO overwrites the version of the GPO currently in production.
A user account with the Approver or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.
To deploy an earlier version of a GPO to the production environment of the domain
In the Group Policy Management Console tree, click Change Control in the forest and domain in which you want to manage GPOs.
On the Contents tab, click the Controlled tab to display the controlled GPOs.
Double-click the GPO to be deployed to display its History.
Right-click the version to be deployed, click Deploy, and then click Yes.
When the Progress window indicates that overall progress is complete, click Close. In the History window, click Close.
Note To verify that the version that has been redeployed matches the version intended, examine a difference report for the two versions. In the History window for the GPO, highlight the two versions, and then right-click and select Difference and either HTML Report or XML Report.
Additional considerations
- By default, you must be an Approver or an AGPM Administrator (Full Control) to perform this procedure. Specifically, you must have List Contents and Deploy GPO permissions for the GPO.