Share via


Deploying a GPO

An Approver can deploy a new or edited Group Policy Object (GPO) to the production environment. For information about redeploying a previous version of a GPO, see Roll Back to a Previous Version of a GPO.

A user account with the Approver or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.

To deploy a GPO to the production environment

  1. In the Group Policy Management Console tree, click Change Control in the forest and domain in which you want to manage GPOs.

  2. On the Contents tab, click the Controlled tab to display the controlled GPOs.

  3. Right-click the GPO to be deployed and then click Deploy.

  4. To review links to the GPO, click Advanced. Pause the mouse pointer on an item in the tree to display details.

    • By default, all links to the GPO will be restored.

    • To prevent a link from being restored, clear the check box for that link.

    • To prevent all links from being restored, clear the Restore Links check box in the Deploy GPO dialog box.

  5. Click Yes. When the Progress window indicates that overall progress is complete, click Close.

Note   To verify whether the most recent version of a GPO has been deployed, on the Controlled tab, double-click the GPO to display its History. In the History for the GPO, the State column indicates whether a GPO has been deployed.

Additional considerations

  • By default, you must be an Approver or an AGPM Administrator (Full Control) to perform this procedure. Specifically, you must have List Contents and Deploy GPO permissions for the GPO.

Additional references