Microsoft Advanced Group Policy Management (AGPM), a core component of the Microsoft Desktop Optimization Pack for Software Assurance, makes it easier for IT organizations to keep enterprise-wide desktop configurations up to date, enabling greater control, less downtime, and reduced total cost of ownership (TCO).
Group Policy objects (GPOs) play a powerful role in how your network is managed and secured. They enable IT staff to manage user and desktop settings on many computers at once. This means that every change to Group Policy usually affects multiple users and computers on the network. There is a risk associated with this degree of flexibility. Without a change control system, when IT teams alter GPOs, those changes can start affecting computers before they have been tested. If there's a problem with the updates, it can be difficult to quickly reverse them.
Additionally, although Group Policy provides a delegation model, the editor role has full permissions to deploy changes to the live environment. With the possibility of multiple editors per GPO, there is no way to detect who has made which changes, or to accept or reject changes before they are put into effect. With AGPM you can: