Lilia and I have been busy. Last week she was at the Microsoft Management Summit in Las Vegas talking all about the changes in Windows 7 and Windows Server 2008 R2 Group Policy. Then she did a talk on Advanced Group Policy Management.
This week we sat down and spent some time with Adam Carter from Technet Edge and spent a bit of time talking about Windows 7 and Windows Server 2008 R2 Group Policy. As we mentioned in the closing comments - were happy to do more of this stuff and talk all about it in detail but also how to troubleshoot GP and even what you can do to save yourself proactively before you hit the pain issues. Oh and if you have time, take a look at the presentation MVP Kurt Roggen did on the new stuff inGP!
Of course next week TechEd USA is on again in LA. Ill be there presenting the same two sessions that Lilia did, hanging out at the booth and even doing a TechTalk. If youre around, come by and say hello.
At a first glimps AGPM looks nice. However, looking deeper into it, it raises some other questions. e.g
- How to do test a GPO that is checked out? Also if it's check in and not deployed yet, how to you test that?
- There is no version control when checking GPOs in and out. If you have checked-in and checked-out several times, how can you tell if the GPO has already deployed to production or not. Of course you can check the GPO history. However, the history itself is a mess where it's not easy to tell which version is deployed which raises another point
- how to roll back to a specific verion of GPO. the history does not give much infomation about that. you basically need to know the exact date and time when you deployed a specific verion of a GPO
So to work around this I would basically have to rename a GPO after I made all the modification, label it and then deploy it. this would help me to get back to a specific version but this also increases the manual steps.
Also, I am missing information on the web how a full GPO lifecycle management could be done using AGPM.