This post is part of following article:
- Advanced Group Policy Management – Introduction
- Advanced Group Policy Management – Server Installation
- Advanced Group Policy Management – Client Installation
- Advanced Group Policy Management – Securing AGPM
In this part of article we are going to install and configure our AGPM client to work with AGPM server installed in previous part of this article.
For highest level of compatibility it is recommended to install client on Windows 8 / 8.1 (but it is also supported on Windows Vista and higher). AGPM Client can be installed on the same machine as AGPM server is.
So, let’s start the client installation.
Step 2: Accept the license terms and continue
Step 3: Select the installation path or leave defaults and continue
Step 4: Type in your AGPM server hostname and leave default port unless you changed it during server installation
Step 5: Select required languages and click on “Next”
Step 6: Click on Install button to start the installation process.
Step 7: Finish the installation
Warning: Next steps should be followed only if you want to forcibly set AGPM server for all AGPM clients using Group Policy. Otherwise – if you want users to do that by themselves, skip steps 8-10.
Step 8: If you use central store for your policies, then from your AGPM server’s copy %SystemRoot%\PolicyDefinitions\Agpm.admx and it’s language files (placed in en-US\agpm.adml and each other language directory you selected during installation) directly to your Policies central store on sysvol \\contoso.com\sysvol\contoso.com\Policies\PolicyDefinitions. If you don’t use Central Store, skip this step and go directly to Step 9.
Step 9: Open up GPMC and create / edit policy by adding following setting: User Configuration -> Policies -> Administrative Templates -> Windows Components -> AGPM -> AGPM: Specify AGPM Servers
Enable the policy and click on Show…
Then, type in your domain and AGPM server name as in example above
Click on OK, then Apply the policy and close all dialog windows.
Step 10: If everything is done, you can now open up your GPMC (yes, the same old console – as mentioned in 1 part of this article, AGPM is just a plugin for GPMC) and click on new option named “Change Control”
Browse to “AGPM Server” tab and check if Host is entered, Apply button should be disabled – which means, our Policy worked.
Read more about Securing AGPM in part 4 of this article.