AGPM 4.0 SP1 Installing and configuring guide part 3 – Client Installation

This post is part of following article:

In this part of article we are going to install and configure our AGPM client to work with AGPM server installed in previous part of this article.

For highest level of compatibility it is recommended to install client on Windows 8 / 8.1 (but it is also supported on Windows Vista and higher). AGPM Client can be installed on the same machine as AGPM server is.

So, let’s start the client installation.

Step 1: Start the x86 or x64 installation file, depending on your architecture and click on “Next” button2015-01-09 09_50_19-Microsoft Advanced Group Policy Management - Client Setup

Step 2: Accept the license terms and continue

2015-01-09 09_51_23-Microsoft Advanced Group Policy Management - Client Setup

Step 3: Select the installation path or leave defaults and continue

2015-01-09 09_52_05-Microsoft Advanced Group Policy Management - Client Setup

Step 4: Type in your AGPM server hostname and leave default port unless you changed it during server installation

2015-01-09 09_53_28-Microsoft Advanced Group Policy Management - Client Setup

Step 5: Select required languages and click on “Next”

2015-01-09 09_55_26-Microsoft Advanced Group Policy Management - Client Setup

Step 6: Click on Install button to start the installation process.

2015-01-09 09_56_35-Microsoft Advanced Group Policy Management - Client Setup

Step 7: Finish the installation

2015-01-09 09_57_10-Microsoft Advanced Group Policy Management - Client Setup

Warning: Next steps should be followed only if you want to forcibly set AGPM server for all AGPM clients using Group Policy. Otherwise – if you want users to do that by themselves, skip steps 8-10.

Step 8: If you use central store for your policies, then from your AGPM server’s copy %SystemRoot%\PolicyDefinitions\Agpm.admx and it’s language files (placed in en-US\agpm.adml and each other language directory you selected during installation) directly to your Policies central store on sysvol \\contoso.com\sysvol\contoso.com\Policies\PolicyDefinitions. If you don’t use Central Store, skip this step and go directly to Step 9.

Step 9: Open up GPMC and create / edit policy by adding following setting: User Configuration -> Policies -> Administrative Templates -> Windows Components -> AGPM -> AGPM: Specify AGPM Servers

2015-01-09 11_24_44-sneu2013 - Remote Desktop Connection

Enable the policy and click on Show…

2015-01-09 11_26_15-sneu2013 - Remote Desktop Connection

Then, type in your domain and AGPM server name as in example above

2015-01-09 11_27_29-sneu2013 - Remote Desktop Connection

Click on OK, then Apply the policy and close all dialog windows.

Step 10: If everything is done, you can now open up your GPMC (yes, the same old console – as mentioned in 1 part of this article, AGPM is just a plugin for GPMC) and click on new option named “Change Control

2015-01-09 11_44_25-Group Policy Management

Browse to “AGPM Server” tab and check if Host is entered, Apply button should be disabled – which means, our Policy worked.

2015-01-09 11_46_13-Group Policy Management

All done.

Read more about Securing AGPM in part 4 of this article.

Leave a Reply