The approver can't link policies.

Андрей Михалевский 2,806 Reputation points
2024-07-17T10:35:04.66+00:00

Hello. I have installed AGPM according to the documentation, but I have no option to set group policy on any container.

Снимок

1

3

What's wrong? If I understand the documentation correctly, Approver should link group policies.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,204 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 20,956 Reputation points Microsoft Vendor
    2024-07-17T13:43:25.38+00:00

    Hello Андрей Михалевский,

    Thank you for posting in Q&A forum.

    It sounds like you might be dealing with an installation or configuration issue related to Advanced Group Policy Management (AGPM). Here are some troubleshooting steps to help you resolve this:

    1.AGPM Service Running: Ensure that the AGPM service is installed and running on the server where AGPM is installed.

    2.AGPM Permissions: Check that the user account has been granted the necessary AGPM roles and permissions. AGPM uses specific roles such as Approver, Editor, Reviewer, and domain Administrator (Full Control). Make sure you have the appropriate role to create and manage GPOs.

    If one Administrator (Full Control) can set group policy on any container, you can compare the permission on this user to Administrator with full control.

    3.AGPM Console: Verify that you are using the AGPM console to manage GPOs. The AGPM console is integrated into the Group Policy Management Console (GPMC), and you should see additional options related to AGPM in the context menus.

    4.Policy Templates: Confirm that the policy templates are correctly installed and accessible. Missing templates can sometimes cause issues with policy management features.

    5.Restart Services: Sometimes, simply restarting the relevant services or the server itself can resolve permission or configuration issues.

    Here are detailed steps for some of these checks:

    Verify AGPM Service

    1.Log in to the server where AGPM is installed.

    2.Open Services from the Administrative Tools.

    3.Locate the "AGPM Service" and ensure it is running.

    Check AGPM Roles and Permissions

    1.Open the Group Policy Management Console (GPMC).

    2.Expand the Change Control node in the navigation pane.

    3.Select the AGPM instance you are working with.

    4.In the Details pane, review the roles and permissions.

    If you have confirmed all the above steps and still encounter issues, you might need to revisit the AGPM installation documentation to ensure every step has been followed correctly. If problems persist, consider reinstalling AGPM.

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.