Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11


The retired, out-of-support Internet Explorer 11 (IE11) desktop application will be permanently disabled on certain versions of Windows 10 as part of the February 2023 Windows security update ("B") release scheduled for February 14, 2023. We highly recommend setting up IE mode in Microsoft Edge and disabling IE11 prior to this date to ensure your organization doesn't experience business disruption.

For more information, see

Advanced Group Policy Management (AGPM) is an add-on license that available for the Microsoft Desktop Optimization Pack (MDOP). This license gives you change control and a role assignment-model that helps optimize Group Policy management and reduce the risk of widespread failures.

From AGPM you can:

  • Edit GPOs outside of your production environment. Your GPOs are stored in an outside archive for editing, reviewing, and approving. Then, when you deploy, AGPM moves the GPOs to your production environment.

  • Assign roles to your employees. You can assign 3 roles to your employees or groups, including:

    • Reviewer. Can view and compare GPOs in the archive. This role can't edit or deploy GPOs.

    • Editor. Can view, compare, check-in and out, and edit GPOs in the archive. This role can also request GPO deployment.

    • Approver. Can approve GPO creation and deployment to the production environment.

  • Manage your GPO lifecycle with change control features. You can use the available version-control, history, and auditing features to help you manage your GPOs while moving through your archive, to your editing process, and finally to your GPO deployment.

For more information about AGPM, and to get the license, see Advanced Group Policy Management 4.0 Documents.