An Approver can deploy a new or edited Group Policy Object (GPO) to the production environment. For information about redeploying an earlier version of a GPO, see Roll Back to an Earlier Version of a GPO.
A user account with the Approver or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.
To deploy a GPO to the production environment
In the Group Policy Management Console tree, click Change Control in the forest and domain in which you want to manage GPOs.
On the Contents tab, click the Controlled tab to display the controlled GPOs.
Right-click the GPO to be deployed and then click Deploy.
To review links to the GPO, click Advanced. Pause the mouse pointer on an item in the tree to display details.
By default, all links to the GPO will be restored.
To prevent a link from being restored, clear the check box for that link.
To prevent all links from being restored, clear the Restore Links check box in the Deploy GPO dialog box.
Click Yes. When the Progress window indicates that overall progress is complete, click Close.
To verify whether the most recent version of a GPO has been deployed, on the Controlled tab, double-click the GPO to display its History. In the History for the GPO, the State column indicates whether a GPO has been deployed.
- By default, you must be an Approver or an AGPM Administrator (Full Control) to perform this procedure. Specifically, you must have List Contents and Deploy GPO permissions for the GPO.