How to Migrate GPO History using the Microsoft AGPM Wizard to GPOADmin (4380635)

How to Migrate GPO History using the Microsoft AGPM Wizard to GPOADmin

The AGPM Migration Wizard is designed to simplify the transition from Advanced Group Policy Management (AGPM) to GPOADmin. This tool enables administrators to migrate existing AGPM-controlled GPOs, along with their associated version history, into the GPOADmin environment. By preserving historical data and streamlining the migration process, the wizard helps ensure a smooth shift to GPOADmin’s policy management capabilities.

 

Prerequisites

 

To successfully run the wizard, the user account must have elevated permissions across several components:

• Account type: The wizard must be run by either the service account used by GPOADmin, or user with the System Administrator role in GPOADmin. This ensures the account has full control over GPOADmin operations.
• File system access: Read and Write Access to the GPOADmin installation directory.
• Registry access: Read and Write Access to GPOADmin registry keys. These keys store configuration settings for GPOADmin. The wizard may need to update or verify these settings during migration.
• For SQL Configuration Stores:
  Database access: Read and Write Access to the SQL database. GPOADmin stores GPO history and metadata in a SQL database. Migration involves inserting AGPM history into this database, so full access is required.
• For AD LDS Configuration Stores:
  Administrative access to the Configuration Store.
• For Active Directory Configuration Stores:
  The following permissions applied to This object and all descendant objects on the CN=Quest,CN=Services,CN=Configuration...:
  ▪ List Contents
  ▪ Read all Properties
  ▪ Write all Properties
  ▪ Delete Subtree
  ▪ Read Permissions
  ▪ Modify Permissions
  ▪ Modify Owner,
  ▪ All Validated Writes
  ▪ Create All Child Objects
  ▪ Delete All Child Objects

To transfer GPO history from Microsoft AGPM to GPOADmin:

 

1. Download the attached file "GPOADmin 5.21 AGPM Migration Wizard.zip" and copy the files in the AGPM folder in the Utilities directory of the installation media into the GPOADmin install directory.
2. Launch the AGPM Migration wizard by double-clicking the AGPMMig.exe file.
3. In the AGPM Connection dialog;
   Enter the name or IP address of the AGPM server or browse to locate the server if needed.
   Specify the location of the AGPM archive data. The default path is: C:\ProgramData\Microsoft\AGPM. You may modify this path if your archive is stored elsewhere.
4. Enter the credentials (if needed). Enter the user name and password for an account with full access to AGPM.
   NOTE: User Name and Password are not required if running the AGPM migration wizard as an account that has full access to the AGPM archive.
5. Set the migration identifier. This value will be prepended to any AGPM action comment during migration. Use a meaningful identifier to track migrated actions (e.g., Migration2025_).
6. Click Next.
7. Review the list of GPOs currently checked out in AGPM. These GPOs will not be migrated.
8. Click Next to start the migration.
9. Review the log file and click Finish.
   A timestamped log file is created in the install directory for auditing and troubleshooting.

 

WARNING: The migration wizard does not currently support migration of AGPM if GPOAdmin is running under a GMSA as the service account.  Administrators would need to reconfigure the product to run under a regular AD service account and then switch back to GMSA after the migration is completed if this utility wants to be used for the purpose. The product team is working to update the utility to add support for this in the near future, so please be aware of this utility limitation until an update is available.

GPOADmin 5.21 AGPM Migration Wizard

Best Practices: Ensure you have the correct administrative privileges before starting the migration, double-check the archive path and credentials to avoid access errors, and use a unique migration identifier to distinguish migrated actions from existing ones.