Enhancement - Attestation timer needs alternate mechanism and report for those overdue
说明
Attestation currently keys of X days, weeks, months, etc. from when a policy is last deployed. In our plant, most policies remain static for a year but we need policy owners to attest that they still need their polices. These policy owners will get the attestation email and their only course of action is to do a deployment (to reset the attestation counter) however, they won't have any updates to deploy. Additionally, as system admins, we cannot see which policies are due for attestation as no report exists. Suggest two updates:
Part 1- Add option to attestation email with "I attest " button ( with comments ) that would be captured by GPOAdmin. Add to 'Action Type' in history report a data set called "Attestation" which would be populated with date attested (or date deployed). The Attestation email mechanism would trigger on that. When the policy trustee attests, the date is updated, thus providing an alternative to deployment.
Part 2 - As part of the same ask, there should be a report for those policies that have exceeded the attestation time limit. Currently, policy owners get an email but the GPOAdmin system owners had no such view.
解决办法
Enhancement request number VSTS000391418 has been submitted to Development for consideration in a future release of GPOADmin.
