A practical mapping from MDOP tools to supported options in Microsoft Entra ID, Intune, and Windows.
Updated Jun 19, 2026
Version 2.0Yes, AGPM, a "git for group policy" was (is?) a very useful tool. What does Microsoft offer here for Internet-disconnected environments?
exchange12rocks We don't offer a 1:1 replacement for AGPM. If you have servers that are disconnected and need to use GPO, you can continue using GPO to manage them. You just can't use AGPM to manage the GPO, you'd have to use good ol' Active Directory.
Sorry, Joe, you answer makes no sense: AGPM isn't a tool to manage GPO - AGPM is a version control system for GPO. MS should provide us a modern replacement.
Active Directory is a whole class of large distributed systems: ADDS, ADCS, ADFS. I absolutely don't understand your remark "you'd have to use good ol' Active Directory".