Hi - I'm in the process of deploying AGPM 4.0 SP2 in a 2008R2/Win7 Ent environment, using "least privilege" scenario as described here:
http://blogs.technet.com/b/askds/archive/2008/12/16/agpm-least-privilege-scenario.aspx
This is a new install. I installed the AGPM server on a non-DC 2008R2 member server. I also added Group Policy MMC & AGPM client to this server, and everything works fine & as-expected from an RDP session on this server.
On our Win7 Ent desktops, we have the RSAT tools, and the AGPM client. At first, all of the buttons were grayed out in "Change Control," even for the AGPM Admins role group members, but the same userid's could RDP to the AGPM server and all functionality was available. There was no dropped traffic logged by our network or host-based firewalls. Somehow this part resolved it itself.
Now, when someone who has Reviewer,Editor permissions tries to deploy a controlled GPO from their Win7 Ent desktop, we just get a pop-up titled "Deploy GPO" and message "Are you sure you want to deploy the selected GPOs?". There is a "Restore Links" checkbox & an Advanced button that are grayed out. But Yes & No buttons are available. I hit Yes, the "AGPM Progress" window comes up, and Status goes to "1 actions could not be processed." And nothing happens. I've rebooted the workstation & tried again - same result.
When I attempt this same deployment, via same userid, from the AGPM server, I get a "Submit Deploy Request" window that sends an email to the address configured, and moves the GPO to the Pending tab.
I should note that I logon to my Win7 workstation with my non-privileged account, and right-click "run as administrator" on Group Policy Management, but when I RDP to the server, I logon with my privileged account directly.
I am not seeing any dropped network traffic at all. Any ideas of what could be going wrong? Thanks!