AGPM 4.0 provides IT with the flexibility to customize GPO access to fit the needs of their organization. This technology provides a much richer level of PC manageability and enables IT to lock the desktop down, especially when used in conjunction with Microsoft Application Virtualization. Microsoft AGPM also provides a workflow process for offline GPO creation that integrates role-based delegation of Group Policy before deployment to a live environment. AGPM also enables change control processes over GPOs, allowing IT to track version history, authorize change requests and require deployment approval. Features such as difference reporting and audit logging allow for greater supervision of GPO creation and editing. AGPM also has a built in recycle bin and versioning features, allowing administrators to recover deleted items and revert improperly edited GPO’s to a known good configuration.