Skip to main content

Licensing Information

Neither the Endpoint Policy Manager GPCR server nor the client (admin console) require a license; but the endpoint does.

NOTE: Watch this video to see how to request a license: How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key".

NOTE: To install the license file received from Endpoint Policy Manager, see the following video: How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM).

Note that since the Endpoint Policy Manager client (admin console) does not need to be licensed, you may run unlimited numbers of it in any organizational unit (OU). The Endpoint Policy Manager client does not have to receive license files in order to work properly.

Licenses and Reporting

Table 1 provides more detail as to what is reported through Endpoint Policy Manager GPCR.

Table 1: GPCR reporting.

If the target (endpoint) computer has…Endpoint Policy Manager GPCR will…
No licenseReturn nothing in the RSOP report
The word "computer" in the nameReport everything: all Endpoint Policy Manager settings, Microsoft Admin Templates settings, Microsoft Group Policy Preferences settings, and Microsoft Security settings A computer acts as if it had a Endpoint Policy Manager GPCR license.
A Endpoint Policy Manager GPCR endpoint licenseReport everything: all Endpoint Policy Manager settings, Microsoft Admin Templates settings, Microsoft Group Policy Preferences settings, and Microsoft Security settings The client machine will be fully licensed.

In order to get Microsoft data (policies, security, and preferences), license all endpoints for Endpoint Policy Manager GPCR reporting. You may also license Endpoint Policy Manager GPCR endpoints if you are not licensed for other Endpoint Policy Manager products. You are not required to purchase other AppSets or policies if you only want to engage in Group Policy reporting via the Endpoint Policy Manager GPCR. To get licensed, run the licensing tool (LT) to generate a license request key (LRK), then send it to Endpoint Policy Manager Sales.

Supported Group Policy Settings for Reporting

Supported and unsupported Group Policy settings within a GPO or test are shown in Table 2.

Table 2: Group Policy supported and unsupported settings.

| Data type | User Policies | Computer Policies | | ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Endpoint Policy Manager settings (all) | gpcr_concepts_and_quickstart_4_17x17 | gpcr_concepts_and_quickstart_4_17x17 | | Group Policy Admin Templates (all ADM(X) templates and settings) | gpcr_concepts_and_quickstart_4_17x17 | gpcr_concepts_and_quickstart_4_17x17 | | Group Policy Security Settings | | | | Windows | Security | | | | Account Policies | Password Policy | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Account Policies | Account Lockout Policy | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Account Policies | Kerberos Policy | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Local Policies | Audit Policy | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Local Policies | User Rights Assignment | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Local Policies | Security Options | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Event log | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Windows Settings | | | | Name resolution policy | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Scripts | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | Policy-based QoS | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Public key policies | gpcr_concepts_and_quickstart_5_15x15 | n/a | | Software restriction policies | gpcr_concepts_and_quickstart_5_15x15 | n/a | | Restricted groups | n/a | gpcr_concepts_and_quickstart_5_15x15 | | System services | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Registry | n/a | gpcr_concepts_and_quickstart_5_15x15 | | File | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Wired network (IEEE 802.3) policies | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Windows firewall with advanced security | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Network list manager policies | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Wireless network (IEEE 802.11) policies | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Network access protection | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Application control policies (Applocker) | n/a | gpcr_concepts_and_quickstart_5_15x15 | | IP security policies on Active Directory | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Advanced audit policy configuration | n/a | gpcr_concepts_and_quickstart_5_15x15 | | Group Policy Preferences (all are supported except those listed below) | gpcr_concepts_and_quickstart_4_17x17 | gpcr_concepts_and_quickstart_4_17x17 | | Group Policy Preference data sources | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | Scheduled tasks (immediate XP, scheduled XP) | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | Power options and scheme (for Windows XP) | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | ODBC data source | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | Folder options | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_4_17x17* | | Start menu (for XP) | n/a | gpcr_concepts_and_quickstart_4_17x17 | | Internet Explorer (5, 6, and 7) | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | Registry collection (special registry item type) | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | Folder redirection | gpcr_concepts_and_quickstart_5_15x15 | n/a | | Internet Explorer maintenance | gpcr_concepts_and_quickstart_5_15x15 | n/a | | Group Policy software install | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 | | Any third-party Group Policy Extension not from Endpoint Policy Manager | gpcr_concepts_and_quickstart_5_15x15 | gpcr_concepts_and_quickstart_5_15x15 |

*File type actions are not in the RSOP and thus show as "missing" in PPGPCR.

NOTE: Endpoint Policy Manager GPCR is licensed per computer; if a particular endpoint is not licensed, it will not return data.

NOTE: It may look like there are more unsupported settings than supported settings. However, the settings that are supported cover the top 90% of tasks that administrators typically do with Group Policy and the unsupported settings cover the bottom 10%. We will be expanding coverage as needed in the future.

Endpoint Policy Manager Sales can send you a working Endpoint Policy Manager GPCR key. To install the key, follow these instructions: How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM).