Skip to main content

Policies

PolicyPak policies are configurable items which perform work on the endpoint.

note

Policies are also known as components, and that wording may be used interchangeably.

Each policy has a different function, so we are going to briefly explore what these components can do for you. Remember, you may use any of the solution methods to deploy a policy, provided your license enables it.

Application Settings Manager with PolicyPak DesignStudio

PolicyPak Application Settings Manager has over 400 preconfigured AppSets to get you started managing and locking down pesky applications right away.

Many popular applications are available, including Internet Explorer, Teams, Acrobat Reader, Java, Firefox, Office, and more. Additionally, with our PolicyPak DesignStudio, you can design your own Paks for just about any application. With PolicyPak Software, it is easy to configure, manage, and lock down 1, 2, 50, or more in-house or commercial applications. In conjunction with PolicyPak Cloud or your own MDM service, you can deploy PolicyPak Application Settings Manager directives over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: What is PolicyPak Application Manager (Cloud Edition).

Least Privilege Manager

PolicyPak Least Privilege Manager enables your users with standard user rights to get access to applications in situations where they might need local admin privileges.

It will also stop attacks from malware, crypto-malware, etc., and will block any application if it is not installed by an administrator. This is called the PolicyPak LPM SecureRun™ feature. In conjunction with PolicyPak Cloud or your own MDM service, PolicyPak Least Privilege Manager can deploy directives over the Internet, even to non-domain-joined machines.

For more information on this topic, please see this video: Video Learning Center > Privilege Manager.

note

Note that PolicyPak Least Privilege Manager has two versions: Standard and Complete. If a customer is a PolicyPak Enterprise or SaaS customer, they get Least Privilege Manager Complete. If the customer is a PolicyPak Professional customer, they can decide between Least Privilege Manager Standard or Complete. For an overview of the two versions, check out this page: https://www.policypak.com/paks/least-privilege-security-pak/.

Browser Router

PolicyPak Browser Router dictates which browser should open up which web pages for end users.

If you have a specific need to open up Edge, Firefox, Chrome, Internet Explorer, or a custom browser, PolicyPak Browser Router can make it easy. It can also dictate which browser should be the default for websites so the user is not prompted. It can also block access to certain websites (e.g., Facebook) for all browsers. It can also specify Internet Explorer's document and enterprise modes on the fly. In conjunction with PolicyPak Cloud or your own MDM service, you can also deliver these PolicyPak Browser Router settings over the Internet to domain-joined and non-domain-joined machines.

Note: For more information on this topic, please see this video: Video Learning Center > Browser Router

Java Enterprise Rules Manager

PolicyPak Java Enterprise Rules Manager enables you to choose the version of Java that specific websites use or block Java websites entirely, even for remote machines via the cloud.

Making a Java deployment rule set for your enterprise has never been easier or more flexible. In conjunction with PolicyPak Cloud or your own MDM service, PolicyPak Java Enterprise Rules Manager can deploy most Microsoft Security settings to computers over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Video Learning Center > Java Enterprise Rules Manager .

Admin Templates Manager

PolicyPak Admin Templates Manager enables you to deploy any Microsoft setting (or third-party admin template [.admx file]) to either users or computers.

You can also put Group Policy settings into collections and ensure that they are specifically targeted with conditions to users and computers . PolicyPak Admin Templates Manager will enable you to deploy Admin Template items without using Group Policy, by using Microsoft SCCM, Windows Intune, or your own systems management software. In conjunction with PolicyPak Cloud, PolicyPak Admin Templates Manager allows you to deploy any Microsoft Admin Template (or third-party ADMX setting) to computers over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Administrative Templates Manager.

File Associations Manager

PolicyPak File Associations Manager enables you to map specific file extensions (such as .pdf) to specific applications, like Acrobat Reader (standard apps and Windows 10 Universal apps), and handling applications with protocols (such as MAILTO:).

Note: For more information on this topic, please see this video: Video Learning Center > File Associations Manager.

Preferences Manager

PolicyPak Preferences Manager keeps Group Policy Preferences working and compliant, even when the computer goes offline.

It enables you to deploy Group Policy Preference items without using Group Policy. For instance, by using Microsoft SCCM, Windows Intune, or your own systems management software. In conjunction with PolicyPak Cloud or your own MDM service, PolicyPak Preferences Manager deploys Group Policy Preference items over the Internet, even to non-domain-joined machines.

note

The license for this policy is not provided unless specifically requested by the customer when PolicyPak is used with the Group Policy delivery mechanism. For more details on why the license is not automatically provided, please see the following link: Where is my PolicyPak Preferences Component license and how do I request one?.

Note: For more information on this topic, please see this video: Preferences Manager

Security Settings Manager

PolicyPak Security Settings Manager enables you to deploy Group Policy's Security settings without using Group Policy.

You can do this by using Microsoft SCCM, Windows Intune, or your own systems management software. In conjunction with PolicyPak Cloud or your own MDM service, PolicyPak Security Manager can deploy most Microsoft Security settings to computers over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Security Settings Manager.

Start Screen & Taskbar Manager

PolicyPak Start Screen & Taskbar Manager enables you to map specific applications (Win32 and WUP apps) and Edge links to specific Windows 10 Start menu groups.

It gives you granular control to create groups of individual tiles and locks those groups down. Additionally, you can use this component to pin items to the Windows 10 taskbar.

note

You may wish to watch our Quickstart videos of PolicyPak Start Screen & Taskbar Manager: Start Screen & Task Bar Manager > Video Learning Center.

Note: For more information on this topic, please see this video: Video Learning Center > Start Screen & Task Bar Manager

Scripts & Triggers Manager

You can use PolicyPak Scripts & Triggers Manager to automate any task, with a script. You can use triggers to enable the scripts to run at specific times.

In conjunction with PolicyPak Cloud or your own MDM service, you can use scripts to deploy software over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Video Learning Center > Scripts & Triggers Manager.

Remote Work Delivery Manager

You can use PolicyPak Remote Work Delivery Manager to automate the delivery of files from UNC shares or Internet shares, install software, and keep software automatically updated.

In conjunction with PolicyPak Cloud or your own MDM service, you can deploy VPN connections over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Remote Work Delivery Manager > Video Learning Center.

Feature Manager for Windows

PolicyPak Feature Manager lets you select and deselect the Windows features and optional features that best fit the needs of your users.

You can also specify or postpone necessary reboots. In conjunction with PolicyPak Cloud or your own MDM service, PolicyPak Feature Manager for Windows lets you manage the Windows features and options on machines over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Video Learning Center > Feature Manager for Windows .

Remote Desktop Protocol Manager

You can use PolicyPak Remote Desktop Protocol Manager to enable users to remotely connect into existing RDP machines.

In conjunction with PolicyPak Cloud or your own MDM service, you can deploy policies that add or remove .rdp file connections over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Video Learning Center.

Network Security Manager

You can use Network Security Manager to specify which processes and applications can communicate to what IP, web addresses and over what protocols.

Note: For more information on this topic, please see this video: Video Learning Center > Network Security Manager

Software Package Manager

You can use PolicyPak Software Package Manager to add or remove packages from the Microsoft Store.

In conjunction with PolicyPak Cloud or your own MDM service, you can deploy policies which add or remove Microsoft Store application connections over the Internet, even to non-domain-joined machines.

Note: For more information on this topic, please see this video: Video Learning Center > Software Package Manager.