Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
7d3006b
Reorg up to all files up to all things licensing video center
corbin-anderson-netwrix Jul 10, 2025
753e6b9
update
AdaOrdace Jul 11, 2025
89a1f8e
Revert "update"
AdaOrdace Jul 11, 2025
398056c
update
AdaOrdace Jul 11, 2025
cd10e8c
update
AdaOrdace Jul 11, 2025
a7ef439
update
AdaOrdace Jul 11, 2025
001ba64
Reorg up to getting started with cloud
corbin-anderson-netwrix Jul 14, 2025
d396f7a
Getting Started with Cloud folder
stuart-jaeckel-netwrix Jul 15, 2025
4714026
Installation folder
stuart-jaeckel-netwrix Jul 15, 2025
6d48876
Getting Started with Group Policy folder
stuart-jaeckel-netwrix Jul 15, 2025
9069db3
Getting Started MDM folder
stuart-jaeckel-netwrix Jul 15, 2025
0028c69
GPO Export Merge folder
stuart-jaeckel-netwrix Jul 15, 2025
025625d
File Associations Manager folder
stuart-jaeckel-netwrix Jul 15, 2025
92eca12
Browser Router folder
stuart-jaeckel-netwrix Jul 15, 2025
e9d2ee5
Least Privilege Manager folder
stuart-jaeckel-netwrix Jul 15, 2025
bc26255
Device and Network Manager folders
stuart-jaeckel-netwrix Jul 15, 2025
10c3a8e
Java folder
stuart-jaeckel-netwrix Jul 15, 2025
4292af7
startscreen taskbar folder
stuart-jaeckel-netwrix Jul 15, 2025
68a81fb
scriptstriggers and featuremanager folders
stuart-jaeckel-netwrix Jul 15, 2025
5fb11e3
remote work delivery and rdp folders
stuart-jaeckel-netwrix Jul 15, 2025
a5ab7ad
software package folder
stuart-jaeckel-netwrix Jul 15, 2025
3db7e41
application manager folder
stuart-jaeckel-netwrix Jul 16, 2025
f572216
gp compliance and archive folders
stuart-jaeckel-netwrix Jul 16, 2025
a1f315e
cleanup
stuart-jaeckel-netwrix Jul 16, 2025
357f580
fix link issues
stuart-jaeckel-netwrix Jul 16, 2025
ceb9123
Final reorg updates
corbin-anderson-netwrix Jul 16, 2025
102756e
Updated root index.md file
corbin-anderson-netwrix Jul 16, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Endpoint Policy Manager Support and Resources"
description: "Endpoint Policy Manager Support and Resources"
sidebar_position: 10
sidebar_position: 3
---

# Endpoint Policy Manager Support and Resources
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Getting Started"
description: "Getting Started"
sidebar_position: 10
sidebar_position: 2
---

# Getting Started
Expand Down Expand Up @@ -95,22 +95,22 @@ the following:

**Step 1 –** Request a license and send that key to Sales for processing. You can watch a video on
how to request a license at the following link:
[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/video/license/licenserequestkey.md).
[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md).

**Step 2 –** Receive a license and install it. You can watch a video on how to install the license
you receive at the following
link:[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/video/license/installuniversal.md).
link:[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md).

## Get Started with the GPO Method

Most customers want to use Endpoint Policy Manager with Group Policy. You can watch the getting
started video on how to install and run some initial tests at the following link:
[Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/video/grouppolicy/gettingstarted.md).
[Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/gettingstartedv.md).

## GetStarted with the Endpoint Policy Manager Cloud Method

If you want to get started right away with Endpoint Policy Manager Cloud, watch this video for a
quick overview: [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/video/cloud/quickstart.md).
quick overview: [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md).

## Get Started with Your MDM Provider or UEM Tool

Expand All @@ -120,7 +120,7 @@ of the videos at the links below in order to get prepared to use Endpoint Policy
MDM provider.

- For video overviews of using Endpoint Policy Manager with an MDM service see: Getting Started with
MDM > [Video Learning Center](/docs/endpointpolicymanager/video/index.md).
MDM > [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md).
- For video overviews of using Endpoint Policy Manager with a UEM tool like SCCM see: Getting
Started with Endpoint Policy Manager (Misc) >
[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md).
43 changes: 18 additions & 25 deletions docs/endpointpolicymanager/index.md
Original file line number Diff line number Diff line change
@@ -1,25 +1,18 @@
# Netwrix PolicyPak

> **Enterprise endpoint management and configuration control**

Netwrix PolicyPak provides granular control over Windows desktops and applications, enabling IT teams to enforce security policies, manage application settings, and ensure compliance across all endpoints. Manage configurations that Group Policy can't touch and lock down settings users shouldn't change.

## Key Features

- **Application Management** — Control and lock down settings for over 1000 applications
- **Browser Management** — Enforce security settings across all major browsers
- **Security Enforcement** — Implement least privilege and application control policies
- **Desktop Lockdown** — Prevent unauthorized changes to system settings

## Benefits

- Reduce security incidents by enforcing consistent configurations
- Eliminate configuration drift across endpoints
- Decrease help desk tickets by preventing user-caused issues
- Ensure compliance with security policies and standards

```mdx-code-block
import DocCardList from '@theme/DocCardList';

<DocCardList />
```
---
title: "Netwrix Endpoint Policy Manager (formerly PolicyPak) Documentation"
description: "Netwrix Endpoint Policy Manager (formerly PolicyPak) Documentation"
sidebar_position: 1
---

# Netwrix Endpoint Policy Manager (formerly PolicyPak) Documentation

Netwrix Endpoint Policy Manager (formerly PolicyPak) allows you to secure end users wherever they
work and make them more productive with Netwrix endpoint management software.

In today's hybrid work environment, users need to access their desktops, laptops and other devices
at the office, at home, while traveling, through kiosks and virtually. But many organizations are
struggling to manage and secure their IT ecosystem because not all Windows endpoint management
software systems were designed for modern distributed scenarios. Netwrix Endpoint Policy Manager
(formerly PolicyPak) enables you to solve your endpoint management and endpoint protection
challenges wherever users get work done, modernizing and extending the power of your existing
enterprise technology assets.
Original file line number Diff line number Diff line change
Expand Up @@ -12,4 +12,4 @@ domain controllers within your network called "PolicPak". Then copy the Endpoint
files that currently reside in your local storage and paste them into that folder.

Here is the how-to video:
[Working with Others and using the Central Store](/docs/endpointpolicymanager/video/applicationsettings/centralstorework.md)
[Working with Others and using the Central Store](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md)
Original file line number Diff line number Diff line change
Expand Up @@ -83,4 +83,4 @@ articles.
Reference Article

- [How to use Scripts Manager to workaround the "PPAppLockdr64.dll is either not designed to run on Windows or it contains an error" message when running Microsoft Remote Assistance (MSRA.exe) and the Endpoint Policy Manager CSE is installed on Windows 10 1903](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftremoteassistance.md)
- [Deploy any script via the Cloud to domain joined and non-domain joined machines](/docs/endpointpolicymanager/video/scriptstriggers/gettingstarted/cloud.md)
- [Deploy any script via the Cloud to domain joined and non-domain joined machines](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/cloud.md)
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ See the following Knowledge Base articles for Application Manager.

## Central Store and Sharing

- [Can I store the DLL extensions in a central location AND locally on the machine I create my Paks on and if so which one is utilized?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoreandshari/dllstorage.md)
- [Can I store the DLL extensions in a central location AND locally on the machine I create my Paks on and if so which one is utilized?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoresharing/dllstorage.md)

## PreConfigured AppSets

Expand Down Expand Up @@ -100,12 +100,12 @@ See the following Knowledge Base articles for Application Manager.

## Virtualized Applications

- [Do I need to do anything special to get Application Manager to deploy settings to Microsoft App-V Sequences?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplicati/appvsequences.md)
- [A ThinApp throws an "Exception Error". What can I do to fix it?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplicati/exception.md)
- [Which application virtualization platforms are supported?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplicati/applicationvirtualization.md)
- [How can I manage a version of Java inside a ThinApp package ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplicati/thinapp.md)
- [Are there any additional steps required to integrate Endpoint Policy Manager Software with XenAPP applications?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplicati/xenapp.md)
- [Can Endpoint Policy Manager deliver settings for applications that are provided by XenAPP?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplicati/xenapp_1.md)
- [Do I need to do anything special to get Application Manager to deploy settings to Microsoft App-V Sequences?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/appvsequences.md)
- [A ThinApp throws an "Exception Error". What can I do to fix it?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/exception.md)
- [Which application virtualization platforms are supported?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/applicationvirtualization.md)
- [How can I manage a version of Java inside a ThinApp package ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/thinapp.md)
- [Are there any additional steps required to integrate Endpoint Policy Manager Software with XenAPP applications?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp.md)
- [Can Endpoint Policy Manager deliver settings for applications that are provided by XenAPP?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp_1.md)

## Design Studio

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,4 @@ sidebar_position: 160

Yes. Here is a videos to demonstrate that.

[Manage Firefox Add-ons using Group Policy](/docs/endpointpolicymanager/video/applicationsettings/firefox/addons.md)
[Manage Firefox Add-ons using Group Policy](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/addons.md)
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,4 @@ sidebar_position: 320

Yes. Here is a videos to demonstrate that.

[Manage IE Programs Tab](/docs/endpointpolicymanager/video/applicationsettings/internetexplorer/programstab.md)
[Manage IE Programs Tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/programstab.md)
Original file line number Diff line number Diff line change
Expand Up @@ -30,4 +30,4 @@ You might want to do this for several reasons:

For a video expressing how to bypass Internal ILT, see:

[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/video/applicationsettings/itemleveltargetingbypass.md)
[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md)
Original file line number Diff line number Diff line change
Expand Up @@ -12,4 +12,4 @@ setting Chrome at the same time.

Here's the how-to video in using the IE + Certs features (again, which should also set Chrome too):

[Manage IE Certificates](/docs/endpointpolicymanager/video/applicationsettings/internetexplorer/certificates.md)
[Manage IE Certificates](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/certificates.md)
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,4 @@ sidebar_position: 330

Yes, Here is a videos to demonstrate that.

[Manage IE Certificates](/docs/endpointpolicymanager/video/applicationsettings/internetexplorer/certificates.md)
[Manage IE Certificates](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/certificates.md)
Original file line number Diff line number Diff line change
Expand Up @@ -17,4 +17,4 @@ specific.

See this video to bypass the ILT:

[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/video/applicationsettings/itemleveltargetingbypass.md)
[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md)
Original file line number Diff line number Diff line change
Expand Up @@ -20,4 +20,4 @@ setting by disabling the internal item-level targeting.

To see a demonstration video about Internal Filters and bypassing them, please see this

[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/video/applicationsettings/itemleveltargetingbypass.md)
[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md)
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,11 @@ Tip: To see a video of FireFox UI lockout in action, see the following video:

Tip: To see a video of Thunderbird UI lockout in action, see the following video:

[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/video/applicationsettings/thunderbird.md)
[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/thunderbird.md)

Tip: To see a video of Java UI lockout in action, see the following video:

[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/video/applicationsettings/thunderbird.md)
[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/thunderbird.md)

Specifically, to perform UI lockout of FireFox, Thunderbird and Java, the GPO must be linked such
that the computer is affected. Said another way, you cannot perform UI lockdown on FireFox,
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,4 +13,4 @@ Explorer.

See this video for more details, which will also set the Chrome Pak:

[Manage IE Connections tab](/docs/endpointpolicymanager/video/applicationsettings/internetexplorer/connectionstab.md)
[Manage IE Connections tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/connectionstab.md)
Original file line number Diff line number Diff line change
Expand Up @@ -87,7 +87,7 @@ you must open each Group Policy Object one by one and manually look for FF23 App

Overview of using the Endpoint Policy Manager PowerShell cmdlets to discover Endpoint Policy Manager
data within GPOs see the
[Endpoint Policy Manager User PowerShell to find all Endpoint Policy Manager GPOs](/docs/endpointpolicymanager/video/troubleshooting/powershell.md)
[Endpoint Policy Manager User PowerShell to find all Endpoint Policy Manager GPOs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/powershell.md)
topic for additional information.

![939_1_image-20231101213809-1_950x372](/img/product_docs/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_1_image-20231101213809-1_950x372.webp)
Expand Down Expand Up @@ -121,7 +121,7 @@ regards to your settings.
### Back Up 2: Backing up the Group Policy Object (or all GPOs.)

For backing up the GPO or all GPOs see the
[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/video/troubleshooting/backup.md)
[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md)
topic for additional information.

### Back up 3: Export the settings for each FF23 AppSet you already have.
Expand All @@ -148,7 +148,7 @@ The file you are looking for is PP-Firefox23.DLL which is likely in one of three
- SYSVOL (replicated to other domain controllers)\
`C:\Windows\SYSVOL\sysvol\fabrikam.com\Policies\PolicyPak `
- A share. (Tip: To locate the share you could be using see the
[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/video/applicationsettings/shares.md)[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/video/applicationsettings/shares.md))
[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md)[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md))

So, in summary, before leaving this section and continuing onward, again we advise that you:

Expand Down Expand Up @@ -197,7 +197,7 @@ to ON.

This is different than "Predefined Targeting". To understand the difference between ILT and
Predefined Targeting see the
[Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/video/applicationsettings/designstudio/itemleveltargeting.md)
[Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/itemleveltargeting.md)
topic for additional information.

### Optional: Testing the ILT Filters on FF23 using the Endpoint Policy Manager Item Level Targeting Validation Tool
Expand All @@ -206,7 +206,7 @@ Tip: You can also export the FF 23 settings to XMLdata File format and use part
verify the Item Level Targeting will evaluate to TRUE or FALSE. To do this, right-click the entry
and select Export settings to XMLData file and save the file. Then use the Endpoint Policy Manager
Item Level Targeting Validation tool to test how ILT will operate. See the
[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/video/troubleshooting/itemleveltargeting.md)
[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md)
topic for additional information.

**NOTE:** You will have to trim the ILT part of the output to eliminate the `<ILTFilters>` at the
Expand All @@ -227,11 +227,11 @@ this. You only need the .DLL file and not the XML file.

Use these instructions to add the AppSet Locally or via Central Store:

[Working with Others and using the Central Store](/docs/endpointpolicymanager/video/applicationsettings/centralstorework.md)
[Working with Others and using the Central Store](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md)

Use these instructions to add the AppSet to a Share:

[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/video/applicationsettings/shares.md)
[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md)

![939_11_image-20231101213809-11_950x492](/img/product_docs/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_11_image-20231101213809-11_950x492.webp)

Expand Down Expand Up @@ -284,7 +284,7 @@ You can also export the FF 115 settings to XMLdata File format and use part of t
the Item Level Targeting will evaluate to TRUE or FALSE. To do this, right-click the entry and
select Export settings to XMLData file and save the file. Then use the Endpoint Policy Manager Item
Level Targeting Validation tool to test how ILT will operate. See the
[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/video/troubleshooting/itemleveltargeting.md)
[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md)
topic for additional information.

Note that you will have to trim the ILT part of the output to eliminate the `<ILTFilters>` at the
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ Remember: Most pre-configured Paks ship with Pre-Defined Item Level Targeting.
- This means the Pak is designed to only affect a specific version of the application.
- You can bypass Internal Item Level Targeting in the Pak.
- Refer to the following video
[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/video/applicationsettings/itemleveltargetingbypass.md)
[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md)
to see how to bypass Internal Item Level Targeting.

**Step 8 –** Did you use BLOCK INHERITENCE to block the Licensing GPO or block the GPO which is
Expand Down
Loading
Loading