PolicyPak Blog

Windows 10 = Windows Vista + 4.

People are asking me “OMG.. as an IT Pro, will I have to learn a whole new world with Windows 10?” While it’s true that Windows 10 isn’t out yet, I can more or less say the following with a straight face: “Windows 10 is really Windows Vista with some spit and polish, just like…[Read more]


Firefox updates and PolicyPak STIGs

1. Firefox updates: Available now. If you have rolled out PolicyPak CSE 712, there are two “hidden” features which are already there, but the Firefox Pak itself wasn’t ready until now. So, available now are the following two added features to Firefox: Managing Bookmarks Managing Pop-Ups and Permissions You can see the two how-to videos…[Read more]


Weekly Support FAQs for week ending Feb 14, 2014

Q: I am testing PolicyPak. What are my best first steps? A: We always recommend new customers and evaluators, to “Walk before they run” with PolicyPak. We strongly recommend you to go through first 30 pages of the PolicyPak Application Manager QuickStart guide. This will walk you through to get WinZip 14 up and running…[Read more]


Weekly Support FAQs

This is a list of Qs and As for the last week or so at PolicyPak support. Hope this is helpful. Q: I am having issues in disabling “Check for Updates Automatically” in Updates tab for Java 7 update 51 using the Pak I downloaded. I had this working fine with the Java 7 update…[Read more]


UE-V 2.0 Group Policy Settings Suggestions

I recently upgraded our PolicyPak test lab with UE-V 2.0 from UE-V 1.0. To be sure, there’s really no “upgrade” process. Some snags I ran into: I figured doing an in-place upgrade from UE-V 1.0 agent to UE-V 2.0 agent would magically upgrade, remove the original UE-V 1.0 agent and keep going. Um.. Sort of.…[Read more]


Microsoft Server 2012 VDI and PolicyPak (or, lessons learned when shooting the video)

The last several days I decided to spin up Microsoft’s VDI solution which is greatly improved on Server 2012. The goal was to show how PolicyPak can deliver, lockdown and enforce application settings within Microsoft’s VDI. I knew it could — I just wanted to make my own video about it. The final video is…[Read more]


How to teach Windows to make your applications run more securely using EMET

In short, EMET is the “Enhanced Mitigation Experience Toolkit” (thanks Microsoft for all the fun names!). Basically, here’s the deal in a nutshell: Application vendors don’t always turn on enhanced security when they’re compiling their applications. Good news: You can force Windows to turn on enhanced application security — for executions themselves. Note: This does…[Read more]


How to change the proxy server for Firefox (or IE, etc) on the fly — even when users are offline.

This is a common problem: Users are in the office, and they’re supposed to get one proxy server. They go home or on the road .. you want them to drop the in-house one, and pick up another / none. How are you going to do that ? With PolicyPak.. Easy. Here’s the how-to video.…[Read more]


Why does Internet Explorer Maintenance go away when IE 10 is installed? (And what can I do about it?)

We’ve been POUNDED with questions about Internet Explorer maintenance questions lately. Some people have discovered that when: 1. YOU (yes YOU) install Internet Explorer 10 on your Windows 7 machine … -or- 1b. YOU (yes YOU) use Windows 8 machine which is pre-loaded with IE 10 … Then … 2. You (yes YOU) lose the…[Read more]


Group Policy ADM/X: Myths and Facts – What Microsoft Never Told you (and you need to know)

A lot of times people ask me: “Jeremy, when I use ADMX files, I find that it seems to work for a while, then just ‘stop’ working. Have you seen this?” Or, another way people ask me is: “I want to ensure my users settings are locked down, so I created an ADMX file. But…[Read more]


Exactly HOW are you going to turn off Java NOW in your enterprise?

When the Department of Homeland security suggests that we temporarily disable Java until the dust settles (http://www.us-cert.gov/current/#us_cert_releases_oracle_java) , it’s nice to know that all PolicyPak customers have the fire extinguisher ready to rock at any time. Here’s exactly how to use PolicyPak to put out the Java fire: How to Manage the security slider in…[Read more]


Why does PolicyPak licensing ask “Who am I?” and “Where do I want to use it?”

Let’s jump to the end of the story and take a look at what the License Tool generates when you’re making a license request. There’s always two items: “Scope” and “SOM_name”. There’s always just one scope and there could be several SOM_Names. “Scope” means: Where you might ever possibly use PolicyPak. Typically, this is (and…[Read more]


How App-V Handles Group Policy And Group Policy Preferences

Understanding AppV’s interaction with Group Policy has always been a little challenging. There isn’t a lot of documentation on this, but there have been some blog entries from Microsoft. For instance, I have read, read, and re-read this Microsoft blog entry which describes how AppV does or doesn’t embrace Group Policy directives. It basically says…[Read more]