Portal Release Notes

General & UI Updates

MMC Updates: Now see “what changed” inside a Group Policy Object + Rollback

If your policies change over time, you might be curious what changed. Or if you had a situation requiring a rollback to a particular policy or multiple policies, you would have to use backup/restore to perform a wholesale restore. Now you can view incremental changes to most PolicyPak policies and/or rollback as needed. Video demo.

Standalone Policy Editor: No GPMC? No problem.

New tool in the “Extras” folder allows those without a GPMC to create new PolicyPak Policies, and export to XML or straight to MSI. Useful for those teams which want to walk away from any attachment to GPMC and create policies on standalone machine. Some restrictions (like Item Level Targeting) still apply. Video demo.

Increase compatibility with system level software with Process Exclusions

We already have guidance about how to teach your system-level or Anti-virus software to play nicely with PolicyPak. (Here’s the link.) However, starting with this CSE, you can now go the “other direction” and teach PolicyPak how to skip over and not get entangled with specific processes. Video demo.

PolicyPak Least Privilege Manager

Create Rule from Audit Entry improvements

When using the MMC to “Create Rule from Audit Event” not every field was available. This is fixed. Old UI example here. Improved UI example here.

PolicyPak Device Manager

Email link for users to click on to request device access

Now when Device Manager kicks in, your users can request access via email.Video demo.

PolicyPak for MacOS Updates

Finder Policies now available

This policy type allows you to overcome file permissions in the Finder. The main use case is to enable a user to install a DMG or application installer file without requiring admin rights. Video demo.

Privilege Elevation Policies now available

This policy type allows you to overcome application requests for installations. For instance “helper applications” within Firefox and similar. Video demo.

PolicyPak Cloud Updates

PolicyPak Cloud Client 24.6 now available.

We sent out a special bulletin about this being available. This version has all the latest fixes and attaches your endpoints to the “go forward” backend infrastructure at PolicyPak Cloud. We recommend all new endpoints you join to PolicyPak Cloud use 24.6 and you should start updating your groups to PolicyPak Cloud Client 24.6. Reminder of how to upgrade specific groups in PolicyPak Cloud found here.

Parent Process Filter for PolicyPak Least Privilege Manager UI now available

Last iteration we shipped a new method to tie a PolicyPak Least Privilege Manager rule to a parent process. That UI is now available in PolicyPak Cloud found here.

Misc PolicyPak CSE, MMC and Tools Fixes:

• PolicyPak Package Manager now removes Teams by ID.
• PolicyPak Least Privilege Manager Validation fixing during parsing for Event
  6210s
• PolicyPak Least Privilege Manager Recommends best practices in main editor
  and in Parent Process selector when Signature only is selected.
• Copy / Paste fixed for PolicyPak Scripts editor
• PolicyPak Printers: Fix for “Error: Cannot create shared printer.”
• Lots of other fixes in many other areas.

PolicyPak for MacOS Updates & Fixes:

• Fix for user being prompted twice for credentials to install the app
• Fix for mounting in home path
• Fix for System error when trying to open system setting with Deny policy
• Fix for policies not applying when more than one in queue

PolicyPak Cloud Updates & Fixes

• PolicyPak Cloud Policy Order alongside Enforce is fixed
• Computers (Collected Events) reporting fixed