PolicyPak Blog

Managing File Associations: Then (Windows 7) and now (Windows 10) using Group Policy (Part 3 of 3)

In the previous blog entries (Part I and Part II), we explored the new reality of Windows 10: if you install an application it’s extensions are not registered as expected. And we explored how the Group Policy Preferences “Open with” item doesn’t work anymore with Windows 10. So how does PolicyPak File Associations Manager help…[Read more]

Managing File Associations: Then (Windows 7) and now (Windows 10) using Group Policy (Part 2 of 3)

In the previous blog entry, we talked about the “Windows 7 way to manage File Associations using Group Policy Preferences. We also pointed you toward a modern solution from us here at PolicyPak, PolicyPak File Associations Manager which makes this process “Windows 10 friendly.” That being said, if you didn’t have PolicyPak File Associations Manager,…[Read more]

Managing File Associations: Then (Windows 7) and now (Windows 10) using Group Policy (Part 1 of 3)

Have you tried to install an application in Windows 10 lately? If you hand-install it, or install it using SCCM, you might get some annoying things you didn’t bargain for. Seriously: Try this sometime. On Windows 10, hand-install Acrobat Reader, Outlook (or something smaller like Claws Mail), or VLC Media Player. (Or use SCCM, PDQ…[Read more]

Create Java Deployment Rule Sets and manage Java Exception Site lists using PolicyPak

PolicyPak On-Prem and Cloud now closes the loop on one of the hardest problems to solve in the Enterprise: How do you deal with multiple versions of Java? If you have Website ABC with a Java applet that requires Java 7 U 51, and Website DEF with a Java applet that requires Java 8 or…[Read more]

Firefox 49 Enterprise Root Certificate support vs PolicyPak

Firefox 49 is about to be released and when it does, it will have some support for embracing some certificates to machines if you use an Enterprise CA. The details on what is and what is not supported can be found on Mozilla’s website here (https://wiki.mozilla.org/CA:AddRootToFirefox). You can also check out a good blog post…[Read more]

PolicyPak Browser Router: The right browser for the right website.

In your company, your desktop evolves; so you have to evolve.Your desktop now has one, two, three or four (or more!) web browsers in it.If you have any Windows 10 machines out there now, you automatically have two browsers: IE 11 and Edge !Add one or two more browsers, and what do you get? The…[Read more]

Wipe Superfish and Privdog (and other evil certificates) off your network using Group Policy and PolicyPak

Take a quick second and Google / Bing for the words “Privdog” or “Superfish.” In a nutshell, these applications install a certificate, which your computers then trust. Then because of that, the chain of trust is broken, and the bad guys can use that as an attack into your systems. Good news: You can keep…[Read more]

Windows 10 = Windows Vista + 4.

People are asking me “OMG.. as an IT Pro, will I have to learn a whole new world with Windows 10?” While it’s true that Windows 10 isn’t out yet, I can more or less say the following with a straight face: “Windows 10 is really Windows Vista with some spit and polish, just like…[Read more]

Firefox updates and PolicyPak STIGs

1. Firefox updates: Available now. If you have rolled out PolicyPak CSE 712, there are two “hidden” features which are already there, but the Firefox Pak itself wasn’t ready until now. So, available now are the following two added features to Firefox: Managing Bookmarks Managing Pop-Ups and Permissions You can see the two how-to videos…[Read more]

Weekly Support FAQs for week ending Feb 14, 2014

Q: I am testing PolicyPak. What are my best first steps? A: We always recommend new customers and evaluators, to “Walk before they run” with PolicyPak. We strongly recommend you to go through first 30 pages of the PolicyPak Application Manager QuickStart guide. This will walk you through to get WinZip 14 up and running…[Read more]

Weekly Support FAQs

This is a list of Qs and As for the last week or so at PolicyPak support. Hope this is helpful. Q: I am having issues in disabling “Check for Updates Automatically” in Updates tab for Java 7 update 51 using the Pak I downloaded. I had this working fine with the Java 7 update…[Read more]

UE-V 2.0 Group Policy Settings Suggestions

I recently upgraded our PolicyPak test lab with UE-V 2.0 from UE-V 1.0. To be sure, there’s really no “upgrade” process. Some snags I ran into: I figured doing an in-place upgrade from UE-V 1.0 agent to UE-V 2.0 agent would magically upgrade, remove the original UE-V 1.0 agent and keep going. Um.. Sort of.…[Read more]

Microsoft Server 2012 VDI and PolicyPak (or, lessons learned when shooting the video)

The last several days I decided to spin up Microsoft’s VDI solution which is greatly improved on Server 2012. The goal was to show how PolicyPak can deliver, lockdown and enforce application settings within Microsoft’s VDI. I knew it could — I just wanted to make my own video about it. The final video is…[Read more]

How to teach Windows to make your applications run more securely using EMET

In short, EMET is the “Enhanced Mitigation Experience Toolkit” (thanks Microsoft for all the fun names!). Basically, here’s the deal in a nutshell: Application vendors don’t always turn on enhanced security when they’re compiling their applications. Good news: You can force Windows to turn on enhanced application security — for executions themselves. Note: This does…[Read more]

How to change the proxy server for Firefox (or IE, etc) on the fly — even when users are offline.

This is a common problem: Users are in the office, and they’re supposed to get one proxy server. They go home or on the road .. you want them to drop the in-house one, and pick up another / none. How are you going to do that ? With PolicyPak.. Easy. Here’s the how-to video.…[Read more]

Why does Internet Explorer Maintenance go away when IE 10 is installed? (And what can I do about it?)

We’ve been POUNDED with questions about Internet Explorer maintenance questions lately. Some people have discovered that when: 1. YOU (yes YOU) install Internet Explorer 10 on your Windows 7 machine … -or- 1b. YOU (yes YOU) use Windows 8 machine which is pre-loaded with IE 10 … Then … 2. You (yes YOU) lose the…[Read more]

Group Policy ADM/X: Myths and Facts – What Microsoft Never Told you (and you need to know)

A lot of times people ask me: “Jeremy, when I use ADMX files, I find that it seems to work for a while, then just ‘stop’ working. Have you seen this?” Or, another way people ask me is: “I want to ensure my users settings are locked down, so I created an ADMX file. But…[Read more]

Exactly HOW are you going to turn off Java NOW in your enterprise?

When the Department of Homeland security suggests that we temporarily disable Java until the dust settles (http://www.us-cert.gov/current/#us_cert_releases_oracle_java) , it’s nice to know that all PolicyPak customers have the fire extinguisher ready to rock at any time. Here’s exactly how to use PolicyPak to put out the Java fire:

Click here for Video…[Read more]

Why does PolicyPak licensing ask “Who am I?” and “Where do I want to use it?”

Let’s jump to the end of the story and take a look at what the License Tool generates when you’re making a license request. There’s always two items: “Scope” and “SOM_name”. There’s always just one scope and there could be several SOM_Names. “Scope” means: Where you might ever possibly use PolicyPak. Typically, this is (and…[Read more]

How App-V Handles Group Policy And Group Policy Preferences

Understanding AppV’s interaction with Group Policy has always been a little challenging. There isn’t a lot of documentation on this, but there have been some blog entries from Microsoft. For instance, I have read, read, and re-read this Microsoft blog entry which describes how AppV does or doesn’t embrace Group Policy directives. It basically says…[Read more]