Choosing the right edition for your organization

FAQ – Comparing the differences between PolicyPak Group Policy, Cloud, and MDM Editions

One of the key features of PolicyPak products is their flexibility. They are designed to fit in with your systems, your workflow, and your existing infrastructure.

The same applies to delivery methods: PolicyPak offers flexibility in how you deliver your settings to the desktops and applications that need managing.

Similarities between the three PolicyPak Editions

First off, both PolicyPak Group Policy, Cloud & MDM Edition contain the same components

These components can deliver, enforce and lock down exactly the same types of settings with either Suite such as:

  • Application settings Policies,
  • Admin Templates Policies,
  • Group Policy Preferences,
  • Security Policies,
  • Browser Router policies
  • Least Privilege policies
  • Java Rules policies
  • File association preferences
  • Start Screen and Taskbar preferences
  • Running ON/OFF scripts

and more !

Your choice of will depend on what kind of computers you’re managing, where they are located, and if you already have a current systems management system in place

PolicyPak Group Policy Edition PolicyPak Cloud Edition PolicyPak MDM Edition
Application Manager, a PolicyPak component
Admin Template Manager, a PolicyPak component
Preferences Manager, a PolicyPak component
Security Settings Manager, a PolicyPak component
Browser Router, a PolicyPak component
Least Privilege Manager, a PolicyPak component
Java Rules Manager, a PolicyPak component
File Association Manager, a PolicyPak component
Start Screen & Taskbar Manager, a PolicyPak component
Script Manager, a PolicyPak component

All (or most) of my computers are domain-joined. What’s best for me?

If all or most the computers you’re working with are domain-joined, PolicyPak Group Policy Edition is best for you.

PolicyPak works with your existing Active Directory and however you currently deliver settings.

So if you use Group Policy, SCCM, Altiris, KACE, Tivoli, or some other delivery method you already love, then PolicyPak Group Policy Edition is for you.

And, if you have a handful of non-domain joined machines, then you have two options:

  • If you have an MDM service, just use PolicyPak MDM Edition to manage your handful of non-domain joined machines
  • If you have NO MDM service, then use PolicyPak Cloud Edition to manage you handful of non-domain joined machines

All (or most) of my machines are non-domain-joined computers. What’s best for me?

If you’re a Managed Service Provider, or someone who has to maintain a lot of remote or non-domain-joined machines, PolicyPak Cloud Edition is best for you.

That being said, if you are already invested in an MDM service (like Airwatch, Intune or MobileIron) and want to deliver settings to those non-domain joined machines, then you can use PolicyPak MDM Edition.

Either choice enables you to deliver, update, enforce and remediate the whole range of PolicyPak Suite settings AND real Microsoft Group Policy settings over the internet – wherever your non-domain-joined machines are located. If you currently have some domain-joined machines or might have in the future, both editions will support those as well.

Whcich PolicyPak version supports which features?

Key Features
PolicyPak Group Policy Edition
PolicyPak Cloud Edition
PolicyPak MDM Edition
Settings delivery
Settings delivery to domain-joined machines
Settings delivery to non-domain-joined machines
Compliance retained if machine goes offline
Delivers settings via GPO
Delivers settings via PolicyPak Cloud
Delivers settings via SCCM, and other on-prem tools
Delivers settings via MDM

Can PolicyPak Group Policy & MDM and/or PolicyPak Cloud Edition be used simultaneously?

Yes.

PolicyPak Group Policy, MDM and PolicyPak Cloud work together perfectly.

As seen in the graphic, policies are targeted specifically, or, are simply merged together. If there’s a conflict, the on-prem directive (say, using Group Policy) wins.

Bonus: when you purchase a PolicyPak Cloud license, you automatically get a PolicyPak Group Policy license. Therefore, you can use either the PolicyPak Cloud to deliver your setting and/or, say, Group Policy or SCCM to deliver your setting (after the computer has consumed a PolicyPak Cloud license).

Which version is right for me?

PolicyPak has three editions: Group Policy, MDM and Cloud. Which one is right for you? Or maybe MORE than one version is right for you. Watch this video to learn about the differences between the versions and walk away knowing which one(s) you should trial.

PolicyPak Group Policy & MDM vs PolicyPak Cloud Decision Tree

PolicyPak On-Prem & MDM vs PolicyPak Cloud  Decision Tree

Use this decision tree to help you decide on how you should license PolicyPak: PolicyPak Group Policy method, PolicyPak MDM method, PolicyPak Cloud or a combination.

What happens if computers go offline?

Computers go offline for any number of reasons: loss of connection, being taken off site, airplanes, customer sites, and so on.

Without PolicyPak, you’re immediately out of compliance. If a computer cannot connect to your On-Premise Active Directory or MDM service, it will no longer be in compliance with your directives.

With PolicyPak, your computers are always in compliance. It doesn’t matter if you deliver PolicyPak settings via your own On-Prem Active Directory, your MDM service, or via PolicyPak Cloud.

When a user’s computer goes offline, your machine will stay compliant thanks to PolicyPak.

How settings get delivered in different components of PolicyPak

Key Features
PolicyPak Group Policy Edition
PolicyPak Cloud Edition
PolicyPak MDM Edition
Settings delivery
To manage applications settings using:
Application Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
Group Policy Admin Templates using:
Admin Template Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
Group Policy Preferences using:
Preferences Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
Group Policy Security settings using:
Security Settings Manager, a PolicyPak component0

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
Browser Router settings using:
Browser Router, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
File Associations Manager Settings using: *
File Association Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
Least Privilege Manager Settings using:
Least Privilege Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
Java Rules Manager Settings using:
Java Rules Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
Start Screen Manager Settings using:
Start Screen & Taskbar Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
PolicyPak Scripts Manager Settings using:
Script Manager, a PolicyPak component

Via GPO / SCCM / other

Via Your MDM Service
(Airwatch, Intune, MobileIron)
*    This component only operates when endpoint is domain joined