On Premise vs. PolicyPak Cloud FAQ

One of the key features of PolicyPak products is their flexibility. They are designed to fit in with your systems, your workflow, and your existing infrastructure.

The same applies to delivery methods: PolicyPak offers flexibility in how you deliver your settings to the desktops and applications that need managing.

There are two editions of PolicyPak Suite. What’s the difference?

First off, both the On-Prem Edition and the Cloud Edition of the PolicyPak Suite contain the same components.

These components can deliver, enforce and lock down exactly the same types of settings with either Suite:

  • Application settings Policies,
  • Admin Template Policies,
  • Group Policy Preferences,
  • Security Policies,
  • MDM Settings Policies, or
  • Browser Router settings

The major difference between the Suites is their delivery methods: how they deliver directives (PolicyPak settings like Applications and Browser Router settings and Microsoft Group Policy settings) to your target machines. That also means they differ slightly in functionality too.

Your choice of Suite will depend on what kind of computers you’re managing, where they are located, and if you already have a current systems management system in place.

All my computers are domain-joined. What’s best for me?

If all the computers you’re working with are domain-joined, PolicyPak Suite (On-Prem Edition) is best for you.

This works with your existing Active Directory and however you currently deliver settings. You can deliver settings for:

  • Application settings Policies,
  • Admin Template Policies,
  • Group Policy Preferences,
  • Security Policies,
  • MDM Settings Policies, and/or
  • Browser Router settings

…using Group Policy, SCCM, LanDesk, KACE, Altiris, Tivoli, etc.

On-premise settings delivery is best for organizations with:

  • Mostly domain-joined machines
  • Few traveling systems
  • No need to manage non-domain-joined systems

What happens if my domain-joined machine travels or goes offline?

The components in PolicyPak Suite keep enforcing compliance … even if a user’s computer goes offline.

So if a user tries to work around your changes – whether you’re locking down:

  • Application settings Policies,
  • Admin Template Policies,
  • Group Policy Preferences,
  • Security Policies,
  • MDM Settings Policies, and/or
  • Browser Router settings

… PolicyPak Suite is always working for you.

That way, your applications and operating systems stay compliant, both on and off your network.

I have lots of non-domain-joined computers. What’s best for me?

If you’re a Managed Service Provider, or someone who has to maintain a lot of remote or non-domain-joined machines, PolicyPak Suite (Cloud Edition) is best for you.

The PolicyPak Cloud delivery mechanism will allow you to deliver, update, enforce and remediate the whole range of PolicyPak Suite settings over the internet – wherever your machines are located, allowing you to deliver settings for:

  • Application settings Policies,
  • Admin Template Policies,
  • Group Policy Preferences,
  • Security Policies,
  • MDM Settings Policies, and/or
  • Browser Router settings

I have both domain-joined and non-domained computers. What’s best for me?

The PolicyPak Cloud delivery system allows you to deliver settings both to computers within your domain and also computers which are not joined to your domain.

So, if you have both types of computers, PolicyPak Suite (Cloud Edition) is likely best for you (but, see next FAQ as well for the full picture).

PolicyPak Cloud works to deliver settings to your applications and desktops via its own remote cloud servers. This includes any remotely connected machines as well as domain joined machines.

You can deliver settings to domain joined users (when traveling), domain joined machines (on-premise), and also non-domain joined machines.

PolicyPak Cloud is best for organizations which:

  • Have both domain joined and non-domain joined machines
  • Have users who travel with laptops and tablets
  • want a central way to deliver settings across a distributed network

I have a mix of domain-joined and non-domained machines – can I license both Editions of the Suite?

Absolutely. We’ve designed our two editions with that kind of flexibility in mind.

You can license the On-Prem Edition of the Suite to deliver settings to your domain-joined machines, and then separately license the Cloud Edition to handle your remote and/or non-domain joined machines.

PolicyPak Suite has been designed to give you maximum flexibility in delivering and enforcing settings across your machines.

Can I use both PolicyPak On-Prem mode and PolicyPak Cloud simultaneously? Do they work together?

PolicyPak On-Prem mode and PolicyPak Cloud have been designed to play nicely together.

In fact, when you purchase a PolicyPak Cloud license, you automatically get a PolicyPak On-Prem license.

Therefore, you can use either the PolicyPak Cloud to deliver your setting and/or, say, Group Policy or SCCM to deliver your setting.

All policies are simply merged together. If there’s a conflict, the on-premise directive (say, using Group Policy) wins.

What happens if computers go offline?

Computers go offline for any number of reasons: loss of connection, being taken off site, airplanes, customer sites, and so on.

Without PolicyPak products, you’re immediately out of compliance. If a computer cannot connect to your on-premise Active Directory, a user can make changes and there’s no way to return it back into in compliance.

With PolicyPak products, your computers are always in compliance. It doesn’t matter if you deliver PolicyPak settings via your own On-Prem Active Directory or via PolicyPak Cloud.

When a user’s computer goes offline, your machine will stay compliant thanks to PolicyPak.

Key Features
on-premise-vs-policypak-cloud-faq-8
on-premise-vs-policypak-cloud-faq-9
Settings delivery
To manage applications settings using:
on-premise-vs-policypak-cloud-faq-10

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
Group Policy Admin Templates using:
on-premise-vs-policypak-cloud-faq-11

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
Group Policy Preferences using:
on-premise-vs-policypak-cloud-faq-12

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
Group Policy Security settings using:
on-premise-vs-policypak-cloud-faq-13

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
Browser Router settings using:
on-premise-vs-policypak-cloud-faq-14

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
File Associations Manager Settings using:
on-premise-vs-policypak-cloud-faq-15

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
Least Privilege Manager Settings using:
on-premise-vs-policypak-cloud-faq-16

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
Java Rules Manager Settings using:
on-premise-vs-policypak-cloud-faq-17

PPOP + Your MDM Service

Via GPO / SCCM / Intune / other

Via PolicyPak Cloud
Settings delivery to domain-joined machines
Settings delivery to non-domain-joined machines
Compliance retained if machine goes offline