Skip to content
  •  
  •  
  •  
1 change: 0 additions & 1 deletion .vscode/settings.json
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
{
"git.ignoreLimitWarning": true,
]
}
20 changes: 16 additions & 4 deletions docs/endpointpolicymanager/fastest.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,11 @@ If none of the times work for you, contact your Endpoint Policy Manager sales pe
It will help you to quickly understand all the moving parts to Endpoint Policy Manager and it
answers more than 90% of use cases and installation questions.

**_RECOMMENDED:_** Learn about what you already own/what it can do. Sign up for the IT Admin webinar
:::info
Learn about what you already own/what it can do. Sign up for the IT Admin webinar
at: [https://www.endpointpolicymanager.com/demo/](https://www.endpointpolicymanager.com/demo/)
:::


## Verify Logins for Portal and Cloud

Expand All @@ -48,7 +51,10 @@ Login page at Endpoint Policy Manager.com:
- If you are unable to logon as expected as a customer, open a ticket to contact
[Netwrix Support](https://www.netwrix.com/tickets.html#netwrix-support).

**NOTE:** The credentials are not shared or single sign on between Portal and Cloud service.
:::note
The credentials are not shared or single sign on between Portal and Cloud service.
:::


## Quick Start and Implementation Topics

Expand Down Expand Up @@ -93,13 +99,19 @@ way to get oriented on the navigation.

## Get Help from Support

**CAUTION:** Email is no longer monitored at the old support @endpointpolicymanager.com email address.
:::warning
Email is no longer monitored at the old support @endpointpolicymanager.com email address.
:::


To get help during a Trial or as a customer, it is the same motion. Open a ticket to contact
[Netwrix Support](https://www.netwrix.com/tickets.html#netwrix-support).

**NOTE:** The Netwrix ticket portal is another set of credentials and is not related to Endpoint
:::note
The Netwrix ticket portal is another set of credentials and is not related to Endpoint
Policy Manager Portal or Endpoint Policy Manager Cloud.
:::


Reasons to Contact Endpoint Policy Manager Support

Expand Down
5 changes: 4 additions & 1 deletion docs/endpointpolicymanager/gettingstarted.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,9 +19,12 @@ Policy Manager sales associate.

Figure 1. Inside the Endpoint Policy Manager Customer Portal.

**NOTE:** Video: For an overview on how to use the Endpoint Policy Manager Customer Portal and
:::note
Video: For an overview on how to use the Endpoint Policy Manager Customer Portal and
understand subscriptions, please watch the following video:
[https://www.endpointpolicymanager.com/video/endpointpolicymanager-portal-how-to-download-endpointpolicymanager-and-get-free-training.html](https://www.endpointpolicymanager.com/video/endpointpolicymanager-portal-how-to-download-endpointpolicymanager-and-get-free-training.html)
:::


Go to the Download section and select "Download Everything (Bits, Paks, Manuals but not Advice),"
and you will get a ZIP file with manuals. You will also receive the following:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,12 @@ sidebar_position: 20
If you have a situation which required Netwrix Endpoint Policy Manager (formerly PolicyPak) Tech
Support to help you update a AppSet from your own system, these are the instructions.

**NOTE:** To use the Endpoint Policy Manager DesignStudio, you will need the following components
:::note
To use the Endpoint Policy Manager DesignStudio, you will need the following components
pre-installed on your Endpoint Policy Manager Creation Station. The machine you put these components
on should match the END-POINTS you wish to deploy your AppSet to.
:::


It's best if the Endpoint Policy Manager Creation Station is a machine that you can use and re-use
again. We suggest you use a virtual machine loaded with the following components, which you can then
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -32,5 +32,8 @@ Policy Manager AppLock™ should function as expected.
To be safe, you're welcome to fully try out Endpoint Policy Manager Application Manager before you
purchase to make sure it works as expected.

**NOTE:** Endpoint Policy Manager (the company) will not be able to do this for you; but you are
:::note
Endpoint Policy Manager (the company) will not be able to do this for you; but you are
welcome to use the Endpoint Policy Manager DesignStudio for this purpose.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,10 @@ Properties"
**Step 7 –** Select the Remote tab, and select the checkbox "Allow Remote Assistance connections to
this computer" and then click the OK button.

**NOTE:** Make sure that the selection is underlined as shown in the screenshot.
:::note
Make sure that the selection is underlined as shown in the screenshot.
:::


![686_11_image-20200330200932-6](/img/product_docs/endpointpolicymanager/applicationsettings/686_11_image-20200330200932-6.webp)

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -20,8 +20,11 @@ website.com, plugin:java, allow

![132_2_ff-kb-img-02](/img/product_docs/endpointpolicymanager/applicationsettings/preconfigured/firefox/132_2_ff-kb-img-02.webp)

**NOTE:** You might also need to add these lines as well, if adding the one line above doesn't work.
:::note
You might also need to add these lines as well, if adding the one line above doesn't work.
It depends on the version of Firefox you have installed. Older versions require these lines:
:::


```
website.com, plugin-vulnerable:npdeployjava, allow website.com, plugin:npdeployjava, allow
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -34,9 +34,12 @@ items to workaround and fix it:
- The AppSet itself which needed to be recompiled with some Endpoint Policy Manager DesignStudio
updates.

**NOTE:** If you are using the Endpoint Policy Manager DesignStudio yourself to make any changes to
:::note
If you are using the Endpoint Policy Manager DesignStudio yourself to make any changes to
the Firefox 23 AppSet, you will need to re-compile with the latest Endpoint Policy Manager
DesignStudio and then perform the steps listed below.
:::


This document is to help guide you through the required transition.

Expand All @@ -46,9 +49,12 @@ FF115.
You can acquire the updated FireFox AppSet 115 in the Endpoint Policy Manager Portal within the
AppSets downloads.

**NOTE:** It is recommended, though not strictly required that you also update your management
:::note
It is recommended, though not strictly required that you also update your management
station to the latest Endpoint Policy Manager MMC snap-in. In doing so the screenshots shown here
will match the steps you will be performing.
:::


## Functional Matrix of Firefox, CSE and AppSet

Expand All @@ -73,10 +79,13 @@ to the machines with the new 23.10 and later CSE. During this guide you will use
Targeting to ensure that the older FF23 AppSet cannot work with, and shouldn't be applied to newer
CSEs; therefore we need to ensure that the newer FF115 AppSet only applies to the newer CSEs.

**NOTE:** This document mostly focuses on Group Policy Object delivery of the Firefox Endpoint
:::note
This document mostly focuses on Group Policy Object delivery of the Firefox Endpoint
Policy Manager AppSet. Note you may have other ways to deliver the FireFox Endpoint Policy Manager
AppSet like Endpoint Policy Manager Cloud, local GPOs, and/or XML data files (via MSI files.) Be
sure to perform this same operation using any and all methods.
:::


## Finding all GPOs with Endpoint Policy Manager Application Settings Manager Data

Expand Down Expand Up @@ -134,7 +143,10 @@ the file out.
See the
[What are the two ways to export AppSet settings and why would I use one over the other?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/appset.md)

**NOTE:** You will use the resulting XML file in an upcoming step and not only for backup purposes.
:::note
You will use the resulting XML file in an upcoming step and not only for backup purposes.
:::


### Back up 4: Backing up your Firefox 23 AppSet DLL

Expand Down Expand Up @@ -209,8 +221,11 @@ Item Level Targeting Validation tool to test how ILT will operate. See the
[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md)
topic for additional information.

**NOTE:** You will have to trim the ILT part of the output to eliminate the `<ILTFilters>` at the
:::note
You will have to trim the ILT part of the output to eliminate the `<ILTFilters>` at the
beginning and `</ILTFilters>` at the end.
:::


![939_8_image-20231101213809-8_950x453](/img/product_docs/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_8_image-20231101213809-8_950x453.webp)

Expand Down Expand Up @@ -238,8 +253,11 @@ Use these instructions to add the AppSet to a Share:
For example in the Endpoint Policy Manager Central Store you simply add the pp-Mozilla Firefox
115.DLL.

**NOTE:** You may leave your existing pp-Mozilla Firefox 23 aboutconfig A to I and J to Z.DLL files
:::note
You may leave your existing pp-Mozilla Firefox 23 aboutconfig A to I and J to Z.DLL files
in place without modification.
:::


![939_12_image-20231101213809-12_950x406](/img/product_docs/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_12_image-20231101213809-12_950x406.webp)

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -33,13 +33,19 @@ Disable the PolicyPak AppLock(TM) feature in the Endpoint Policy Manager CSE.

Endpoint Policy ManagerAppLock is the feature in PP App Manager which GRAYS or HIDES UI elements.

**NOTE:** Endpoint Policy Manager AppLock is NOT related to Microsoft AppLocker.
:::note
Endpoint Policy Manager AppLock is NOT related to Microsoft AppLocker.
:::


Here is the Endpoint Policy Manager side workaround if you are encountering this error:

[How do I turn AppLock off or on based upon the CSE version I'm using?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/disable.md)

**NOTE:** IIn general it is NOT recommended to stop Endpoint Policy Manager AppLock.
:::note
IIn general it is NOT recommended to stop Endpoint Policy Manager AppLock.
:::


## WORKAROUND 2

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -30,8 +30,11 @@ with security software you might have on your endpoints.
applications.)
- AppLock is already turned off by default in newer versions of the CSE (for Win32 applications.)

**NOTE:** AppLock's actions may not be turned off (ever) for Eclipse ISE (aka Java Control Panel
:::note
AppLock's actions may not be turned off (ever) for Eclipse ISE (aka Java Control Panel
applets) or Firefox, but only for Win32 applications.
:::


You can witness PPAppLockLdr64.dll injected into processes by using Process Explorer. An example can
be seen here with Win32 app NotepadP. Using the Process Explorer Search you may also look for other
Expand Down Expand Up @@ -87,5 +90,8 @@ and new state. Here's an example GPO with the old name and old state:

![applock8](/img/product_docs/endpointpolicymanager/troubleshooting/applicationsettings/applock/applock8.webp)

**NOTE:** You might need to close the GPMC and re-open it to have the GPMC refresh the ADMX / ADML
:::note
You might need to close the GPMC and re-open it to have the GPMC refresh the ADMX / ADML
files and reflect a change. Then re-run the GPO setting report to verify your change.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -18,12 +18,18 @@ this KB to apply to all your DCs:

Then retry the Netwrix Endpoint Policy Manager (formerly PolicyPak) operation.

**NOTE:** Troubleshooting Group Policy Replication problems is beyond the normal Endpoint Policy
:::note
Troubleshooting Group Policy Replication problems is beyond the normal Endpoint Policy
Manager tech support, since it's not specifically a Endpoint Policy Manager issue. If you have a
replication problem, here is our suggestion to help you overcome replication problems.
:::

**CAUTION:** These tips are USE AT YOUR OWN RISK, since Directory Services troubleshooting is beyond

:::warning
These tips are USE AT YOUR OWN RISK, since Directory Services troubleshooting is beyond
the scope of the Endpoint Policy Manager troubleshooting support team.
:::


Symptoms: Everything might be running smoothly until you get inconsistent results upon clients when
your Endpoint Policy Manager directives embedded within GPOs. Some of your workstations are
Expand All @@ -50,7 +56,10 @@ Here are some great troubleshooting tips however.

![3_1_troubleshooting-grou-policy-replication2](/img/product_docs/endpointpolicymanager/troubleshooting/applicationsettings/3_1_troubleshooting-grou-policy-replication2.webp)

**NOTE:**
:::note

:::


It's very possible the first GPO to express an error one that contains Endpoint Policy Manager
directives. But it's equally likely that it's another GPO as well.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -55,8 +55,11 @@ the target computer is using non-US English version of the same application.

In this case: Settings should apply, but the AppLock will fail to apply.

**NOTE:**  it IS possible re-capture the UI using the Endpoint Policy Manager DesignStudio and then
:::note
 it IS possible re-capture the UI using the Endpoint Policy Manager DesignStudio and then
get the applications' UI to lockdown.
:::


Alternatively, instead of locking down the UI, you could lock down the application's data store
using ACL Lockdown.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -25,5 +25,7 @@ DirectoryIsolationMode=FULL

What this does is exclude the PolicyPak CSE files from interacting with the ThinApp application EXE.

_Remember,_ This prevents PolicyPak from managing that application, but, works around any Exception
:::tip
Remember, This prevents PolicyPak from managing that application, but, works around any Exception
Errors on launch.
:::
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,11 @@ sidebar_position: 20
---
# Working with Others and using the Central Store

<iframe width="560" height="315" src="https://www.youtube.com/embed/SPH1IrHpgDM" title="Endpoint Policy Manager: Working with Others and using the Central Store" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

Netwrix Endpoint Policy Manager (formerly PolicyPak) enables you to work with other administrators —
quickly. Just put the Paks into the central store, and everyone has a copy. Watch this video to see
how it's done !
how it's done!

<iframe width="560" height="315" src="https://www.youtube.com/embed/SPH1IrHpgDM" title="Endpoint Policy Manager: Working with Others and using the Central Store" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

### PolicyPak: Working with Others and using the Central Store video transcript

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,12 +5,12 @@ sidebar_position: 50
---
# Understanding and fixing Endpoint Policy Manager DLL Orphans

<iframe width="560" height="315" src="https://www.youtube.com/embed/zBlHNLLB7oo" title="Endpoint Policy Manager: Understanding and fixing Endpoint Policy Manager DLL Orphans" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

If a DLL that supports a GPO is removed, you need a way to discover and quickly fix it. The Netwrix
Endpoint Policy Manager (formerly PolicyPak) GPOTouch utility has a function called Find & Repair
Orphaned Paks within GPOs. Here's how it works.

<iframe width="560" height="315" src="https://www.youtube.com/embed/zBlHNLLB7oo" title="Endpoint Policy Manager: Understanding and fixing Endpoint Policy Manager DLL Orphans" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

### PolicyPak: Understanding and fixing PolicyPak DLL Orphans video transcript

Hi, this is Jeremy Moskowitz, former Group Policy MVP and Founder of PolicyPak Software. In this
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,11 @@ sidebar_position: 60
---
# Reconnecting DLLs

<iframe width="560" height="315" src="https://www.youtube.com/embed/unz-8F9ohWo" title="Endpoint Policy Manager: Reconnecting DLLs" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

This is an advancedNetwrix Endpoint Policy Manager (formerly PolicyPak) topic showing how to
reconnect a DLL if the inner name was changed, and someone deleted the existing DLL.

<iframe width="560" height="315" src="https://www.youtube.com/embed/unz-8F9ohWo" title="Endpoint Policy Manager: Reconnecting DLLs" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

### PolicyPak: Reconnecting DLLs video transcript

Hi, everyone. This is Jeremy Moskowitz, former Group Policy MVP and Founder of PolicyPak Software.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,12 +5,12 @@ sidebar_position: 30
---
# Using Shares to Store Your Paks (Share-Based Storage)

<iframe width="560" height="315" src="https://www.youtube.com/embed/aqCIbaY1TmQ" title="Endpoint Policy Manager: Using Shares to Store Your Paks (Share-Based Storage)" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

Starting in build 601 of the Netwrix Endpoint Policy Manager (formerly PolicyPak) MMC snap in,
you've got the ability to store Pak files on shares — as well as the traditional Local and Central
stores. This video shows you how it works.

<iframe width="560" height="315" src="https://www.youtube.com/embed/aqCIbaY1TmQ" title="Endpoint Policy Manager: Using Shares to Store Your Paks (Share-Based Storage)" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

### PolicyPak: Using Shares to Store Your Paks Video Transcript

Hi. This is Jeremy Moskowitz, former Group Policy MVP and Founder of PolicyPak Software. In this
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,12 +5,12 @@ sidebar_position: 70
---
# GPOTouch Utility

<iframe width="560" height="315" src="https://www.youtube.com/embed/ggYBVfzniro" title="Endpoint Policy Manager GPO Touch Utility" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

Updating your Pak DLLs and GPOs to a newer version manually can be a pain in the neck. So we created
this utility to automatically update your GPOs with Netwrix Endpoint Policy Manager (formerly
PolicyPak) data to the latest versions. It installs alongside DesignStudio.

<iframe width="560" height="315" src="https://www.youtube.com/embed/ggYBVfzniro" title="Endpoint Policy Manager GPO Touch Utility" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="1"></iframe>

### PolicyPak: GPOTouch Utility video transcript

Hi, this is Jeremy Moskowitz, former Group Policy MVP and Founder of PolicyPak Software. In this
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,10 @@ AppSets from Netwrix. This means that all the DLLs (AppSets) we ship are digital
unaltered and you know they came from us. Watch this video to understand how to take advantage of
this feature.

**NOTE:** Before heading down this path please watch the backup / restore videos:
:::note
Before heading down this path please watch the backup / restore videos:
:::


- [Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md)
- [Endpoint Policy Manager: Backup and Restore Options to Recover from nearly any problem](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backupoptions.md)
Expand Down
Loading
Loading