Here is a very quick demonstration of PolicyPak application manager, managing Java settings using Group Policy and the PolicyPak Cloud.
Hi. This is Jeremy Moskowitz, former Group Policy MVP and Founder of PolicyPak Software. In this video, I’m going to show you how to manage your application settings using on-premise Group Policy or over the cloud using PolicyPak Cloud to manage application settings like this annoying thing which pops up in your users’ faces all the time. We’re going to figure out right now how to kill this particular setting dead in its tracks.
To get started, what we’ll do is – and there’s the other pop-up – let’s go over to our Group Policy Editor. For all of our “East Sales Desktops” using the GPMC you know and love we can “Create a GPO in this domain, and Link it here.” We’ll go ahead and call this “Kill Java Popup.” We’ll right click, click “Edit” and we’ll do this for all of the computers that are in the “East Sales Desktops.” That’s under computer side “PolicyPak/Applications/New/Application.”
PolicyPak has over 200 preconfigured Paks ready to use, things like “Firefox,” Flash and, of course, “Java,” which is what we’re about to get to, and tons of your other desktop applications. I’m going to start off with “PolicyPak for Oracle Java Version 7 u 51,” which is the version I happen to have installed.
If I click over here and click on “Updates,” I’m going to uncheck “Check for Updates Automatically.” I’m also going to increase the “Security” by setting the “Security Level” to “Very High” and additionally – PolicyPak superpower – “Lockdown this setting using the system-wide config file” so the user can’t work around it. I’ll go ahead and click “OK.”
Now this computer, “Win7Computer-32,” he’s domain joined right now. In order for him to get that, Group Policy simply needs to be refreshed (run “gpupdate”). This happens automatically in the background without any kind of interaction. You wouldn’t have to do this for real. I’ll go ahead and close this.
Let’s go to “Configure Java” and see what happens. The first thing you’ll see is that there is no more “Update.” That goes immediately away. If we click on “Security,” you’ll see that PolicyPak has delivered “Very High” security and there’s no way for the user to work around it.
If we go over to a non-domain joined machine and we click on the same applet here in Java, if we look at “Configure Java” for this non-domain joined machine, what we’ll see here is we’ll still see the “Update” tab. We’ll see the “Security” can be set any way you want. Now the user is working around your configuration.
This is where PolicyPak Cloud comes in. You take your directives that you created here in Group Policy, you simply right click, “Export settings to XMLData File,” save that file as “JAVA1” or any name that you want. Then go to the PolicyPak Cloud service and “Upload a new XML Data file and link to Computer Group.”
I’ve already done that here. As soon as this computer joins the PolicyPak Cloud, it’s going to go to this group called “All” and because he’s in “All,” he’s going to get these particular directives. Of course, you can set up your own groups as well, but for the purposes of this demonstration, I’ve already pre-linked these Java settings to the PolicyPak Cloud group called “All.”
It’s as easy as installing the “PolicyPak Cloud Client.” It downloads your directives, and it’s ready to go. You can see this computer is now part of the “All” group. That’s it. As soon as it receives its directives from PolicyPak Cloud, let’s go back and take a look at Java. Let’s look at “Configure Java” here.
Now no more “Updates” tab. Click on “Security,” and through PolicyPak Cloud you’ve dictated your settings to both your on-premise machines that are domain joined using Group Policy, SCCM or your own systems management tool or through PolicyPak Cloud to your domain joined machines or your not domain joined machines.
That is a quick demonstration of PolicyPak on-premise using Group Policy to perform application settings lockdown and also PolicyPak Cloud. Remember also, everything we did here for Java we can also do for things like “WinZip.” I already have that directive in PolicyPak Cloud, so you can see that instantly took effect. Things for Firefox, Adobe, Flash, and on and on and on. Remember, PolicyPak Application Manager ships with over 200 preconfigured Paks. I’m just showing Java here as a quick demonstration.
With that in mind, thank you very much. We’re here for you if you’re ready to get started. Just attend a webinar, and you’ll be able to download PolicyPak and try it out for yourself.
Thanks so much, and we’ll talk to you soon.