Netwrix PolicyPak

Q: How is Netwrix PolicyPak licensed?

Netwrix PolicyPak is licensed by the number of endpoints and VDI connections it performs work upon.

Q: Can Netwrix PolicyPak work with on-prem Active Directory and Microsoft Endpoint Manager (SCCM and/or Microsoft Intune)?

Yes. Our Netwrix PolicyPak can deliver all Netwrix PolicyPak settings and nearly all Group Policy settings via any management method you have in place.

Q: Can Netwrix PolicyPak work with machines that are not domain-joined?

Yes. You can deliver all Netwrix PolicyPak settings and nearly all Group Policy settings via Netwrix PolicyPak Cloud or by using Netwrix PolicyPak alongside an MDM service like Microsoft Intune.

Netwrix PolicyPak: Group Policy management software

Modern group policy management and endpoint policy software for the Anywhere Workforce. Secure and manage Windows and macOS endpoints wherever your users work.

Read their Stories

Trusted by

Commonwealth of pennsylvania office of attorney general

Gloucestershire hospitals nhs foundation trust

A black background with a few white lines on it

Why Netwrix?

Extend Group Policy management wherever your devices live

Download the datasheet

Prevent ransomware and shadow IT

Block ransomware and Shadow IT with file-owner-based allow listing that enforces least privilege and removes exception list overhead.

Enable frictionless user productivity

Enable productivity anywhere by eliminating UAC roadblocks, speeding logins, and ensuring apps, files, and browsers always behave correctly.

Cut end-user support tickets dramatically

Reduce help desk tickets by automating UAC elevation, fixing browser and file mismatches, speeding logins, and keeping policies enforced.

Deploy GPOs anywhere with cloud or MDM

Export and deliver real Group Policy settings through the cloud or MDM, extending policy enforcement to remote and non-domain computers.

See it in action

See how it works in under 2 minutes

See how Netwrix PolicyPak extends and modernizes Group Policy — removing local admin rights, enforcing least privilege, managing application and browser settings, and delivering real GPOs to any device through Intune or the cloud, all from a single console

Capabilities

Group Policy management that reaches every device: cloud, MDM, or on-prem

Local Admin least privilege management

1-click ransomware prevention

Flexible GPO consolidation and deployment

Simplified software deployment and removal

See for yourself

Ready to get started?

All products

Security products for all your needs

Netwrix 1Secure for MSPs

Deliver smarter, unified data security for your clients with a DPSM tool built to reduce risk, boost margins, and scale with you.

Netwrix Access Analyzer (ex-StealthAUDIT)

Get enterprise-grade discovery, classification, and remediation with 40+ data collection modules covering on-prem and cloud-native platforms.

Netwrix Access Analyzer (ex-StealthAUDIT)

Get enterprise-grade discovery, classification, and remediation with 40+ data collection modules covering on-prem and cloud-native platforms.

Netwrix Auditor

Monitor user activity, spot threats early, and prove compliance with hard evidence before issues turn into incidents.

Netwrix Change Tracker (ex-NNT)

Shrink your attack surface, spot and fix breaches fast, and simplify audits with security configuration management and change control.

Netwrix Data Classification

Find and classify sensitive data across your environment to help simplify compliance and focus protection efforts where they matter most.

Netwrix Directory Manager (ex-GroupID)

Simplify group and user management in Active Directory and Entra ID for better security and less time spent on routine tasks.

Netwrix Directory Manager (ex-GroupID)

Simplify group and user management in Active Directory and Entra ID for better security and less time spent on routine tasks.

Netwrix Endpoint Protector (ex-CoSoSys): Endpoint DLP software and device control

Block unauthorized data transfers and exfiltration via USB, email, browsers, messaging apps, and other common outbound channels.

Netwrix Endpoint Protector (ex-CoSoSys): Endpoint DLP software and device control

Block unauthorized data transfers and exfiltration via USB, email, browsers, messaging apps, and other common outbound channels.

Netwrix Identity Manager

Automate, govern, and control enterprise identities with an IGA platform (formerly Usercube) that secures access, boosts productivity, and simplifies audits.

Netwrix Identity Recovery

Quickly recover Active Directory and Entra ID objects, attributes, or entire AD forest to restore operations quickly and reduce downtime.

Netwrix Password Policy Enforcer (ex-Anixis)

Enforce strong, custom password policies in Active Directory to block weak credentials and stop attackers from exploiting careless mistakes.

Netwrix Password Secure

Manage and secure user passwords across all devices with privileged credentials, control access, and auditing tools.

Netwrix PingCastle

Find and fix security gaps in your hybrid Active Directory setup to reduce risk and prevent breaches before the damage is done.

Netwrix PolicyPak

Manage and secure endpoints wherever users work with security settings, admin rights, and managed apps on Windows endpoints.

Netwrix Privilege Secure (ex-SBPAM, Remediant)

Remove standing privileged accounts and enforce least privilege for users and apps without slowing down work or disrupting access.

Netwrix Strongpoint

Take control of your ERP configurations with system documentation and continuous audits that reduce errors and strengthen security.

Netwrix Threat Manager

Detect and respond to abnormal behavior and advanced attacks fast with clear context and actionable next steps.

Netwrix Threat Prevention (ex-StealthINTERCEPT)

Get real-time alerts on risky activity, restrict access, and block threats before they escalate into full-blown security incidents.

Trusted by professionals

Don’t just take our word for it

Learn more

"Netwrix PolicyPak makes it much easier to comply with federal security mandates. In fact, in some cases, we would simply have no way to implement the mandated settings without Netwrix PolicyPak."

Jamie Hosley

IT Analyst, US Department of Veterans Affairs

Learn more

"Netwrix PolicyPak enables us, as admins, to confidently say yes to software we support, instead of being the IT guys who always say no to everything. It allows us to say yes… because we can now deploy them safely."

Jon Bain

IT Services Team Leader, Crutchfield

Learn More

Netwrix Privilege Secure was straightforward to install, allowing my engineers, who were not very familiar with the product, to easily implement it. This helped us avoid large-scale consultancy costs and shorten the setup process to a single day, compared to the several weeks required by other products.

Ivar Indekeu

Senior Manager IT Operations, H. Essers

Learn more

"Once we set up the Browser Router with Netwrix PolicyPak, the help desk calls stopped completely. We no longer had issues with browser compatibility, which was a huge relief."

Jeremy Shupick

Network Administrator, Wyoming Machinery Company

Learn more

"One of the most straightforward tools to set up and deploy and it starts working instantly! You do not need to be a Group Policy expert to get up and running with deploying policies, so it's also easier to bring in other IT professionals to share the management load without digging through the jungle that is Group Policy settings."

Nick H.

Learn more

"The ability to easily push users to use certain browsers with certain web sites with Browser Router. That is the best thing but this has so much to offer it is hard to list everything I like."

Jeremy S.

Network Administrator

See All Customer Stories

Integrations

Seamless integrations for smarter security

See All Integrations

A purple folder with a person icon on it

A black and white graphic of a staircase with a cross in the middle

Let’s talk security

Featured resources

Geek out with us

Resource center

On Demand Webinar

Streamlining Your Migration from Group Policy and SCCM to Intune and Entra ID

Jeremy Moskowitz

Endpoint Management

On Demand Webinar

Netwrix PolicyPak Demo: SaaS Enabled Group Policy for Remote Endpoints

Jeremy Moskowitz

Endpoint Management

Endpoint management software FAQs

Have questions? We’ve got answers.

What is group policy management software?

Group policy management software extends Windows Group Policy to every endpoint your IT team manages, including machines that aren't domain-joined and devices managed through the cloud or MDM. It lets you enforce security settings, control which applications users can install, and remove excess local admin rights instead of leaving them in place by default. That matters for ransomware prevention: attackers rely on standing admin rights to move and elevate privileges. According to the Netwrix 2026 Data and Identity Security Report, 75% of sensitive data exposures begin with compromised identities or misconfigured permissions, and 76% of organizations can't immediately revoke standing access when it's no longer needed.

Why do I need endpoint management software?

Without endpoint management tools, keeping track of devices (especially in a hybrid or remote setup) can be unmanageable. Using endpoint manager software helps reduce risks by enforcing consistent settings, controlling software installs, and ensuring updates and patches are applied on time. An endpoint management tool can also help cut down on manual IT work and give your team better visibility and control over your environments, which can boost productivity and streamline compliance as a result.

How is Netwrix PolicyPak licensed?

Can Netwrix PolicyPak work with on-prem Active Directory and Microsoft Endpoint Manager (SCCM and/or Microsoft Intune)?

Can Netwrix PolicyPak work with machines that are not domain-joined?

Netwrix PolicyPak

Netwrix PolicyPak: Group Policy management software

Extend Group Policy management wherever your devices live

Prevent ransomware and shadow IT

Enable frictionless user productivity

Cut end-user support tickets dramatically

Deploy GPOs anywhere with cloud or MDM

See how it works in under 2 minutes

Capabilities

Group Policy management that reaches every device: cloud, MDM, or on-prem

Ready to get started?

All products

Security products for all your needs

Trusted by professionals

Don’t just take our word for it

Integrations

Seamless integrations for smarter security

Let’s talk security

Featured resources

Geek out with us

Streamlining Your Migration from Group Policy and SCCM to Intune and Entra ID

Netwrix PolicyPak Demo: SaaS Enabled Group Policy for Remote Endpoints

Endpoint management software FAQs

Have questions? We’ve got answers.

See Netwrix PolicyPak in action