Netwrix is pleased to announce the general availability of Netwrix PolicyPak build number 25.2. With this release, you will be able to benefit from the following:
PolicyPak - General
End-of-Life for 32-bit PolicyPak
This is a reminder that Version 24.12 was the final CSE and support tools (MMC, etc) for 32-bit Windows, and no more updates are expected beyond this date. You won’t see 32-bit versions in this build and onward.
CSE Password Protection for Uninstallation
You can now protect your CSE installation from being uninstalled (with some caveats.) Password protection for unintended installation is now available. Read the full details and supported scenarios at this KB (See KB Article for More Information)
CSE Enhanced Logging
Match criteria: Remove all packages where name is *duo*
PPPackMAppsInstaller.exe will continue installation. For more details See corresponding PPPackMAppsInstaller log.
// End of Winget remove, elapsed time: 00:00:00.028
Log for PPPackM-User-Operational closed on 2025/02/11, 12:43:26.543, elapsed time: 00:00:00.021
Log for PPPackM-User-Operational started on 2025/02/11, 12:43:26.544
Winget Package Installation
PolicyObject: PPRWDM: Winget Policy Demo(874FFBEC-7394-494F-BDEC-DE3CBE74EDD3)
PolicyCollection: Software Package Manager(A64703B6-94AB-4D16-B5CE-274DBE40CF12)
PolicyEntry: Install package with name: Notepad++ from an any source({1ea8036c-6fd3-4fb9-bcd5-f6836dffc66f})
ProductId: Notepad++.Notepad++
Name: Notepad++
PPPackMAppsInstaller.exe will continue installation. For more details See corresponding PPPackMAppsInstaller log.
// End of Winget Package Installation, elapsed time: 00:00:00.094
Log for PPPackM-User-Operational closed on 2025/02/11, 12:43:26.638, elapsed time: 00:00:00.093
Log for PPPackM-User-Operational started on 2025/02/11, 12:43:26.639
Winget Package Installation
PolicyObject: PPRWDM: Winget Policy Demo(874FFBEC-7394-494F-BDEC-DE3CBE74EDD3)
PolicyCollection: Software Package Manager(A64703B6-94AB-4D16-B5CE-274DBE40CF12)
PolicyEntry: Install package with name: Foxit PDF Reader from an any source({a43e3e85-be55-4505-87ed-78176c45e9d7})
ProductId: Foxit.FoxitReader
Name: Foxit PDF Reader
PPPackMAppsInstaller.exe will continue installation. For more details See corresponding PPPackMAppsInstaller log.
// End of Winget Package Installation, elapsed time: 00:00:00.180
Log for PPPackM-User-Operational closed on 2025/02/11, 12:43:26.819, elapsed time: 00:00:00.180
Not every component did a great job at time-stamping items in our log files. This is now generally addressed.
PolicyPak Least Privilege Manager
Admin Approval Additional Details
Admin Approval now has Force / Suggest additional details for long codes (email method). When Admin Approval with Email is used, the CSE can now put your “Additional details” into the email message they send to support. This will cut down troubleshooting time and help you generate new rules even more quickly. (See KB Article for Additional Details)
Mac Admin Tool
We have a new Mac Admin tool that allows you to quickly create rules for use with PolicyPak Cloud. With the “local” option, you can even pre-test the rules before deploying them to PolicyPak Cloud and verify that your rule works before final testing inside PolicyPak Cloud. Mac Admins, you’re going to love this new tool. (See KB Article for More Information)
UWP Application Names Now get Variables in Messages
Want to tell users what was blocked? UWP applications now get a variable in customized messages like this:
Results for end-users appear like this:
“Quick Cancel” for Least Privilege Manager + Privilege Secure
Previously it would take some time when cancelling the connection between PolicyPak CSE and the Netwrix Privilege Secure Server. If the Netwrix Privilege Secure server was simply not available, or the user changed their mind it took a while to cancel. Now, with this CSE connections are cancelled to Netwrix Privilege Secure instantly.
Override Self Elevate Context Menu Action for Explicit Rules
Do you have a specific rule you want to override against a blanket self-elevate policy? The default is that explicit rules will win, but if you need to fall back and let Self Elevate win, we’ve added this feature for you. (See KB Article for More Information)
Bug Fixes and Miscellaneous Updates
PolicyPak Cloud
- File / ACL Traverse Feature now in PolicyPak Least Privilege Manager Editor.
- PolicyPak Least Privilege Manager editor now supports X.Y.Z.Q numbering instead of only whole numbers in File Information Version
- PolicyPak Least Privilege Manager editor now has the UWP Policy Editor version.
- The PolicyPak Least Privilege Manager editor now includes the new “Override self-elevate context menu action” option (See feature description earlier).
- No more x86 PolicyPak Cloud client downloads.
- Misc bugfixes and other small updates
PolicyPak General
- CSE: Windows Secure Desktop improvements.
PolicyPak Network Security Manager
- Management pop-up now only appears for blocked actions, not every time the application is merely under control.
Things we say with every major announcement…
Always back up your GPOs and or Cloud XMLs. Restoration is VERY EASY. Re-creation of policies is NOT EASY.
Back up your GPOs today (video below)
Backup your XML Data Files today from PolicyPak Cloud (screenshot below)
Remember that PolicyPak acts as part of the operating system and you should do SMALL SCALE to LARGE SCALE testing with RINGS before rolling it out broadly.
Updating both the CSE and MMC snap-in up to date is recommended for all customers.
Specific upgrade guidance based on your circumstances:
How to get support for Netwrix PolicyPak…
For help on specific support issues you are welcome to open support cases. Use our Support Portal to submit a case. Please refer to our Support Reference Guide for details on the support process, including available contact methods, SLAs, and case severity guidelines.
Thank you for being a Netwrix PolicyPak customer!
Do you want to be notified of future PolicyPak updates?
Change your notification level from Normal to 
Subscribe
