Netwrix Endpoint Policy Manager (formerly PolicyPak)
Mobile application management software
Mobile device management (MDM) software
Endpoint management software
Endpoint protection software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if Netwrix Endpoint Policy Manager (formerly PolicyPak) and its alternatives fit your requirements.
Free Trial
Free version unavailable
Small
Medium
Large
- Education and training
- Public sector and nonprofit organizations
- Construction
What is Netwrix Endpoint Policy Manager (formerly PolicyPak)
Netwrix Endpoint Policy Manager (formerly PolicyPak) is an endpoint configuration and policy management product for Windows environments that extends and complements Microsoft Group Policy and related management tooling. IT administrators use it to deploy and enforce application settings, security-related configurations, and user environment controls across endpoints, including for users who are off the corporate network. It focuses on granular policy control for Windows applications and OS settings, with packaging and deployment mechanisms designed to reduce reliance on custom scripts and manual configuration.
Deep Windows policy control
The product provides granular control over Windows and application settings beyond standard Group Policy templates. It supports enforcing and reverting settings to maintain desired configurations over time. This is useful for standardizing endpoint behavior across departments and device types in Windows-centric organizations.
Complements Microsoft management stack
It is designed to work alongside Microsoft Active Directory and Group Policy rather than replacing them. This can reduce disruption for teams already invested in Microsoft administrative processes and tooling. It also helps address common gaps such as managing settings for applications that do not expose native GPO/ADMX controls.
Supports off-network enforcement
The product targets scenarios where endpoints are not continuously connected to the corporate network. It can apply and maintain policy settings for remote users, which helps with consistent configuration in distributed workforces. This can reduce dependence on VPN-only policy refresh cycles for certain configuration use cases.
Not full MDM for mobile
Despite overlapping category labels, the product’s core capabilities center on Windows endpoint policy and configuration rather than full mobile device management. Organizations needing broad iOS/Android device enrollment, compliance policies, and app distribution typically require a dedicated MDM/UEM platform. As a result, it may not satisfy mobile-first management requirements on its own.
Limited endpoint security stack
It is primarily a policy/configuration tool and does not replace endpoint detection and response, anti-malware, or firewall platforms. Security teams may still need separate products for threat detection, incident response, and advanced protection controls. This can increase integration and operational coordination needs across tools.
Windows-centric scope
The strongest fit is for Windows endpoints and Windows application settings management. Organizations with significant macOS, iOS, Android, or heterogeneous endpoint fleets may find coverage uneven compared with platforms built for cross-OS management. This can lead to parallel tooling for non-Windows endpoints.
Plan & Pricing
Pricing model: Pay-as-you-go (cloud) and per-computer licensing for on-premises
Free tier/trial: Cloud trial: 10 licenses for 30 days (trial). On‑prem Trial Mode available (computers named with "COMPUTER" act as trial). See notes below.
Billing details (official site information):
- SaaS (Endpoint Policy Manager Cloud) is billed monthly to a credit card and charges the highest daily count of computers used during the month (i.e., peak concurrent-day count). Customers are required to have credit card(s) on file. (No per-unit dollar amounts published on the site.)
- On‑premises / Group Policy / MDM licensing: licensed on a per-client-computer basis (desktops, laptops, VDI) and per concurrent-session-connection for Terminal Services (RDS) or Citrix; licenses are typically issued for one year (temporary 30-day licensing also described). Volume/domain-wide license options are available and customers are asked to contact Sales for quotes.
Example costs: Not published on the official Netwrix/Endpoint Policy Manager pages (no SKU prices or per-computer dollar rates found).
Discount options / notes: Volume licenses, domain-wide licenses, and sales/quote-based pricing are offered (customers must contact sales for pricing and formal quotes).
Official-site sources used: Netwrix product page, Netwrix pricing page (request pricing), Endpoint Policy Manager documentation (licensing, cloud billing, getting started/trial pages).
Seller details
Netwrix Corporation
Frisco, Texas, USA
2006
Private
https://www.netwrix.com/
https://x.com/netwrix
https://www.linkedin.com/company/netwrix/
