We use PolicyPak cloud which allows the ability to add, update or modify group policy whether computers are on domain are off roaming the internet.

I don't know how it works, but it works! one of the most straightforward tools to set up and deploy and it starts working instantly! You do not need to be a Group Policy expert to get up and running with deploying policies, so it's also easier to bring in other IT professionals to share the management load without digging through the jungle that is Group Policy settings. The Least Privilege manager Pak is a security professional's dream come true, being able to lock down administrative rights but still allow the user to install and run already safe and proven applications. The Browser Router Pak is a devilishly easy way to avoid end-user frustration and reduce phone calls to support just to tell them "use a different browser." I could go on and on, but the Paks sell themselves with their name and what they do, they allow a full product free 30 day trial, so there is no reason to give them a try.

The best part of policypak for us is the ability to easily whitelist app installs for standard users.