This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 57.99999999999999%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAZ%3C/text%3E%3C/svg%3E)
Dear All,
I want to upgrade GlobalProtect VPN on our users to a new version, our Group policy do not allow any upgrades/installation on our users machines. Is it possible to add/allow an exception for GlobalProtect application to be updated in Windows Group policies? What changes can we make to allow this one particular application to be exempt from our policies to be updated when needed.
Thank you
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 62%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDZ%3C/text%3E%3C/svg%3E)
Hello @Ather Zaidi ,
I'm just following up to make sure you received my last reply and that my answers properly address your questions. If you have any further questions or concerns about this post, please let us know.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Hello @Ather Zaidi ,
Thank you for posting here.
Here is the answer for your reference.
Q: Is it possible to add/allow an exception for GlobalProtect application to be updated in Windows Group policies?
A: No, we cannot add/allow an exception for GlobalProtect application to be updated in Windows Group policies.
Two suggestions
Suggestion one
The user can upgrade GlobalProtect VPN on user's laptop manually.
Suggestion two (it is not allowed as you mentioned)
Deploy new version GlobalProtect vpn to users laptops via Domain GPO.
How did you install old version of GlobalProtect vpn to users laptops in the past, you can also try that method, if it is also manual, now you may select suggest one.
Hope the information above is helpful.
Should you have any question or concern, please feel free to let us know.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Dear Daisy,
Thank you very much for your response, I would go for option 2.
Have a good week.
Regards,
Ather Zaidi