Assigning a policy to a group

Article:HOWTO55050  |  Created: 2011-06-29  |  Updated: 2011-12-16  |  Article URL http://www.symantec.com/docs/HOWTO55050
Article Type
How To


Subject


Assigning a policy to a group

You assign a policy to a client computer through a group. Every group has exactly one policy of each protection type that is assigned to it at all times. If you have both Windows clients and Mac clients, you can put them into separate groups or you can manage them in the same group. If you put them in the same group and apply a policy, each type of client applies the appropriate policy settings. Window computers ignore the settings that only apply to Mac computers, and Mac computers ignore the settings that only apply to Window computers.

Unassigned policies are not downloaded to the client computers in groups and locations. If you do not assign the policy when you add the policy, you can assign it to groups and locations later. You can also reassign a policy to a different group or location.

Policies are assigned to computer groups as follows:

  • At initial installation, the Symantec default security policies are assigned to the My Company parent group.

  • The security policies in the My Company parent group are automatically assigned to each newly created child group.

  • You replace a policy in a group by assigning another policy of the same type. You can replace a policy that is assigned to the My Company parent group or to any child group.

New groups always inherit from their immediate parent group. If you create a hierarchy of sub-groups, each one inherits from its immediate parent, not from the top-level parent.

The user interface in the Assign policy dialog box conveys the following additional information:

A folder icon indicates a group.

A round icon indicates a location.

  • On a group icon, a check mark in a green circle indicates that this policy is assigned to all of the locations in the group.

  • On a location icon, a check mark in a green circle indicates that this policy is assigned to this location.

  • Text that is grayed out means that the group or location inherits its policy from its parent group.

See Performing tasks that are common to all security policies.

To assign a policy to a group

  1. In the console, click Policies.

  2. On the Policies page, select a policy, and then click Assign the policy.

  3. In the Assign policy dialog box, select the groups, and then click Assign.

  4. Click OK to confirm.


Legacy ID



v15703893_v59371754


Article URL http://www.symantec.com/docs/HOWTO55050


Terms of use for this information are found in Legal Notices