Assigning a policy to a group
|Article:HOWTO81267|||||Created: 2012-10-25|||||Updated: 2013-08-20|||||Article URL http://www.symantec.com/docs/HOWTO81267|
You assign a policy to a client computer through a group. Every group has exactly one policy of each protection type that is assigned to it at all times. If you have both Windows clients and Mac clients, you can put them into separate groups or you can manage them in the same group. If you put them in the same group and apply a policy, each type of client applies the appropriate policy settings. Window computers ignore the settings that only apply to Mac computers, and Mac computers ignore the settings that only apply to Window computers.
You can assign a policy to one or more groups. The policy replaces the currently assigned policy of the same protection type.
Policies are assigned to computer groups as follows:
At initial installation, the Symantec default security policies are assigned to the My Company parent group.
The security policies in the My Company parent group are automatically assigned to each newly created child group.
You replace a policy in a group by assigning another policy of the same type. You can replace a policy that is assigned to the My Company parent group or to any child group.
New groups always inherit from their immediate parent group. If you create a hierarchy of sub-groups, each one inherits from its immediate parent, not from the top-level parent.
The user interface in the Assign policy dialog box conveys the following additional information:
A folder icon indicates a group.
A check mark in a green circle indicates that this policy is assigned to this group.
Article URL http://www.symantec.com/docs/HOWTO81267