Endpoint Protection

 View Only
  • 1.  Policy Implementations

    Posted Feb 24, 2010 01:25 AM
    I want to apply three Application and Device Control Policy on my Parent Group

    Application and Device Control Policy - Block Hosts File Modification
    Application and Device Control Policy - USB Block
    Application and Device Control Policy - Web Site Block

    I have four different groups Laptops, Desktops, Servers and VIP's

    I want to apply USB Block on Laptops and Desktops
    I want to apply Website Block on Laptops, Desktop, Servers and VIP's
    I want to apply Block Hosts File Modifications on Laptops, Desktop, Servers and VIP's

    How can i achieve this.


  • 2.  RE: Policy Implementations

    Posted Feb 24, 2010 01:33 AM
    Remove inheritance from each group (You can do it in the policy tab of the corresponding group).Create  policies (In the policy tab of SEPM i,e in left side under corresponding policy type).Assign to required groups. 


  • 3.  RE: Policy Implementations

    Posted Feb 24, 2010 01:36 AM
    Small clarification.
    Can you tell me how you are blocking web sites with  Application and Device Control Policy .I had never seen a doc for it I am not getting the idea also.can you point it tome? Or you are going to block browsers?


  • 4.  RE: Policy Implementations

    Posted Feb 24, 2010 01:36 AM
    By default all the groups are under parent group so it inherits the policy from Parent group. If u want to deploy different policy to different groups then Uncheck the Policy inheritance from Clients-->Select Group-->Click Policy in right side column and uncheck it. After unchecking the policy inheritance u will be able to apply the policy to desired groups


  • 5.  RE: Policy Implementations

    Posted Feb 24, 2010 01:39 AM


  • 6.  RE: Policy Implementations

    Posted Feb 24, 2010 01:52 AM
    Your first link refers to same thread.