Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Possible to have different Update Policy Per Group of Computers?

Created: 09 Aug 2013 • Updated: 09 Aug 2013 | 6 comments
This issue has been solved. See solution.

Hello Everybody,

     Is it possible to have more than one Software Update Policy?  I wanted to see if I could setup one that would be for most computers and have a second one that would be for a group of executive computers.  If so, how can I set that up and where would I select the groups?  I don't see in the default policy anywhere to select the computers like in other policies or tasks.  Thanks for the help as always.

Operating Systems:

Comments 6 CommentsJump to latest comment

Erica_Palmer's picture

It is completely possible. I have several different patch policies for descrete sets of servers, running on different schedules.

I was told to always clone the Default Software Update Plug-In Policy when making new ones, rather than cloning policies I have previously created due to the way the default policy populates the list of target computers. It was casuing problems other wise. I was also advised to create new Software Update Plug-In Policies as the service account for the management console.

 

Anyway, you can find the Software Update Plug-In Policy under All Settings -> Agent/Plug-ins -> Software -> Patch Management. Pick your operating system. Clone the default and modify at will.

Erica

 

 

SOLUTION
oscarc619's picture

Thanks for the response.  

So i cloned the default policy and now have two.  The Default and the Cloned.  I see that in the cloned policy I have the Applied To options at the bottom.  

So if I add some computers to this new policy will that remove them from the default?  I'm a little confused on which computer will get what policy.  In the Defaul Policy we have been using I don't see the Applied To: option.  Thanks and sorry for all the questions.

Erica_Palmer's picture

The default policy applies to all computers with the software update plug-in installed. In order to have more than one schedule, you will need to create to new policies; one for the majority of your computers and one for the executive computers.

 

I use filters to group my servers and then point the policies at the filters.  Alternatively, you can add the computers to the policies directly, but it means making changes to which computers get which schedules is a bit more complicated.

Does that help?

oscarc619's picture

Yes that does.  So after I create the two policies I need would I Turn Off the Default Policy or do I leave that on?  

 

Thanks again for all the help.

Charlie D Tran's picture

Totally agreed with Erica_Palmer.

To add to Erica_Palmer's:

You can leave default policy on or off. Default policy targets all clients that discovered by Altiris NS (SMP) servers and authorize Altiris to restart and do actual installation of software, and patches at scheduled times. But default policy does not have or own the patches supposed to deliver to clients or where is the actual software is.

Another software update policy, tasks, scripts usually must be created to allow the download of the patches or direct clients to where the software is. (Manage --> Policies or Jobs and Tasks

when you leave default policy on, Altiris is smart enough to take out whatever clients are on targeted filters that the software update policy, tasks, scripts focus to.

You can experience yourself to leave it on and turn it off for the fun and genius of Altiris.