Setting Up Required Desktop Policies

ZfD requires policy packages in the NDS tree that can hold the desktop policies that you can later configure and enable. Any ZfD installation option (including a Typical install) also requires that you create and associate one Search Policy so that it will be enabled to find the other policies you create.

This section includes the information you need for setting up Desktop Policies, including:

• Creating the Policy Packages
• Setting Up the Search Policy
• Associating the Container Package

In a production environment (that is, a live network with actual users where you will install ZfD) after the ZfD test installation, you can add the policies that the individual components need to function correctly. For general guidelines about setting up policies, see Understanding ZfD Policies and Policy Packages in Planning Workstation Management in Deployment.

Creating the Policy Packages

A policy package holds the individual Windows desktop policies that dictate the rules of use or configuration for users or their workstations. You should create an Organizational Unit (OU) for holding the policy packages. Consider the following when determining where to place this OU:

• Whether you have partitions in your tree
• The 256-character limit in NDS for the full distinguished name
• The Search policy is used to locate the policy package

To minimize tree walking, it is best to create this policy package OU at the root of the partition that contains the objects with which the policy package will be associated. In doing so, the following benefits are realized:

• Tree walking is minimized with the root of the partition and the Search policy being used
• Placing the OU at the partition's root maximizes the number of characters that will be available for naming plural policies

To create a policy package:

1. In ConsoleOne, right-click the container where you want the container for the policy packages placed > click New > click Object > click Organizational Unit > click OK.

2. Give the container a short name.

   Because you can have both ZfD and ZenWorks for Servers (ZfS) policies in the same tree, make sure you distinguish your ZfD policies container with a unique name. For example, ZfD Policies.

3. Right-click the policy package's container > click New > click Policy Packages.

4. Select one of the following policy packages:

      Container Package

      Server Package

      Service Location Package

      User Package

      Workstation Package

5. Click Next > give the package a short name > click Next > click Create Another Policy Package (unless this is the last one being created) > click Finish.

   Short package name suggestions include:

      Container

      Server

      Location

      User

      Workstation

6. Repeat Step 4 through Step 5 for each policy package to be created.

Setting Up the Search Policy

The Search Policy is required for finding other policies.

To create the Search Policy:

1. In ConsoleOne, right-click the Container Package > click Properties.

2. Check the check box under the Enabled column for the Search policy.

   This both selects and enables the policy.

3. Click Properties.

   The Search Level tab is displayed.

4. Select the level to search up to:

   [Root]: Search to the root of the tree.

   Object Container: Search to the parent container.

   Partition: Search to the partition root.

   Selected Container: Search to the selected container.

5. If you chose Selected Container, browse to select the container.

6. To determine the searching limits in either direction, enter a number:

   Number	Description
   0	Limits the search to the selected level.
   1	Limits the search to one level above the selected level. For example, if you selected the server's parent container, this would limit the search to one level above the parent level.
   -1	Limits the search to one level below the selected level. For example, if you selected [Root], -2 would limit the search up to two levels below [Root].

7. Click the Search Order tab > select the policy searching order.

   Use the arrow keys, the Add button, and the Remove button as necessary to create your search order.

8. Click the Refresh Interval tab > select the frequency for how often the policy should be refreshed.

   The default is hourly. If you should set both time increments to zero (0), policies will never be refreshed.

9. Click the Associations tab > Add.

10. Browse to select the container object for association to the Search Policy.

11. Click OK when finished.

Associating the Container Package

The Search Policy you configured and enabled will not be in effect until you associate the Container Package with a container object.

To associate the Container Package:

1. In ConsoleOne, right-click the Container Package > click Properties.

2. Click the Associations tab > Add.

3. Browse for the container high in the tree for associating the package > click OK.