5.7 Assigning a Policy to Devices

Certain key points that you must be aware of before you assign a policy to a device are as follows:

Perform the following steps to assign a policy to a device:

  1. In ZENworks Control Center, click the Policies tab.

  2. In the Policies list, select the check box next to the objects such as policies or policy groups.

  3. Click Action > Assign to Device.

  4. Browse for and select the devices, device groups, and device folders to which you want to assign the group. To do so:

    1. Click The Navigate icon next to a folder (for example, the Workstations folder or Servers folder or Mobile Devices folder) to navigate through the folders until you find the device, group, or folder you want to select.

      If you are looking for a specific item, such as a Workstation or a Workstation Group, you can use the Items of type list to limit the types of items that are displayed. If you know the name of the item you are looking for, you can use the Item name box to search for the item.

    2. Click the underlined link in the Name column to select the device, group, or folder and display its name in the Selected list box.

    3. Click OK to add the selected devices, folders, and groups to the Devices list.

  5. Click Next to display the Policy Conflict Resolution page.

  6. Set the priority between device-associated policies and user-associated policies for resolving conflicts that arise when policies of the same type are associated to both devices and users.

    • User Last: Select this option to apply policies that are associated to devices first and then the users.

    • Device Last: Select this option to apply policies that are associated to users first and then the devices.

    • Device Only: Select this option to apply policies that are associated only to devices.

    • User Only: Select this option to apply policies that are associated only to users.

  7. Click Next to display the Finish page, review the information and, if necessary, use the Back button to make changes to the information.

    If you want the policies to be immediately enforced on all the assigned devices, select Enforce Policies Immediately on all Assigned Devices.

    Polices might not be enforced immediately if the server is loaded, the duration for policies to be enforced on the managed devices depends upon the server load.

  8. Click Finish.

The following points are applicable when you assign a policy to a device:

  • If you assign a DLU policy to a device on which a user has logged in, the user is prompted to log in to the device again. Unless the user logs in to the device again, no new policies are enforced on the device.

  • When you assign a ZENworks Explorer Configuration Policy to a device, the settings configured in the policy are not immediately reflected on the device. For example, even if Hide the Z icon in the taskbar is enabled in the policy, the ZENworks icon is displayed for a few seconds on the device after the policy is assigned to the device.

  • If both user-associated and device-associated policies are effective for a device, only the policy that takes precedence according to the Policy Conflict Resolution settings is applied on the device. However, the Effective status for both policies is displayed as Success in the ZENworks Agent icon

  • User settings of a device associated Group policy cannot be enforced in console sessions of a Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2 device.

  • On a managed device, if you launch a published application that is installed on a Citrix server having iPrint policy configured, it might take considerable time for the policy to be enforced on the server. During this period, the iPrint functionality is not available for the application.