5.8 Assigning a Policy to Users

Certain key points that you must be aware of before you assign a policy to a user are as follows

  • There are two types of users: users in the corporate directory and local users on managed devices. Policies can be associated to users in the corporate directory. ZENworks assumes that a mapping exists between users in the corporate directory and users on a device. When a user logs in to the corporate directory, ZENworks obtains the policies for the corporate user and caches them on the device.

  • If a mapping exists between a corporate user and a local user, ZENworks also associates the cached policies with the local user. When a user logs in to the device, the previously cached policies are enforced for the local user. When the user also logs in to the corporate directory, the policies for the corporate user are refreshed, then enforced.

  • The set of policies, both directly assigned and inherited, is called as a set of assigned policies for a device or a user. When calculating the set of assigned policies, filters such as multiplicity or system requirements are not applied. Groups and containers also have assigned policies. Policies that are disabled are not included in the set of assigned policies.

  • If you are assigning a Local File Rights policy to a network made up of devices running different languages, see Section 5.11, Assigning the Local File Rights Policy to Devices Running Different Languages.

  • Before assigning a Roaming Profile policy to a user on a Windows Vista device or Windows Server 2008 device, make sure a user profile with correct registry hive permissions is available on the device. See Section 5.9, Assigning a Roaming Profile Policy for a User Profile Stored on a Windows, Linux, or NetWare Share.

Perform the following steps to assign a policy to a user:

  1. In ZENworks Control Center, click the Policies tab.

  2. In the Policies list, select the check box next to the objects such as policies or policy groups.

  3. Click Action > Assign to User.

  4. Browse for and select the user, user groups, and user folders to which you want to assign the group. To do so:

    1. Click The Navigate icon next to a folder to navigate through the folders until you find the user, group, or folder you want to select.

      If you are looking for a specific item, such as a User or a User Group, you can use the Items of type list to limit the types of items that are displayed. If you know the name of the item you are looking for, you can use the Item name box to search for the item.

    2. Click the underlined link in the Name column to select the user, group, or folder and display its name in the Selected list box.

    3. Click OK to add the selected devices, folders, and groups to the Users list.

  5. Click Next to display the Finish page, review the information and, if necessary, use the Back button to make changes to the information.

  6. Click Finish.

The following points are applicable when you assign a policy to a user:

  • When you assign a ZENworks Explorer Configuration Policy to a user, the settings configured in the policy are not immediately reflected on the device on which the user logs on. For example, even if Hide the Z icon in the taskbar is enabled in the policy, the ZENworks icon is displayed for a few seconds on the device after the policy is assigned to the user.

  • User assigned policies are not enforced in the console sessions of Windows Server 2003, Windows Server 2008, and Windows Server 2008 R2 device.

  • If you launch a published application from a Citrix server on to the device, it might take some considerable time for the list of the iPrint printers to be displayed on the device.

  • If you launch a published application installed on a Citrix server that has the iPrint printer policy configured, it might take considerable time for the policy to be enforced on the server. During this period, the iPrint functionality is not available for the application.