3.8 Managing Policy Groups

If you have multiple policies that you always want assigned together, you can create a policy group and add the policies as group members. Then, rather than assigning the individual policies, you can assign the policy group.

A policy can be a member of more than one policy group. For example, assume that you have 10 policy groups to accommodate the unique firewall and wireless access needs of various groups within your organization. However, all organizations require the same security for data encryption, so you add the same Microsoft Data Encryption policy to all of the policy groups.

The sections in this chapter provide instructions for managing policy groups.

You assign and remove policy groups for users and devices the same way that you assign and remove policies. For information, see Assigning Security Policies and Removing Policy Assignments From Users and Devices.

3.8.1 Create Policy Groups

  1. In ZENworks Control Center, click the Policies tab.

  2. Click New > Policy Group.

  3. Fill in the fields:

    Group Name: Provide a name for the policy group. The name must be different than the name of any other item (policy, group, folder, and so forth) that resides in the same folder. The name you provide displays in ZENworks Control Center.

    For more information, see Naming Conventions in ZENworks Control Center.

    Folder: Type the name or browse to and select the ZENworks Control Center folder where you want the policy to reside. The default is /policies, but you can create additional folders to organize your policies.

    Description: Provide a short description of the policy group's contents. This description displays in ZENworks Control Center.

  4. Click Next to display the Add Group Members page, then add the policies you want to be members of the group:

    1. Click Add to display the Select Members dialog box.

      Because you are adding policies to the group, the Select Members dialog box opens with the Policies folder displayed.

    2. Click The Navigate icon next to a folder to navigate through the folders until you find the policy you want to select.

      If you know the name of the policy you are looking for, you can use the Item name box to search for the item. You can add only policies to the group. You cannot add other policy groups to the group.

    3. Click the underlined link in the Name column to select the policy and display its name in the Selected list box.

    4. (Optional) Repeat Step 4.b and Step 4.c to select additional policies.

    5. Click OK to add the selected policies.

  5. Click Next to display the Summary page, review the information and, if necessary, use the Back button to make changes to the information.

  6. (Optional) Select the Define Additional Properties option to display the group’s properties page after the group is created. You can then configure additional policy group properties, such as assigning the policy group to devices and users.

  7. Click Finish to create the group.

3.8.2 Add Policies to Existing Groups

  1. In ZENworks Control Center, click the Policies tab.

  2. Click the policy group to display its properties.

  3. In the Members panel, click Add to display the Select Members dialog box.

    Because you are adding policies to the group, the Select Members dialog box opens with the Policies folder displayed.

  4. Click The Navigate icon next to a folder to navigate through the folders until you find the policy you want to select.

    If you know the name of the policy you are looking for, you can use the Item name box to search for the item. You can add only policies to the group. You cannot add other policy groups to the group.

  5. Click the underlined link in the Name column to select the policy and display its name in the Selected list box.

  6. (Optional) Repeat Step 4 and Step 5 to select additional policies.

  7. Click OK to add the selected policies to the Members list.

  8. Click OK to save the policy group.

3.8.3 Rename Policy Groups

You can rename a policy group. Renaming a group does not affect the group’s assignments to users and devices.

  1. In ZENworks Control Center, click the Policies tab.

  2. In the Policies list, select the check box next to the policy group you want to rename.

  3. Click Edit, then click Rename.

  4. Type the new name in the Name field, then click OK.

3.8.4 Move Policy Groups

You can move a policy group from one folder in the Policies list to another. Moving a group does not affect the group’s assignments to users and devices.

  1. In ZENworks Control Center, click the Policies tab.

  2. In the Policies list, select the check box next to the policy group you want to move.

  3. Click Edit, then click Move.

  4. Select the destination folder for the policy group, then click OK.

3.8.5 Delete Policy Groups

Deleting a policy group does not delete its policies. It does remove all assignments of the policy group to devices and users.

  1. In ZENworks Control Center, click the Policies tab.

  2. In the Policies list, select the check box next to the policy group.

  3. Click Delete, then click OK to confirm the deletion.