A Disk Encryption policy can either be enabled or disabled. When a device receives an enabled policy, the Full Disk Encryption Agent applies the policy. When a device receives a disabled policy, the agent ignores the policy.
By default, a Disk Encryption policy is enabled during creation of the policy. The following sections explain how to disable a policy and enable it again.
When you disable a policy that is currently assigned to devices, the policy is removed after the next device refresh. With the Disk Encryption policy, this causes the disks to be unencrypted and the ZENworks PBA to be removed.
When you assign a disabled policy to devices, it is not applied until you enable it.
In ZENworks Control Center, click the Policies tab.
Select the check box next to the policy that you want to disable.
Click Action > Disable.
In the Policies list, the Enabled status for the selected policy is changed to No.
The Full Disk Encryption Agent does not apply disabled policies that are assigned to the device. To have the policy applied, you must enable it:
In ZENworks Control Center, click the Policies tab.
Select the check box next to the policy that you want to enable.
Click Action > Enable.
In the Policies list, the Enabled status for the selected policy is changed to Yes. The policy is applied at the next device refresh.