You can assign security policies to users, workstation devices, and the Management Zone. Security policies do not apply to server devices; if you assign a security policy to a server or server folder, the policy is not applied.
When you assign a policy to a user, it is applied when the user is logged in to a ZENworks Server. When you assign a policy to a device, it is applied when the device starts, regardless of whether or not a user is logged in. When you assign a policy to the Management Zone, it becomes a default policy that is only applied after user-assigned and device-assigned policies.