Changing Policy Enforcement

You might need to change or stop policy enforcement for a particular server or a group of servers.

You can change policy enforcement in several ways:


Modifying a Policy That Is Being Enforced

To change a policy that is being enforced:

  1. In ConsoleOne, right-click the Distributed policy package object containing the policy to be modified > click Properties.

  2. Modify the policy as needed > click OK to exit the policy package properties.

The next time the Distribution containing this policy package is built, the following transpires:

  1. A new version of the Distribution is created because it had changed.
  2. The Policy Package Distribution is sent according to the Send schedule of the Channel.
  3. The Subscribers subscribed to the Channel will all receive and extract the Policy Package Distribution according to their extraction schedules.
  4. The modified policy will be enforced on the Subscribers where the Policy Package Distribution was extracted.


Stopping a Specific Policy From Being Enforced

To stop a specific policy from being enforced:

  1. In ConsoleOne, right-click the Distributed policy package object containing the policy to be stopped > click Properties.

  2. Click the policy to be stopped > do one of the following:

    1. Click the check box under the Enabled column to disable the policy.

    2. Click Remove to remove the plural policy.

      Plural policies can be deleted from the policy package because they were previously added using the Add button.

  3. Click OK to save the change and exit the policy package properties.

The next time the Distribution containing this policy package is built, the following transpires:

  1. A new version of the Distribution is created because it had changed.
  2. The Policy Package Distribution is sent according to the Send schedule of the Channel.
  3. The Subscribers subscribed to the Channel will all receive and extract the Policy Package Distribution according to their extraction schedules.
  4. The disabled/removed policy will no longer be enforced on the Subscribers where the Policy Package Distribution was extracted.


Removing Policy Enforcement for a Specific Subscriber

If you want to stop a distributed policy from being enforced on a specific Subscriber server, rather than on all Subscribers receiving that Distribution, do the following:

  1. In ConsoleOne, right-click the Subscriber object > click Properties.

  2. Click the Channels tab > click the Channel containing the policy to be removed from enforcement > click Remove > click OK.

  3. Click OK to close the Subscriber object's properties.

  4. On the Subscriber server's file system, delete the following files:

    • The Distribution directory containing the policy's Distribution file
    • The related Policy file (.POL) from the SMANAGER\POLICY directory (which was created when the Policy Package Distribution was extracted)
  5. Reset the Subscriber server to refresh its policy configuration.

The Subscriber will no longer receive the Policy Package Distribution containing that policy, nor will it continue to enforce the policy previously distributed to the Subscriber.


Stopping Enforcement of a Policy Package Distribution

If you need to stop enforcement of a Policy Package Distribution for all of the Subscribers where it was distributed, you must follow certain steps. Because the policy package was distributed, each Subscriber that received the Distribution will still be able to enforce that policy if you only delete the policy package object.

To stop enforcement, do the following:

  1. In ConsoleOne, delete the Distribution object for the Policy Package type.

    IMPORTANT:  If the policy package has other policies that you do not want to stop, then do not delete the package. Instead, just disable the policy that you want to stop.

  2. On the Subscriber server's file system, delete the .POL file that was created by the Policy Package Distribution.

    The .POL file is located under the ZENWORKS\PDS\SMANAGER\POLICIES directory.

  3. Refresh the policies on each Subscriber.

    You can do this from each Subscriber server's console using the Policy Refresh command, or from iManager using the Refresh option.

The policies in the Policy Package Distribution will no longer be enforced on the Subscriber after its policies have been refreshed. The refresh process clears its memory of all policies, then reloads them from the Policy Package Distributions existing in its file system.