4.2 Removing Policy Assignments From Users and Devices

When a policy is assigned to an object (device, user, folder, or group), the assignment is reflected as a relationship in the policy’s properties and in the object’s properties. You can edit the relationships for either the policy or the object to remove the assignment.

The following sections provide instructions for two common assignment removal scenarios:

4.2.1 Remove Multiple Policy Assignments From the Same Object

The following instructions explain how to remove multiple policy assignments from a single object such as a device, device folder, device group, user, user folder, or user group. For example, these instructions can be used to remove both an Application Control policy assignment and a Firewall policy assignment from a single device.

  1. In ZENworks Control Center, click the object (device, device folder, device group, user, user folder, or user group) from which you want to remove policy assignments.

    For device and user folders, you need to click Details next to the folder name rather than click the name.

  2. Click Assignments.

  3. In the Assigned Policies panel, click the Direct tab to ensure that it is active.

    The Direct tab displays all policies that are assigned directly to the object. Direct assignments are the only assignments you can remove for the object.

  4. Select the check box next to the assignments you want to remove, then click Remove.

4.2.2 Remove a Single Policy Assignment From Multiple Objects

The following instructions explain how to remove a single policy assignment from multiple objects such as devices, device folders, device groups, users, user folders, or user groups. For example, these instructions can be used to remove an Application Control policy assignment from a device, a device group, and a user at the same time.

  1. In ZENworks Control Center, click the Policies tab.

  2. In the Policies list, click the policy for which you want to remove assignments.

  3. Click Relationships.

  4. In the Device Assignments panel, select the check boxes next to the devices, device groups, and device folders that you no longer want the policy assigned to, then click Remove.

  5. In the User Assignments panel, select the check boxes next to the users, user groups, and user folders that you no longer want the policy assigned to, then click Remove.