Novell Doc: ZENworks 11 SP2 Endpoint Security Policies Reference - Assigning Policies to Devices

11.2 Assigning Policies to Devices

Security policies apply to workstation devices only. If you assign a security policy to a server device, it is not applied.

In ZENworks Control Center, click the Policies tab.
In the Policies list, select the check box next to the policies and policy groups you want to assign.
Click Action > Assign to Device.
Browse for and select the devices, device groups, and device folders to which you want to assign the group:
1. Click next to a folder to navigate through the folders until you find the device, group, or folder you want to select.
  
  If you are looking for a specific item, such as a Workstation or a Workstation Group, you can use the Items of type list to limit the types of items that are displayed. If you know the name of the item you are looking for, you can use the Item name box to search for the item.
2. Click the underlined link in the Name column to select the device, group, or folder and display its name in the Selected list box.
3. Click OK to add the selected devices, folders, and groups to the Devices list.
Click Next to display the Policy Conflict Resolution page.

This page lets you select how to resolve conflicts if another policy of the same policy type is assigned to one of the selected devices’ users. For example, assume that UserA is assigned WirelessPolicy1. You are now assigning WirelessPolicy2 to DeviceA. If UserA logs in to DeviceA, a decision must be made about which policy (WirelessPolicy1 or WirelessPolicy2) to apply.
Select one of the following policy conflict resolution methods:

Device Only: Applies the device-associated policy only. If a user-associated policy exists, it is not applied.

User Only: If a user-associated policy exists, applies the user-associated policy. If no user-associated policy exists, applies the device-associated policy.
Click Next to display the Finish page, review the information and, if necessary, use the Back button to make changes to the information.

If you want the policies to be immediately enforced on all the assigned devices, select Enforce Policies Immediately on all Assigned Devices.
Click Finish.

The policies or policies groups are assigned to the selected devices, device groups, and device folders. You can view the assignments on the Relationships page of the policies or policy groups.