4.9 Changing Policy Enforcement

You might need to change or stop policy enforcement for a particular server or a group of servers.

You can change policy enforcement in several ways:

4.9.1 Modifying a Policy That Is Being Enforced

To change a policy that is being enforced:

  1. In ConsoleOne, right-click the Distributed Server Package object containing the policy to be modified, then click Properties.

  2. Modify the policy as needed, then click OK to exit the policy package properties.

The next time the Distribution containing this policy package is built, the following transpires:

  1. A new version of the Distribution is created because it had changed.

  2. The Policy Package Distribution is sent according to the Send schedule of the Channel.

  3. The Subscribers subscribed to the Channel each receive and extract the Policy Package Distribution according to their extraction schedules.

  4. The modified policy is enforced on the Subscribers where the Policy Package Distribution was extracted.

4.9.2 Stopping a Specific Policy From Being Enforced

To stop a specific policy from being enforced:

  1. In ConsoleOne, right-click the Distributed Server Package object containing the policy to be stopped, then click Properties.

  2. Select the policy to be stopped, then do one of the following:

    1. Select the check box under the Enabled column to disable the policy.

    2. Click Remove to remove the plural policy.

      You can delete plural policies from a policy package because they were previously added using the Add button.

  3. Click OK to save the change and exit the policy package properties.

The next time the Distribution containing this policy package is built, the following transpires:

  1. A new version of the Distribution is created because it had changed.

  2. The Policy Package Distribution is sent according to the Send schedule of the Channel.

  3. The Subscribers subscribed to the Channel each receive and extract the Policy Package Distribution according to their extraction schedules.

  4. The disabled/removed policy is no longer enforced on the Subscribers where the Policy Package Distribution was extracted.

4.9.3 Removing Policy Enforcement for a Specific Subscriber

If you want to stop a distributed policy from being enforced on a specific Subscriber server, rather than on all Subscribers receiving that Distribution, do the following:

  1. In ConsoleOne, right-click the Subscriber object, then click Properties.

  2. Select the Channels tab, select the Channel containing the policy to be removed from enforcement, click Remove, then click OK.

  3. Click OK to close the Subscriber object’s properties.

  4. On the Subscriber server’s file system, delete the following files:

    • The Distribution directory containing the policy’s Distribution file

    • The related Policy file (.pol) from the \smanager\policy directory (which was created when the Policy Package Distribution was extracted)

  5. Reset the Subscriber server to refresh its policy configuration.

The Subscriber no longer receives the Policy Package Distribution containing that policy, nor does it continue to enforce the policy previously distributed to the Subscriber.

4.9.4 Stopping Enforcement of a Policy Package Distribution

If you need to stop enforcement of a Policy Package Distribution for all of the Subscribers where it was distributed, you must follow certain steps. Because the policy package was distributed, each Subscriber that received the Distribution can still enforce that policy if you only delete the policy package object.

To stop enforcement, do the following:

  1. In ConsoleOne, delete the Distribution object for the Policy Package type.

    IMPORTANT:If the policy package has other policies that you do not want to stop, then do not delete the package. Instead, just disable the policy that you want to stop.

  2. On the Subscriber server’s file system, delete the .pol file that was created by the Policy Package Distribution.

    The .pol file is located under the \zenworks\pds\smanager\policies directory.

  3. Refresh the policies on each Subscriber.

    You can do this from each Subscriber server’s console using the Policy Refresh command, or from iManager using the Refresh option.

The policies in the Policy Package Distribution are no longer enforced on the Subscriber after its policies have been refreshed. The refresh process clears its memory of all policies, then reloads them from the Policy Package Distributions existing in its file system.