Certain key points that you must be aware of before you assign a policy to a device are as follows:
If you are assigning a Local File Rights policy to a network made up of devices running different languages, see Section 4.11, Assigning the Local File Rights Policy to Devices Running Different Languages.
The Dynamic Local User policy and The Roaming Profile policy are not supported on a 64-bit Windows Server 2003 device.
Perform the following steps to assign a policy to a device:
In ZENworks Control Center, click the
tab.In the
list, select the check box next to the objects such as policies or policy groups.Click
> .Browse for and select the devices, device groups, and device folders to which you want to assign the group. To do so:
Click next to a folder (for example, the Workstations folder or Servers folder) to navigate through the folders until you find the device, group, or folder you want to select.
If you are looking for a specific item, such as a Workstation or a Workstation Group, you can use the
list to limit the types of items that are displayed. If you know the name of the item you are looking for, you can use the box to search for the item.Click the underlined link in the
column to select the device, group, or folder and display its name in the list box.Click
to add the selected devices, folders, and groups to the list.Click
to display the Policy Conflict Resolution page.Set the priority between device-associated policies and user-associated policies for resolving conflicts that arise when policies of the same type are associated to both devices and users.
User Last: Select this option to apply policies that are associated to devices first and then the users.
Device Last: Select this option to apply policies that are associated to users first and then the devices.
Device Only: Select this option to apply policies that are associated only to devices.
User Only: Select this option to apply policies that are associated only to users.
Click
to display the Finish page, review the information and, if necessary, use the button to make changes to the information.If you want the policies to be immediately enforced on all the assigned devices, select
.Polices might not be enforced immediately if the server is loaded, the duration for policies to be enforced on the managed devices depends upon the server load.
Click
.The following points are applicable when you assign a policy to a device:
If you assign a DLU policy to a device on which a user has logged in, the user is prompted to log in to the device again. Unless the user logs in to the device again, no new policies are enforced on the device.
When you assign a ZENworks Explorer Configuration Policy to a device, the settings configured in the policy are not immediately reflected on the device. For example, even if
is enabled in the policy, the ZENworks icon is displayed for a few seconds on the device after the policy is assigned to the device.If both user-associated and device-associated policies are effective for a device, only the policy that takes precedence according to the Policy Conflict Resolution settings is applied on the device. However, the
status for both policies is displayed as in the ZENworks Adaptive Agent iconUser settings of a device associated Group policy cannot be enforced in console sessions of a Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2 device.
On a managed device, if you launch a published application that is installed on a Citrix server having iPrint policy configured, it might take considerable time for the policy to be enforced on the server. During this period, the iPrint functionality is not available for the application.
The iPrint policy is not enforced on the device if you set the ZENUserDaemon and the DisableUserDaemonHealing registry keys on the device to enable the user configuration settings configured in the Group policy to be applied in terminal sessions of Windows Server 2003, Windows Server 2008, and Windows Server 2008 R2 devices.