Manage configuration settings per policy and assign them at the site, folder, and agent levels to ensure compliance across your end users' Windows devices. They let you control device restarts after updates are installed through IT Automation profiles.

Manage configuration settings per policy and assign them at the customer, folder, and agent levels to ensure compliance across your end users' Windows devices. They let you control device restarts after updates are installed through IT Automation profiles.

For more info on policy behavior and available configurations, see Configuration Policies: overview

Create a new policy

Configuration policies are enforced on assigned devices as soon as they are created (or saved). They are then re-enforced every 12 hours to ensure consistency across all devices.

Note: 

• Full admin access is required to create and assign policies to sites, folders, and agents.
• Technicians can assign policies to individual agents only, as long as they have the required permissions for that site.
• Full admin access is required to create and assign policies to customers, folders, and agents.
• Technicians can assign policies to individual agents only, as long as they have the required permissions for that customer.

To create a configuration policy:

1. Go to Admin > Monitoring and automation > Configuration policies.

The Configuration policies page appears.

2. Click New policy.

The Create New Policy page appears.

3. Enter the policy name and description.

4. Toggle any configurations and select your settings for each. For more info on what each does, see Configuration policies

5. Click Create (top right of the page).

Assign a policy

You can assign policies for Sites, Folders, and Agents.

You can assign policies for Customers, Folders, and Agents.

Assign at Site level

Assign at Customer level

Note:

• All unassigned folders and devices under the site will inherit the policy.
• You can assign only one policy per site.
• All unassigned folders and devices under the customer will inherit the policy.
• You can assign only one policy per customer.

To assign a policy to a Site:

To assign a policy to a Customer:

1. Select a policy (or create one).

2. Click Assignment.

3. Select sites from the dropdown list.

3. Select customers from the dropdown list.

4. Click Add.

5. Click Save (top right of the page).

Your sites will appear under Assigned sites and the policy will be immediately applied to all associated and inherited agents.

Your customers will appear under Assigned customers and the policy will be immediately applied to all associated and inherited agents.

Assign at Folder level

Note:

• A policy assigned to a folder will override any assigned to the parent site.
• A policy assigned to a folder will override any assigned to the parent customer.
• All unassigned devices within the folder will inherit the policy.
• You can assign only one policy per folder.

To assign a policy to a Folder:

1. Select a policy (or create one).

2. Click Assignment.

3. Select sites from the dropdown list.

3. Select customers from the dropdown list.

4. Select folders from the dropdown list.

5. Click Add.

6. Click Save (top right of the page).

Selected folders will appear under Assigned folders and the policy will be immediately applied to all associated and inherited agents.

Assign directly to agents

When you assign a policy directly to an agent (within the agent console), it will override any policy inherited from higher levels (folder or site).

When you assign a policy directly to an agent (within the agent console), it will override any policy inherited from higher levels (folder or customer).

Note: You can assign only one policy per agent.

To assign a policy to an agent:

1. From Devices (on the sidebar), select the device.

The Agent Console appears.

2. Within the Profiles widget, click the edit icon () next to Configuration policy.

The Assign Configuration Policy window appears.

3. Select a policy from the dropdown menu. Then click Apply.

The policy is assigned to the device.

Edit a policy

You can edit the policy name, description, and configuration.

To edit the name or description:

1. Open the policy and click in either field to make your desired changes. 

2. Go to the top right of the page and click Save.

Your configuration policy has been changed. See Admin > Users and security > Audit log for more details.

To edit the policy configuration:

1. Open the policy and make the desired changes.

2. Go to the top right of the page and click Save.

Your configuration policy has been changed. See Admin > Users and security > Audit log for more details.

Unassign a policy

When a policy is unassigned, the configurations that were in place stay as they are — nothing gets rolled back on associated devices — but they’re no longer being enforced by that policy.

You can remove policies from your Sites and Folders within the policy itself. Removing them at the agent level can be done within the Agent Console itself.

You can remove policies from your Customers and Folders within the policy itself. Removing them at the agent level can be done within the Agent Console itself.

Note: Policies can be removed from specific agents within their respective agent consoles.

To unassign a policy:

1. Go to Admin > Monitoring and automation > Configuration policies.

The Configuration policies page appears.

2. Select the policy.

The Policy page appears.

2. From the Assignment tab, hover over the assigned site and click the delete icon ().

2. From the Assignment tab, hover over the assigned customer and click the delete icon ().

3. Go to the top right of the page and click Save.

To unassign a policy directly from an agent:

1. From Devices (on the sidebar), select your device.

The Agent Console appears.

2. Within the Profiles widget, click the edit icon () next to Configuration policy.

The Assign Configuration Policy window appears.

3. Click the "x" icon beside the profile's name. Then click Apply.

The policy is removed from the agent.

Delete a policy

When a policy is deleted, it’s removed from all associated assignments across agents. The configurations that were in place stay as they are — nothing gets rolled back — but they’re no longer being enforced by that policy.

To delete a policy:

Go to Admin > Monitoring and automation > Configuration policies.

The Configuration Policies page appears.

2. Click Actions. Then select Delete.