Next Topic

Previous Topic

Book Contents

Machines

Policy Management > Machines

The Machines page assigns policies to individual machines. The list of machine IDs you can select depends on the machine ID / group ID filter.

Actions

  • Assign - Assigns policies to selected machines.
  • Clear Override - Clears KPM policy overrides on selected machines. After clicking Clear Override, the user must click Reprocess Policies to ensure the policy objects that were overridden before are reapplied to the agent. A KPM policy override condition exists if agent settings for a machine have been set manually, outside of the KPM module. For example, making changes to the agent menu of a machine using the Agent Menu page in the Agent module sets up an override condition for that agent machine. KPM policies will be ignored from then on. Clearing an override enables applied KPM policies to take effect.
  • Reprocess Policies - All policy objects assigned to a machine can be re-marked for deployment and reprocessed as though they were assigned to that machine for the first time. To reduce unnecessary server activity and network traffic, each policy object is deployed only once to a machine, even if additional policies are assigned to that machine that include the same policy object. If agent settings for a machine are unexpected, use this option to re-deploy all policy objects assigned to a machine.

Right Hand Pane

The right hand pane is divided into two horizontal sections.

  • Policies Assigned to Machine - Displays policies assigned by machine
  • Policies Assigned to Organizations/Machine Groups - Displays policies assigned by organization and machine group.

Actions

  • Remove - You can remove policies assigned to the machine.
  • Move Up and Move Down - You can re-order the sequence of policies assigned to the machine.

Policy Assignment Rules

  • Multiple policies can be assigned to any organization or machine group or machine.
  • A machine with multiple policies assigned to it has conflicting policies when both specify the same policy type.
    • Multiple policies are not in conflict if different policy types are specified.
    • The following policy types combine with each other so that no conflicts occur.
      • Event log alerts, distribute files, monitor sets, and agent procedures.
  • Policies are assigned by organization/machine group using the Organizations/Machine Groups page.
    • Policies assigned to a lower level in an organization hierarchy have precedence over policies assigned to a higher level in the same organization hierarchy.
    • Unless a lower level policy conflicts with it, policies assigned to a level apply to all lower levels.
    • When multiple policies are assigned to the same organization or machine group, the assigned policies have precedence in the order listed.
  • Policies can be assigned by machine using the Machines page.
    • Policies assigned by machine have precedence over all policies assigned to that machine by organization/machine group.
    • Policies assigned by machine have precedence in the order listed.
  • All policy assignments can be overridden by changing agent settings manually throughout the VSA.
    • Manual changes have precedence over all policies assignments.
  • A policy can be associated with a view definition in the Policies page.
    • When machine is assigned to a policy by organization or by machine group an associated view filters the machines associated with a policy. If a machine is not a member of the view definition, then the policy will not be propagated to that machine.
    • When a machine is assigned to a policy by machine, then the view associated with a policy is ignored and the policy will be propagated to that machine.
    • Associating a policy with a view does not, by itself, assign a policy to any machine.
    • The order of precedence for views depends on the policies they are associated with.