Working with Parent Policy Settings

A Control Manager administrator creating a parent policy for OfficeScan Agent can configure certain settings on the policy to be inherited, customized, or extended.

Note: These options are not available on other managed products.
  • Inherit from parent

    • A child policy administrator cannot change the setting at all. An OfficeScan administrator can manually change the setting from the OfficeScan server console. However, the setting will be overwritten when Control Manager deploys policies to the OfficeScan server.

      For example, a Control Manager administrator can create a parent policy that enforces the exclusion of PDF files from a Manual Scan.

    • Changes to the setting on the parent policy are always enforced on the child policy.

    • If the permission on the parent policy changes from "Inherit from parent" to "Are customizable" or "Extend from parent", the child policy administrator can customize or extend the current setting. Changes to the setting on the parent policy are no longer enforced.

  • Are customizable

    • A child policy can deviate from the setting configured in the parent policy.

      For example, if Scheduled Scan on the parent policy runs weekly but is customizable, the child policy administrator can change the schedule to daily.

    • Changes to the setting on the parent policy are never enforced on the child policy.

    • If the permission on the parent policy changes from "Are customizable" to "Inherit from parent", the current setting on the parent policy overwrites the setting on the child policy. Changes to the setting on the parent policy are always enforced.

  • Extend from parent

    • A child policy administrator can add to the items configured in the parent policy.

      For example, if the parent policy excludes 20 file names from being scanned during a Manual Scan, the administrator can add 10 more safe and trustworthy files to the child policy.

    • Items added or removed from the parent policy are also added or removed from the child policy. A removed item can be added back to the child.

    • If the permission on the parent policy changes from "Extend from parent" to "Inherit from parent", items in the child policy that have no match in the parent are removed. Changes to the items on the parent policy are always enforced.

The following table lists the parent policy settings that can be inherited, customized, or extended.

Setting and Path

Available Options

Inherit From Parent

Are Customizable

Extend From Parent

Scan schedule

Scheduled Scan Settings > Target tab > Schedule section

 

File extensions to scan

Manual Scan / Real-time Scan / Scan Now / Scheduled Scan Settings > Target tab > Files to Scan section > Files with the following extensions option

 

Scan exclusion lists (directories, files, and file extensions to exclude from scans)

Manual Scan / Real-time Scan / Scan Now / Scheduled Scan Settings > Scan Exclusion tab

 

When selecting Extend from parent from a scan exclusion list, the list expands to show a Child Policy Restrictions section where the parent policy creators can specify items that child policies cannot exclude from scans.