Understanding the Policy List

The policy list displays the information and status of policies created by all users. When a new endpoint registers to Control Manager, it goes through the filtered policies in the list in descending order. Control Manager assigns the new endpoint to a filtered policy when the following conditions are both satisfied:

  • The new endpoint matches the target criteria of the policy

  • The policy creator has the permission to manage the new endpoint

The following table describes the policy list columns that display on the Policy Management screen. Click a column to sort the data.

Table 1. Policy List

Column

Description

Priority

Displays the priority of the policies.

  • Control Manager lists policies from the highest to the lowest priority.

  • When administrators create a filtered policy, Control Manager saves the new policy as the lowest priority policy.

  • A specified policy takes priority over any filtered policies and remains on the top of the list. Administrators cannot reorder specified policies.

  • Control Manager places draft policies at the bottom of the list.

Policy

Displays the name of the policy

Parent Policy

This column only appears if the selected product is OfficeScan Agent.

If a policy is a child policy (that is, it inherited its settings from a parent policy), this column shows the name of the parent policy. Otherwise, N/A displays.

Deviations

This column only appears if the selected product is OfficeScan Agent.

If a policy is a child policy, this column shows the number of settings that have been changed on the policy and are therefore inconsistent with settings on the parent policy. If settings are consistent between the policy and its parent, 0 (zero) displays.

If a policy is not a child policy, N/A displays.

Targets

Displays how administrators select targets for the policy.

  • Specified: Uses the browse or search function to select specific targets for the policy. Specified policies remain static on the top of the policy list and take priority over filtered policies.

  • Filtered: Uses a filter to automatically assign current and future endpoints to the policy. Administrators can rearrange the priority of filtered policies. Hover over an item to conveniently view the filter criteria and make adjustments as necessary.

  • None: The policy creator saved the policy as a draft without selecting any targets.

Deployed

Displays the number of targets that have applied the policy settings or have unactivated product services

Click the number to view the policy status.

Pending

Displays the number of targets that have not applied the policy settings

Note:

If Hotfix 2575 is not installed, the Pending column includes the number of targets that have offline agents.

Click the number to view the policy status.

Offline

Displays the number of targets that have offline agents

Important:

This feature requires installing Hotfix 2575. Otherwise, the Pending column includes the number of targets that have offline agents and the Offline column does not display.

Click the number to view the policy status.

With Issues

Displays the number of targets that have not applied the policy settings due to unsupported policy deployment, no policy configuration, system errors, endpoint communication errors with the product server, unsupported endpoints, locally changed settings, disabled product services, or partial deployment

Click the number to view the policy status.

Owner

Displays the user who is currently assigned the policy

Note:

The default owner is the user who created the policy.

  • If you change the owner of a policy to a user account that does not have access rights to the specified targets, the new owner can modify the policy settings but cannot view the policy data.

  • You can also assign multiple owners by assigning the policy to an Active Directory group.

For more information, see Changing the Policy Owner.

Last Editor

Displays the user who last edited the policy

Note:

The numbers in Deployed and Pending columns only reflect the endpoints or managed products that an administrator has permission to manage.