Enterprise Administration Guide › Deploying Sample and Best Practice Policies › Policy Deployment › How to Deploy Policies in a Staged Manner › Disable Sample Policy Enforcement

Disable Sample Policy Enforcement

By default, the sample policy scripts set Warning mode Warning Mode is a property that you can apply to a resource, and an option that you can apply to a class. If Warning mode is applied to a resource or a class and an access violates an access rule, CA Access Control writes an audit log entry with the return code W, but permits the access to the resource. If a class is in Warning mode, all the resources in that class are in Warning mode. for all policy rules. When you enable policy enforcement, you remove Warning mode. To disable policy enforcement, you reintroduce Warning mode.

Note: This procedure explains how to disable policy enforcement for a single policy. For more information about how to disable policy enforcement for multiple policies when you perform system maintenance, see the Endpoint Administration Guide for your operating system.

To disable sample policy enforcement

1. Edit the policy script to change each instance of warning- to warning.

   When you run a rule that sets warning for a resource or accessor, CA Access Control sets Warning mode for the resource or accessor.

2. Deploy the edited policy.

   Policy enforcement is disabled.

More information:

How to Perform System Maintenance