Cannot Remove the Status of a Policy Version

Troubleshooting Guide › Deploying Policies › Cannot Remove the Status of a Policy Version

Cannot Remove the Status of a Policy Version

Symptom:

A policy version is not effective on a host, but I cannot remove the status of the policy version. This prevents me from deleting the policy version.

Solution:

To fix this problem, you must manually remove the policy status.

To manually remove the policy status, do the following:

Remove the status of the policy version on the endpoint.
1. Execute the following selang command on the endpoint:
```
sr HNODE __local__
```
2. Find the name of the policy in the Policy Status section of the output, and make a note of the Updated by user for the policy.
3. Execute the following selang command on the endpoint:
```
er HNODE __local__ policy(name(policyName#policyVersion) status(undeployed) updator(userName))
```
  policyName#policyVersion
  
  Defines the name and version number of the policy version that you want to delete.
  
  userName
  
  Defines the name of the Updated by user.
  
  The status of the policy version is removed on the endpoint.
Remove the status of the policy version on the DMS.
1. Execute the following selang command on the DMS:
```
sr HNODE hnodeName
```
  hnodeName
  
  Defines the name of the host on which the policy version is deployed.
2. Find the name of the policy in the Policy Status section of the output, and make a note of the Updated by user for the policy.
3. Execute the following selang command on the DMS:
```
er HNODE hnodeName policy(name(policyName#policyVersion) status(undeployed) updator(userName))
```
The status of the policy version is removed on the DMS.

Example: Remove the Status of a Policy Version on an Endpoint

The following example removes the status of version 01 of a policy named mypolicy on an endpoint:

AC> sr HNODE __local__
(localhost)
Data for HNODE '__local__'
-----------------------------------------------------------
Defaccess         : R
Audit mode        : Failure
Owner             : Domain\Administrator (USER)
Create time       : 28-Feb-2010 12:34
Update time       : 04-Mar-2010 05:10
Updated by        : +policyfetcher (USER)
Effective UID     : superadmin
Policy Status     :
    mypolicy#01   : Deployed               Updated by: superadmin  On: 04-Mar-2010 05:10
    Deviation     : Unset                  Updated on: N/A

AC> er HNODE __local__ policy(name(mypolicy#01) status(undeployed) updator(superadmin))
(localhost)
Successfully updated HNODE __local__

More information:

Policy Versions That You Cannot Delete

editres Command—Modify Resource Records