By default, any change made to a setting in a parent policy is automatically applied but not enforced in a child policy. This means that the setting can still be modified in the child policy. For example, an administrator can undo an inherited change to an individual user's policy. However, you can optionally enforce these changes in child policies.
For user policy, this means you can enforce changes made to a group policy when they are inherited by users and groups lower down the group hierarchy.
For machine policy. this means you can enforce changes made to the common gateway policy or common client policy when they are inherited by individual gateways or client machines respectively.
To enforce inherited changes in child policies
In the Policy Editor, choose Tools, Automatically Enforce Modified Settings. This menu item has a checkbox:
|
Copyright © 2014 CA.
All rights reserved.
|
|