Summary

How to define a policy in Guaranteed State.

For details of policy objects you can use to create your own policies, please refer to Integrated Product Packs reference

On this page:

Defining a policy

You define a policy from Guaranteed State->Administration->Policies. Click New then enter a name and description for the policy and click Save.

Managing rules

Policies need rules in order to be of any use. The following headings show how to define rules, caveats for editing rules and how to associate rules with policies.

Defining a rule

You define a rule from Guaranteed State->Administration->Rules. Click New then enter a name and description, and select a type (Check or Fix). In our example, we're choosing a fix rule, then click Save.

On the Triggers tab we're going to define that the rule should be evaluated periodically, every 30 seconds. From the Trigger 1 dropdown menu we choose Periodic (seconds) and set the Interval Seconds to 30.

Do not specify a period less than 30 seconds. The rule may be accepted by the management interface but the Tachyon client will not apply it.

On the Precondition tab, we will not define a precondition rule, but you can review the available choices, if you do want to set one. 

On the Check tab, we'll define a check rule that requires that there is a value MyValue in the registry hive HKLM and subkey SOFTWARE\MyApp. Its value should be of type REG_DWORD and it should be 0.

If any part of the Subkey is missing, or the Name or Value fail to match this check rule, then the fix rule will be applied.

New Rule Check tab

On the Fix tab, the fix rule will be identical to the check rule. This means that if the registry is not consistent with the check rule, it will be made consistent.

If any part of the Subkey does not exist, or the Value or Name is missing or has a different value or type, then all of these discrepancies will automatically be corrected and the registry value made to be consistent with the check rule.


New Rule Fix tab

Editing existing rules

You can edit a rule by selecting it with the checkbox on the left and then selecting Edit.

Cloning a rule

You can clone (copy) a rule by selecting it with the checkbox on the left and then selecting Clone. When you do this, a copy of the rule is made. You will be prompted to enter a new name for the cloned rule. After this you can modify any property of the cloned rule and save it.

Viewing Rule Details

You can view the rule details for a rule by clicking the Details link displayed on the rules page. 

Enabling and disabling rules

You can enable and disable rules by selecting the rule with the checkbox on the left and then selecting Disable, if the rule is enabled, or Enable, if the rule is disabled.

Disabled rules are shown with a disabled icon against them, as shown opposite.

A disabled rule ceases to have effect within any policy that refers to that rule, when that policy is redeployed. In effect, a disabled rule acts as if the rule is not part of the policy.

You must redeploy any policies which contain a disabled rule for the change to become effective on any devices targeted by the policies.

If you enable a previously disabled rule then the rule becomes active again. You must redeploy any policies containing the rule for the change to become effective on any devices targeted by the policies.

Associating a rule with a policy

You associate a rule with a policy from Guaranteed State→Administration→Policies by selecting the rule using with the checkbox on the left, then selecting Edit.

The available rules are on the left of the page. We select the rule(s) we want to associate with the policy using the checkboxes and then clicking  the  button.

When we have selected all the rules we wish to associate, we click Save.