What Order are Internal Policies Applied to Users?

Products

• Symantec Products

Issue/Introduction

This article details the order policies are applied to Internal Users of PGP Universal Server.

 

Resolution

PGP Universal Server lets you group internal users and apply policies to the groups. The correct policy settings will be applied to new users automatically, as the users interact with PGP Universal Server for the first time. If you update the policies later, user installations associated with the changed policies will be updated automatically.

You can define different policies for different groups of users, so that each group gets settings appropriate for their environment. You can then create a customized installer for that user group, which will automatically apply the correct policy.

After you distribute the installer to the appropriate users, you can change a policy's settings. Users will automatically see those changes the next time they interact with PGP Universal Server.

This article describes how Internal User Policies are applied to users enrolling with a PGP Universal Server.

 

Note: This article applies to PGP Universal Server 2.x and above.

This article describes how Internal User Policies are applied to users enrolling with a PGP Universal Server.

During client enrollment with the server, if a user is a member of two separate LDAP user groups that are associated with separate Internal User Policy groups on the PGP Universal Server, the user is randomly assigned to the first group contacted within the LDAP directory.

Important:

When creating user policies, to ensure that users are placed in the desired policy groups, create policies that will include distinct LDAP attributes.

Example:

If you wanted to create a PGP Whole Disk Encryption user policy for laptop users in a Sales group in Active Directory, ensure that users in the Sales group are not included as part of another group that is associated with a different policy on the PGP Universal Server.