How to Add/Remove inheritance from Policies

Products

• Endpoint Protection

Issue/Introduction

Enable and Disable the inheritance in Symantec Endpoint Protection Manager (SEPM).

Resolution

Disabling and enabling a group's inheritance. You can disable and enable a group's inheritance at any time. By default, inheritance is enabled whenever you create a new location for a group.

To disable and enable a group's inheritance

 1. In the SEPM console, click Clients.
 2. On the Clients page, select the group for which you want to disable or enable inheritance.
 3. In the group name pane, on the Policies tab, do one of the following tasks: 
 - To disable inheritance, uncheck Inherit policies and settings from parent group "Group Name".
 - To enable inheritance, check Inherit policies and settings from parent group "Group Name", and then click Yes when asked to proceed.
 

To withdraw a shared policy on the Policies page -
 
 1. In the SEPM console, click Policies.
 2. On the Policies page, click the type of policy that you want to withdraw.
 3. In the policy type Policies pane, click the specific policy that you want to withdraw.
 4. On the Policies page, under Tasks, click Withdraw the Policy.
 5. In the Withdraw Policy dialog box, check the groups and locations from which you want to withdraw the policy.
 6. Click Withdraw.
 7. When you are prompted to confirm the withdrawal of the policy from the groups and locations, click Yes.

To withdraw a shared or non-shared policy on the Clients page -
 
 1. In the SEPM console, click Clients.
 2. On the Clients page, under View Clients, select the group for which you want to withdraw a policy.
 3. On the Policies tab, uncheck Inherit policies and settings from parent group "Group Name". You must disable inheritance for this group. If you do not uncheck inheritance, you cannot withdraw a policy.
 4. Under Location-specific Policies, scroll to find the name of the location for which you want to withdraw a policy.
 5. Locate the policy for the location that you want to withdraw.
 6. Click Tasks, and then click Withdraw Policy.
 7. In the Withdraw Policy dialog box, click Yes.

Additional Information

Disabling a group's inheritance