Description:
After deploying a policy on a windows endpoint, unable to unassign the policy from ENTM UI
<Please see attached file for image>
The following error is received in the policyfetecher.log on the endpoint where the unassign fails
WARNING: The policy: Test policy loc group#01 is deployed. The policy cannot be deleted.
Solution:
The following commands need to be invoked on the endpoint and the ENTM server via 'selang'
AC>sr policy("Test policy loc group#01") useprops(EXTENDED_SIGNATURE)
AC>chres POLICY("Test policy loc group#01") finalize noexit
1.On the endpoint do the following via selang;
'find POLICY' and identify the policy that needs removing
2.undeploy POLICY ( policyName )
3.rr RULESET ("policyName#01") noexit
4.rr POLICY ("policyName#01") noexit
5.rr GPOLICY ("policyName")
Note that the policy version number from steps 1-2 may be different
6.Run 'find DEPLOYMENT' and 'find GDEPLOYMENT' on both endpoint and DMS, any objects that exist on the endpoint but NOT on the DMS need to be removed from the ENDPOINT with:
rr DEPLOYMENT deploymentName
rr GDEPLOYMENT deploymentName
Note: To connect to the DMS__ and DH__ through the command line, please use the following 'selang' commands from the Enterpriser Management server
AC>host [email protected]> AC>host [email protected]>