pushing a global template (allowed appl) from partner portal, deactivates the possibility to create a global template (allowed appl) at customer level

Hi Steven,

Pushing out a global template to a customer will stop the ability to configure the Base Policy in Central Admin portal.  This is expected behavior.  If you want to push a global template to a customer and also modify it, navigate to the customer's Central Admin Portal, clone the global template or create a new policy and make the changes there.  Also apply this to the users/computers you wish this to apply to.  The policies apply similar to firewall rules where the first policy it matches will be the one it takes. Any users/computers that do not match any policies will take the default global policy/base policy.

Hi all,

thank you for your answers.

MEric

Following your explanation, this would mean that for every new global template being published to our customers, we need to clone this global template in all of our customers Central Admin portals, so they would preserve the possibiltiy to change/overrule this themselves? Or am I missing something? Putting 'managed through Central Partner / Central Admin' in a more generic context and keeping your and my remark in mind, this would leave us with two options:

- Managed through Central Partner portal

- policies are pushed from the central partner portal

- policies cannot be changed through Central Admin, unless cloned from the pushed global template -> might not be feasible considering the number of new templates to be pushed and the amount of customers

- Managed through Central Admin portal

- all policies are applied from the Central Admin portal

- no policies are pushed from the Central Partner portal

Does this make sense?

Thank you for your answers.

Kr,

steven

Hi all,

thank you for your answers.

MEric

Following your explanation, this would mean that for every new global template being published to our customers, we need to clone this global template in all of our customers Central Admin portals, so they would preserve the possibiltiy to change/overrule this themselves? Or am I missing something? Putting 'managed through Central Partner / Central Admin' in a more generic context and keeping your and my remark in mind, this would leave us with two options:

- Managed through Central Partner portal

- policies are pushed from the central partner portal

- policies cannot be changed through Central Admin, unless cloned from the pushed global template -> might not be feasible considering the number of new templates to be pushed and the amount of customers

- Managed through Central Admin portal

- all policies are applied from the Central Admin portal

- no policies are pushed from the Central Partner portal

Does this make sense?

Thank you for your answers.

Kr,

steven

Hi Steven,

Policies are applied to users and computers in order from top to bottom.  When two policies are applied to the same user or computer, the one on top will take precedence and the lower ones are ignored.  Base policies will always be at the bottom and are by default a "Take this policy if no other policies are assigned to you".  Base policies always exist regardless of whether a global template is pushed out through Partner Portal or not; global templates only modify the base policy.

Global templates pushed from Central Partner Portal cannot be modified through Central Admin, however any administrator of that Central Admin can create a new policy or clone the base policy (Global template) and modify that.  For users that you assign the new policy to, they will only take the new policy and ignore the global template.

Could you elaborate on what is the end goal result you would like to see?  This may help me better understand your current situation as well as provide any possible methods to get this to work in a way you desire.