Create a Windows Policy
Last updated
Last updated
Make sure you have the following configured before you start:
Faronics Deploy Agent Installed on the Computers you wish to install the applications on.
Select the Control Grid tab on the top menu bar.
Navigate to the Policies tab.
Click the CREATE NEW POLICY drop-down menu.
Select WINDOWS POLICY from the menu.
Enter a name for the policy, Seattle Office, in this example.
Select an update mode, Semi-Automatic in this example.
Select a schedule mode, Once a day, in this example.
Set the time delay for maintenance mode after booting; the default is 15 min.
Optional: Check the box to Notify User that computer is entering maintenance mode. Default is enabled.
Optional: Check the Allow Snooze box to allow the user to snooze maintenance mode. Default is enabled.
Optional: Enter a Password to protect against unauthorized uninstalling of the Deploy Agent.
Optional: Check the Enable proxy box if your computers require a proxy to reach the Deploy cloud server.
If you enabled the proxy setting, enter a Proxy Address. Otherwise skip to Applications step 1.
Enter the proxy Port.
Optional: Check the User Authentication box to require authorization for the proxy. Default is disabled.
Select the User Authentication type from the drop-down list, BASIC, NTLM, or DIGEST.
Enter the Username for the proxy.
Enter the Password for the proxy.
Enter the Domain for the proxy.
Applications
Select Applications on the left menu.
The Managed Applications will be configured to update based on the Policy Update Mode selected in step 6 (Semi-Automatic in this example).
The Semi-Automatic default settings are used; if you make any changes to the application Update Modes, the policy will become a custom policy. See Policy Update Mode and Policies (Windows) for further information on policies.
The Winget Applications are on the tab to the right of Managed Applications; click the tab to display and configure the settings for all Winget Applications installed.
Windows Updates
Select Windows Updates in the menu on the left.
Optional: If you do not want Faronics Deploy to manage the Windows Updates for this policy (this will only affect computers connected to this policy), check the do not manage Windows Updates box; skip to step 19.
By default, the Automatic Install is selected for the Windows Updates; you can click the grid alongside any Windows Update Type that you do not wish to automate.
Optional: If you wish to Manage driver updates, check this box. Once this is enabled, Drivers will appear as a category in the list of managed updates.
Optional: Check the Download and keep Windows Update ready when available. Default is enabled.
Optional: Check the Force auto reboot prior to installation if user is logged in box. Default is disabled.
Optional: Check the Allow user to defer reboot (if required) box if you wish to enable this and enter a number of times to allow this to occur before it becomes mandatory to reboot, a maximum of 5 times. Default is unchecked.
Select a Patch Scan Frequency, Once every 6, 12, or 24 hours. Default is set to 24 hours.
Scroll down to the Additional Settings for Windows 10, and choose when updates are installed, either Semi-Annual Channel (Targeted) (this is the default) or Semi-Annual Channel.
Semi Annual Channel (Targeted) - Ready for most people.
Semi Annual Channel - Ready for widespread use in organizations.
For further information on Additional Settings for Windows 10, see Policies (Windows)
Optional: Set a Feature Update Deferral; this can be set from 0 - 365 days. The default setting is 0.
Optional: Set the Quality Update Deferral; this can be set from 0 - 30 days. Default is 30 days.
Anti-Virus
Select Anti-Virus in the menu on the left.
Click the ENABLE ANTI-VIRUS button.
Configure your virus settings. See Faronics Anti Virus & Firewall Protection Configuration for further information on Anti-Virus, Firewall , & Computer Settings.
Remote
Select Remote in the menu on the left.
Check the box if you want to ask for user permission before remotely accessing a computer (this will apply to all remote access methods).
This is configurable even if you don't have the Remote Pro functionality enabled on your license.
Click the green ENABLE REMOTE PRO button.
This will install Remote Pro on all computers that have this policy.
Click Install to confirm that you want to install Remote Pro on all computers with this policy.
Select the server that is geographically closest to you from the drop-down list.
If you wish to remove Remote PRO from all computers on this policy click the UNINSTALL REMOTE PRO button.
Click the SAVE button.
A Windows Policy has successfully been created.
