Faronics Deploy Docs
Deploy HomeDeploy Sign inSubmit a ticket
  • About Faronics Deploy
  • Highlights
    • Top 10 Trending Topics
    • What's New?
  • Getting Started
    • Quick Start Guide
      • System Requirements
      • Initial Setup and Configuration
        • Sign Up - Create a Faronics Deploy Account
        • Download and Install Deploy Agents
          • Windows Install Guide
            • Download MSI Installer to Deploy via Active Directory
          • Mac Install Guide
        • Login to Deploy for the First Time
        • Configure User Profile and Organization Settings
          • How to Configure your User Profile
          • How to Configure your Organization Settings
        • Add Administrators - Invite your Team and Assign Roles
        • Manage Tags
          • Apply a Tag
    • Navigating the User Interface
      • Deploy User Interface Views
        • Control Grid
          • Dashboard View
          • Applications View
          • Windows Updates View
          • OS Deployment View
          • Anti-Virus View
          • Inventory View
          • Policies View
        • Analytics
          • Applications View
          • Usage Reports View
          • Windows Updates Status View
          • Anti-Virus Reports View
          • Deploy Diagnostics View
        • Tickets View
        • Tasks View
      • Using the Control/Smart Grids
      • Using the Action Toolbar
      • Computer States and Actions
        • Handling Offline Computers
        • Wake-On-LAN
          • Designate Last Man Standing (LMS) computers
      • Light Mode/Dark Mode View
  • Feature Definitions and Glossary
  • Action Toolbar
  • App Preset
  • Custom App
  • Policies (Windows)
  • Policies (macOS)
  • Policy Update Mode
  • Application Management
    • Applications Overview
    • Navigating the Applications Control Grid
    • Cache Server: Save Bandwidth
    • Groups Configuration
      • Create a Group
      • Delete a Group
      • Add Computer(s) to a Group
        • Assign a Computer to a Group via the Deploy Agent Download and Install
        • Assign Computers to a Group After they Appear in the Dashboard
        • Group Computers Using a Naming Convention
        • Group Computers Based on Criteria in Inventory
      • Perform Actions on a Group of Computers
        • Perform Actions via the Action Toolbar on a Group of Computers
    • Install, Uninstall & Update Applications
      • Install Application(s)
        • Install Built-In Application(s)
        • Install an Application on All Computers in Deploy
        • Install an Application Using Winget
          • Enable and Install Winget
          • Install an Application Using the Winget Tool
        • Install an External Application (Custom App)
          • Create and Install a Custom App
            • Hosting a Custom App - URL or Network Path
          • Edit a Custom App
          • Copy a Custom App
          • Request Assistance From a Deployment Specialist
          • Example: Installing MS Office 365 as a Custom App
        • Install a Pre-Defined Group of Applications (App Presets)
          • Create an App Preset
          • Install an App Preset
          • Manage App Presets
        • Install an Application on a Group of Computers
        • Schedule an Install of Application(s)
          • Schedule an Install of an Application
          • Schedule an Install of Multiple Applications
      • Uninstall Application(s)
        • Uninstall an Application From a Group of Computers
        • Uninstall an Application From all Computers
        • Schedule an Uninstall
      • Update Application(s)
        • Performing Updates On-Demand
        • Update via Apps with Recent Updates Grid
        • Update Applications Using Policy Modes
    • Application Management for macOS
      • Install Application on macOS
        • Install Built-In Application(s) on macOS
        • Install a Custom App (External) on macOS
          • Create and Install a Custom App on macOS
      • Update an Application on macOS
      • Uninstall Application on macOS
      • Shell Scripts on macOS
  • WINDOWS UPDATES
    • Navigating the Windows Updates Control Grid
  • Manual Windows Updates Approval
    • Manually Approve All Windows Updates for All Computers (Install All Updates)
    • Manually Install Windows Updates on a Group of Computers
    • Manually Approve a Windows Update Category (in a Policy) for all Computers
    • Manually Approve an Individual Windows Update in a Policy for All Computers
    • Manually Approve or Deny Individual Windows Updates via Pending Windows Updates
    • Patch Scan (On-Demand)
  • Automated Windows Updates Approval
    • Automated Windows Updates Using Policies
    • Automated Windows Updates Use Case: Testing Patches
    • Patch Scan (Using a Policy)
  • OS DEPLOYMENT
    • Navigating the OS Deployment Control Grid
    • Imaging Utility Requirements
    • Getting Images Ready for Deployment
      • Loading Images from ISO Files
        • Download and Install the Faronics Deploy Imaging Server Tool
        • Loading ISO Image Files via the Faronics Deploy Imaging Tool
      • Building Images for Deployment - Template Machine
    • Capturing Images
    • Deployment Packages
      • Deployment Package Install Settings
    • Post Imaging Actions
    • USB Media Creator
      • Generate a Portable USB Creator (Used to Create a Recovery USB Drive)
      • Create a Recovery USB Flash Drive from a Portable USB Creator
    • Inject Drivers into the boot.wim File
    • Abort the Sysprep Task
  • OS MANAGEMENT
  • OS Management Overview
  • Create a Configuration
    • System and Security
    • Network and Internet
    • Hardware
    • User Accounts
    • Appearance and Personalization
    • Clock and Region
    • Ease of Access
    • Others
  • Apply a Configuration to a Group of Computers
  • Custom Scripts - PowerShell, VB, Batch, Executable [.exe]
    • Custom Scripts Library
      • Quick Guide to Self-Hosting Custom Scripts
      • Send Message
      • Rename Multiple Computers
      • Show All Notification Icons
      • Hide Task View
      • Hide Recent Apps
      • Hide People Taskbar
      • Disable Cortana
      • Google Chrome Ad Blocker Extension
        • Create a Custom Script to Install any Google Chrome Extension
      • Uninstall Windows Updates
      • Auto Logon
      • Disable the UltraVNC System Tray Icon
      • Install Printer Driver Silently
  • Policies - Scheduling and Automation
    • Update modes - Automatic, Scheduled, Adhoc
    • Create a Policy
      • Create a Windows Policy
      • Create a macOS Policy
      • Create a New Policy (MDM)
        • Global Settings (MDM)
    • Maintenance Mode
    • End-User Experience: Defer Updates and Reboots
    • Protecting the Deploy Agent
  • ANTI-VIRUS & FIREWALL
    • Faronics Anti Virus & Firewall Protection Configuration
      • Anti-Virus Settings
      • Firewall Settings
      • Computer Settings
  • Upgrade Anti-Virus Software
  • Restore or Delete Quarantined Files
  • INVENTORY
    • Inventory
      • View Details
    • Organize Computers Using Inventory Data
    • Retrieve MSInfo Reports Using the Deploy Console
    • Inventory Data Update - Heartbeat + On-Demand
    • Quickly View Installed Applications
    • Organize Inventory by Active Directory Group Membership / Organization User Membership
  • ANALYTICS
    • Usage Statistics Reports
      • Application Usage Report
      • Application Update Status Report
      • Installed Applications Report
      • Computer Usage Report
      • Login Summary Report
      • Windows Update Status Report
  • REMOTE ACCESS - RDP / VNC
    • Remote Access Requirements - Ports and Networking
    • Remote Pro
    • VNC - Initial Setup
    • Using VNC - Virtual Network Computing
    • Using RDP - Remote Desktop Protocol
    • Remote View the Screen of a Computer (Configure Refresh Rate & Monitor Selection)
  • TASKS
    • Task History
    • Scheduled Tasks
      • Assign a Scheduled Task
      • Delete a Recurring Scheduled Task
      • Cancel a One Time or Recurring Scheduled Task
    • Schedule a One Time Task
    • Schedule a Recurring Task
    • Schedule a Custom Script to Run on Every Reboot
  • Help Desk Tickets
    • Enabling Ticketing
      • Enable Ticketing for Your Organization
        • Enable Email Alerts for Incoming Tickets
      • Enable Ticketing for a User
      • Ticketing Emails
    • Ticket Actions
      • Create a Ticket
      • Edit a Ticket
      • Add a Note to a Ticket
      • Assign Ticket (To a User)
      • Assign Owner (To a Ticket)
      • Change Status of a Ticket (Open, In Progress, Closed)
      • Download a File Attached to a Ticket
      • View a Ticket
      • View History
      • Export a Report of All Tickets to a CSV File
      • Remote Access a Computer via a Ticket
    • Ticketing - Mapping Email IDs
    • Fair Use Policy - Ticketing
  • User Management
    • User Roles
    • Add Users
      • Add a User via Email
      • Add a User/Group via Active Directory
    • Configure SAML (Verify Users for External Applications)
  • Organization Settings
    • 2FA - Two Factor Authentication
    • Accessibility
  • Mobile Device Management
    • Overview
    • Device Configuration
      • MDM Set up
      • Enroll Standard Device
        • Mobile Browser
        • iOS App
        • Apple Configurator
        • Email
      • Enroll Lite Device
    • Apple Devices
    • Apple Lite Devices
    • Apps & Docs
      • Applications
      • Shared Documents
    • Settings
      • Networks
      • Personalization
      • Accounts
    • Device Actions
    • Action Toolbar
Powered by GitBook
On this page
  • Before you Start
  • How to Create a Windows Policy
  1. Policies - Scheduling and Automation
  2. Create a Policy

Create a Windows Policy

PreviousCreate a PolicyNextCreate a macOS Policy

Last updated 2 years ago

Before you Start

Make sure you have the following configured before you start:

  • Faronics Deploy Agent Installed on the Computers you wish to install the applications on.

How to Create a Windows Policy

  1. Select the Control Grid tab on the top menu bar.

  2. Navigate to the Policies tab.

  3. Click the CREATE NEW POLICY drop-down menu.

  4. Select WINDOWS POLICY from the menu.

  5. Enter a name for the policy, Seattle Office, in this example.

  1. Select an update mode, Semi-Automatic in this example.

  2. Select a schedule mode, Once a day, in this example.

  3. Set the time delay for maintenance mode after booting; the default is 15 min.

  4. Optional: Check the box to Notify User that computer is entering maintenance mode. Default is enabled.

  5. Optional: Check the Allow Snooze box to allow the user to snooze maintenance mode. Default is enabled.

  6. Optional: Enter a Password to protect against unauthorized uninstalling of the Deploy Agent.

  7. Optional: Check the Enable proxy box if your computers require a proxy to reach the Deploy cloud server.

  8. If you enabled the proxy setting, enter a Proxy Address. Otherwise skip to Applications step 1.

  9. Enter the proxy Port.

  10. Optional: Check the User Authentication box to require authorization for the proxy. Default is disabled.

  11. Select the User Authentication type from the drop-down list, BASIC, NTLM, or DIGEST.

  12. Enter the Username for the proxy.

  13. Enter the Password for the proxy.

  14. Enter the Domain for the proxy.

Applications

  1. Select Applications on the left menu.

  1. The Winget Applications are on the tab to the right of Managed Applications; click the tab to display and configure the settings for all Winget Applications installed.

Windows Updates

  1. Select Windows Updates in the menu on the left.

  2. Optional: If you do not want Faronics Deploy to manage the Windows Updates for this policy (this will only affect computers connected to this policy), check the do not manage Windows Updates box; skip to step 19.

  3. By default, the Automatic Install is selected for the Windows Updates; you can click the grid alongside any Windows Update Type that you do not wish to automate.

  4. Optional: If you wish to Manage driver updates, check this box. Once this is enabled, Drivers will appear as a category in the list of managed updates.

  1. Optional: Check the Download and keep Windows Update ready when available. Default is enabled.

  2. Optional: Check the Force auto reboot prior to installation if user is logged in box. Default is disabled.

  3. Optional: Check the Allow user to defer reboot (if required) box if you wish to enable this and enter a number of times to allow this to occur before it becomes mandatory to reboot, a maximum of 5 times. Default is unchecked.

  4. Select a Patch Scan Frequency, Once every 6, 12, or 24 hours. Default is set to 24 hours.

  5. Scroll down to the Additional Settings for Windows 10, and choose when updates are installed, either Semi-Annual Channel (Targeted) (this is the default) or Semi-Annual Channel.

Semi Annual Channel (Targeted) - Ready for most people.

Semi Annual Channel - Ready for widespread use in organizations.

  1. Optional: Set a Feature Update Deferral; this can be set from 0 - 365 days. The default setting is 0.

  2. Optional: Set the Quality Update Deferral; this can be set from 0 - 30 days. Default is 30 days.

Anti-Virus

  1. Select Anti-Virus in the menu on the left.

  2. Click the ENABLE ANTI-VIRUS button.

Remote

  1. Select Remote in the menu on the left.

  2. Check the box if you want to ask for user permission before remotely accessing a computer (this will apply to all remote access methods).

This is configurable even if you don't have the Remote Pro functionality enabled on your license.

  1. Click the green ENABLE REMOTE PRO button.

This will install Remote Pro on all computers that have this policy.

  1. Click Install to confirm that you want to install Remote Pro on all computers with this policy.

  1. Select the server that is geographically closest to you from the drop-down list.

  1. If you wish to remove Remote PRO from all computers on this policy click the UNINSTALL REMOTE PRO button.

  2. Click the SAVE button.

A Windows Policy has successfully been created.

The Managed Applications will be configured to update based on the selected in step 6 (Semi-Automatic in this example).

The Semi-Automatic default settings are used; if you make any changes to the application Update Modes, the policy will become a custom policy. See and for further information on policies.

For further information on Additional Settings for Windows 10, see

Configure your virus settings. See for further information on Anti-Virus, Firewall , & Computer Settings.

Policy Update Mode
Policy Update Mode
Policies (Windows)
Faronics Anti Virus & Firewall Protection Configuration
Policies (Windows)
Create a Windows Policy
Enable Proxy
Managed Applications Updates Configuration
Winget Applications Updates Configuration
Windows Updates Configuration for Policy
Manage Driver Updates (Experimental) are Enabled
Enable Anti-Virus for the Windows Policy
Enable Remote PRO
Select a Connection Server