DeviceTrust - How to deploy file-based policy to deviceTRUST Agents

book

Article ID: CTX695038

calendar_today

Updated On:

Description

1. Prepare a .dtpol file that you want to import to a dtAgent

  • In deviceTRUST console where your settings are loaded,
  • click "Sharing" icon at the right top
  • click "Export to Disk" option
  • select the desired settings and click "Export to Disk" button to save as .dtpol file

2. Import the .dtpol file to a dtAgent

  • Sign-in the deviceTRUST Agent machine
  • Manually copy the .dtpol file to path %PROGRAMDATA%\deviceTRUST\Policy
  • Check event id 3 in Windows > Event Viewer > Applications and Services Logs > deviceTRUST > Admin about the policy applying


Important Note:

Before step 2, if the target dtAgent already had File-Based Policy Settings: Load policy files imported by one of the following accounts applied, then please don't manually copy the .dtpol file to path %PROGRAMDATA%\deviceTRUST\Policy.
Instead, please run dtcmd IMPORT /add:<filepath> with the user account configured in the File-Based Policy Settings: Load policy files imported by one of the following accounts setting. The command will import the .dtpol file automatically.

Issue/Introduction

The article describes the main steps of deploying file-based policy to deviceTRUST Agents

Additional Information

https://docs.devicetrust.com/docs/23.1/reference/console/settings/file_based_policy/