Enforcing One or More Policy Checks


You can enforce policy checks while viewing either a Policy Check Summary or a machine summary. While a Policy Check Summary is used here to illustrate the enforcement process, the process is identical from a machine summary. The one advantage of performing an enforcement from the Policy Check Summary is that you can enforce policy checks to multiple machines at the same time.


Caution! The values specified for the policy checks in the pre-defined policies provided within VMware vCenter Protect - Configuration Management may not be suitable for every environment. It is strongly recommended that you test enforcement of the policy checks on a small sample of machines in a non-production environment before you enforce the checks on a large scale. This is particularly important when enforcing checks defined by custom policies. Always remember that policy check values in your custom policies can be configured differently from the defaults to match the needs of your network.


  1. While viewing a Policy Check Summary or a machine summary, in the Enforce column enable the check boxes for the compliance settings you would like to update.  


You can manually enable the check boxes one at a time, or you can enable or clear all check boxes by clicking Select All or Unselect All.


Note: The checks that are already in compliance and do not need enforcing will not have check boxes. A limited number of checks are not currently enforceable and will not have check boxes. A future version of the program will automate enforcement of these checks.




  1. When the desired policy checks are selected, in the bottom pane click either Enforce Selected or Enforce/ Rescan Selected.


Tip: You can also right-click a policy check to access the Enforce Selected, Enforce/Rescan Selected, Select All, and Unselect All menu options.



During the enforcement process a status dialog is displayed.