Setting Policy Precedence

Updated: January 1, 2011

Applies To: Forefront Endpoint Protection

You can assign multiple policies to a Configuration Manager collection, and a single computer can be a member of multiple collections that have a policy assigned. The Forefront Endpoint Protection client software uses policy precedence to determine which policy to apply. The policy with the highest precedence assigned to the computer is applied by the Forefront Endpoint Protection client software.

  1. In the Configuration Manager console, expand System Center Configuration Manager, expand Site Database, expand Computer Management, expand Forefront Endpoint Protection, and then click Policies.

  2. In the Actions pane, click Edit Policy Precedence.

  3. In the Edit Policy Precedence dialog box, select a policy and use the Up and Down buttons to set the policy precedence order.

    If you want to modify the precedence of additional policies, repeat this step.

  4. When you are finished, click OK.

The precedence for the Default Server Policy and Default Desktop Policy cannot be modified.

After you have finished setting policy precedence, you are ready to assign the policy to computers running the Forefront Endpoint Protection client software. For more information, see FEP 2010.