Performing policy runs

You can specify multiple modules within a policy and limit the number of messages that each run reports. You can also schedule multiple module or policy runs, view the status of a policy run, stop a policy run, and delete a policy run.

You can run policies on agents or on manager domains. Symantec Enterprise Security Manager compares the current state of the host computers to the policy's security standards. When the policy run completes, you can view the resulting security data in the chart and grid views of the ESM console. You can also display or print security reports, or export the security data to a database for custom reporting.

You can do the following with the policy runs:

Modify policy runs by specifying the modules and checks that are used to assess your agent computers
Limit the number of messages or suppress specific messages that a policy run generates
Schedule policy runs to run at set intervals
View the status of policy runs
Stop a policy run
Delete a policy run

To run a policy, you must have the Run Policies access right enabled for domains and the Run access right enabled for policies in the manager account.

To perform policy runs

Do one of the following:
- Drag and drop a policy on an agent or domain.
  
  To run only one module, drag and drop the module on the agent or domain.
- Drag and drop the selected agent or domain on the policy.
- Use the Policy Run wizard.
- Right-click the policy and click Run on domain.
  
  To run a policy on the agents that are registered to a manager in a specified domain.