To create policies, your user account must have the Create Policies access right enabled in the Advanced Manager Rights dialog box. To save time you should copy one of the policies shipped with Symantec ESM, and then edit the copy to suit your requirements.