Symantec Endpoint Encryption provides the following types of policies that you create from the Management Console:
■ Install-time policies
■ Active Directorypolicies
■ Native policies
About install-time policies
Install-time policies are the default policies set when you create the Management Agent, Drive Encryption, and Removable Media Encryption client installers through the Management Console. You can modify an install-time policy by deploying the updated policy options that you defined using Active Directory or native policies. Active Directory and native policy settings take precedence over any installation settings on the client.
About native policies
Native policies are designed for deployment to computers that Active Directory does not manage. If you want to deploy native policies to computers that Active Directory manages, turn off the synchronization with Active Directory.
About Active Directory policies
Active Directory policies are known as Group Policy Objects (GPOs). They are designed for deployment to the computers that reside within your Active Directory forest or domain. You can create and deploy Active Directory policies whether synchronization with Active Directory is enabled or disabled.
Here are the steps to configure Active Directory policy in SEE:
1. Log into SEE Manager, right click 'Group Policy Management', select 'Add Forest':
2. Input the Active Directory Domain name, click OK:
3. SEE will fetch the structure of the Domain:
4. Right click the OU that you want to create and assign the SEE policy, select 'Create a GPO in this domain, and Link it here':
5. Input the name of the GPO, click OK:
6. Right click the newly created GPO, select 'Edit':
7. Expand the 'Computer Configuration' --> 'Policies' --> 'Software Settings' --> 'Symantec Endpoint Encryption', you will find out all the SEE policy configurations:
8. Modify and save these configurations, they will be applied to the computers reside with the Active Directory automatically.