Working with Parent Policy Settings

A child policy administrator cannot change the setting at all. An Apex One administrator can manually change the setting from the Apex One server console. However, the setting will be overwritten when Trend Micro Apex Central deploys policies to the Apex One server.

For example, a Trend Micro Apex Central administrator can create a parent policy that enforces the exclusion of PDF files from a Manual Scan.

Changes to the setting on the parent policy are always enforced on the child policy.

If the permission on the parent policy changes from "Inherit from parent" to "Are customizable" or "Extend from parent", the child policy administrator can customize or extend the current setting. Changes to the setting on the parent policy are no longer enforced.

A child policy can deviate from the setting configured in the parent policy.

For example, if Scheduled Scan on the parent policy runs weekly but is customizable, the child policy administrator can change the schedule to daily.

Changes to the setting on the parent policy are never enforced on the child policy.

If the permission on the parent policy changes from "Are customizable" to "Inherit from parent", the current setting on the parent policy overwrites the setting on the child policy. Changes to the setting on the parent policy are always enforced.

A child policy administrator can add to the items configured in the parent policy.

For example, if the parent policy excludes 20 file names from being scanned during a Manual Scan, the administrator can add 10 more safe and trustworthy files to the child policy.

Items added or removed from the parent policy are also added or removed from the child policy. A removed item can be added back to the child.

If the permission on the parent policy changes from "Extend from parent" to "Inherit from parent", items in the child policy that have no match in the parent are removed. Changes to the items on the parent policy are always enforced.