When policy changes within your organization have yet to take effect, ThreatLocker will notify you by making the 'Deploy Policies' button in the left-hand corner of the portal red. This button MUST be selected to apply any policy changes.
- The 'Deploy Policies' button if there are no policies to be deployed.
- The 'Deploy Policies' button if there are policies waiting to be deployed.
Global Policies and policies created as a result of an Approval Request are exceptions and will be covered below.
Note: If you are in your initial Application Control Learning Mode, policies will automatically be deployed to the endpoints according to the Application Control Learning Mode settings (e.g. computer group, individual computer) once a day. However, if a machine is in Secured Mode, Policies will only be deployed once the 'Deploy Policies' button has been selected.
Deploying Policies to a Single Computer
To deploy policies on a single computer, you must first navigate to the 'Devices' page using the left-hand menu in the ThreatLocker portal. On the devices page, select the name of the machine for which you want to deploy policies. Selecting this computer will open the 'Computer Details' side panel. You will see the 'Deploy Policies' button in the top right-hand corner of the 'Computer Details' side panel.
Deploying Policies to the Entire Organization
The 'Deploy Policies' button, which will deploy policies to your entire organization, is found in the top right corner of every page of the ThreatLocker portal. Selecting the 'Deploy Policies' button will deploy policies on every device within the organization simultaneously.
Hovering your cursor over the 'Deploy Policies' button will show you a list of policies waiting to be deployed in a menu titled 'Items Pending Deploy'. This menu shows the date and time the policy change was made, the username that initiated it, and the policy it affects.
Approval Requests
When an Approval Request is approved, the computer from which the approval was generated will automatically have the resulting policy deployed to it. If the approval was set to apply to a computer group or the entire organization, only the requesting computer will automatically have the policy deployed; the remaining members of the group or organization will require the 'Deploy Policies' button to be selected.
Global Policies
Any time a global Policy is changed, you must Deploy Policies from the Organizations page. This method must be used for all Global Policy configurations for the changes to take effect.
To do this, first navigate to the 'Organizations' page using the left-hand side of the portal.
Within the 'Organizations' page, select the hamburger menu button in the top left corner of the page.
Selecting this button will open a menu titled 'Organization Options'. From here, select 'Deploy All Policies'.
Selecting this button will deploy policies within the parent and child organizations.
Alternatively, within the 'Organizations' page, you can select individual organizations to deploy policies to instead of all parent and child organizations. To do this, use the checkbox to the left of each organization name for which you'd like to deploy policies.
A few buttons will appear above the list of organization names, including one titled 'Deploy Policies'. Select this button to deploy policies to only the organizations you have selected.