{"id":3027,"date":"2026-02-19T07:08:47","date_gmt":"2026-02-19T07:08:47","guid":{"rendered":"https:\/\/zecurit.com\/help\/endpoint-management\/software-deployment\/deployment-policy\/"},"modified":"2026-02-19T09:17:43","modified_gmt":"2026-02-19T09:17:43","slug":"deployment-policy","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/endpoint-management\/software-deployment\/deployment-policy\/","title":{"rendered":"Deployment Policy"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Overview<\/h2>\n\n\n\n<p>A Deployment Policy defines the rules that control how and when a software package is deployed to target devices. It links a package from the Software Repository to a set of delivery instructions, including execution permissions, network conditions, retry behavior, and schedule.<\/p>\n\n\n\n<p>Once published, a Deployment Policy is ready to be assigned to device groups or individual devices.<\/p>\n\n\n\n<p><strong>Navigation:<\/strong> Go to <strong>Manage \u2192 Deployment \u2192 Deployment Policy<\/strong>, then click <strong>Add Deployment Policy<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Section 1: Policy Details<\/h2>\n\n\n\n<p><strong>Policy Name<\/strong> <em>(Required)<\/em> Enter a clear, descriptive name to identify this policy. <em>Example: Deploy Microsoft Office 365 \u2013 Q1 Rollout, Install Zoom \u2013 Remote Workers<\/em><\/p>\n\n\n\n<p>You can optionally click <strong>Add Description<\/strong> to include additional context about the policy&#8217;s purpose.<\/p>\n\n\n\n<p><strong>Category<\/strong> Select the type of deployment this policy will perform:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Software<\/strong> : Deploy a software package from the Software Repository. Use this for application installations and removals.<\/li>\n\n\n\n<li><strong>Script<\/strong> : Deploy a script from the Scripts Repository. Use this when you need to run automation without installing a traditional application.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Section 2: Package Settings<\/h2>\n\n\n\n<p><strong>Operation Type<\/strong> Choose the action this policy will perform on target devices:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Install<\/strong> : Install the selected package on target devices.<\/li>\n\n\n\n<li><strong>Uninstall<\/strong> : Remove the selected package from target devices. The uninstall command configured in the package will be used.<\/li>\n<\/ul>\n\n\n\n<p><strong>Select Package<\/strong> <em>(Required)<\/em> Choose the software package you want to deploy from the dropdown list. This list is populated from your Software Repository.<\/p>\n\n\n\n<p>If the package you need does not yet exist, click <strong>Add Package<\/strong> to create a new one directly from this screen without leaving the policy creation flow.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Section 3: Execution Context<\/h2>\n\n\n\n<p>The Execution Context determines the user account under which the installer runs on the target device. Selecting the correct context is important for ensuring the installer has the permissions it needs.<\/p>\n\n\n\n<p><strong>System (Run as System)<\/strong> <em>(Default)<\/em> The installer runs under the local System account with elevated administrator privileges. This is the recommended option for most enterprise software deployments.<\/p>\n\n\n\n<p>Use this when:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The software requires administrative access to install<\/li>\n\n\n\n<li>You want installation to happen in the background, even when no user is logged in<\/li>\n\n\n\n<li>The installer makes system-level changes (registry, services, system directories)<\/li>\n<\/ul>\n\n\n\n<p><strong>Logged-in User<\/strong> The installer runs within the session of the currently active user on the device. The user must be logged in for the deployment to proceed.<\/p>\n\n\n\n<p>Use this when:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The software installs to user-specific directories or profiles<\/li>\n\n\n\n<li>The application needs to inherit the user&#8217;s environment or preferences<\/li>\n\n\n\n<li>You are deploying user-scoped applications<\/li>\n<\/ul>\n\n\n\n<p><strong>Run as User<\/strong> The installer runs using a specific user account with credentials you provide. This is useful when the installer needs access to network resources, shared drives, or domain-protected directories.<\/p>\n\n\n\n<p>Use this when:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The installer accesses files on a network share that requires authentication<\/li>\n\n\n\n<li>You need controlled, credential-based access during installation<\/li>\n\n\n\n<li>Standard system privileges are insufficient for the deployment environment<\/li>\n<\/ul>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\ud83d\udca1 <strong>Note:<\/strong> When using Run as User, credentials must be configured in advance. Click <strong>Manage Credentials<\/strong> to add or update stored credentials.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Section 4: Deployment Handling Rules<\/h2>\n\n\n\n<p>These rules control how Zecurit behaves when a deployment encounters problems or connectivity issues.<\/p>\n\n\n\n<p><strong>Network Conditions<\/strong> Specify the network type under which deployments are allowed to run:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Any Network<\/strong> : The deployment runs regardless of how the device is connected (Wi-Fi, wired, VPN, cellular).<\/li>\n\n\n\n<li><strong>LAN Only<\/strong> : The deployment only runs when the device is connected to the local area network. Use this to avoid deploying large packages over slower or metered connections.<\/li>\n<\/ul>\n\n\n\n<p><strong>Retry on Failed Targets<\/strong> Enable this toggle to automatically retry the deployment if it fails on a device.<\/p>\n\n\n\n<p>When enabled, configure:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Setting<\/th><th>Description<\/th><\/tr><\/thead><tbody><tr><td><strong>Retry Count<\/strong><\/td><td>The number of times Zecurit will reattempt the deployment after a failure<\/td><\/tr><tr><td><strong>Retry Interval<\/strong><\/td><td>The time (in minutes) Zecurit waits between each retry attempt<\/td><\/tr><tr><td><strong>Retry After Reboot<\/strong><\/td><td>When enabled, if a deployment fails and the device is rebooted, Zecurit will attempt the deployment again after the device comes back online<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\ud83d\udca1 <strong>Tip:<\/strong> Enabling <strong>Retry After Reboot<\/strong> is useful for packages that require a system restart as part of the installation process.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Section 5: Schedule<\/h2>\n\n\n\n<p>The Schedule determines when the deployment begins on target devices.<\/p>\n\n\n\n<p><strong>Deploy Immediately<\/strong> The deployment starts automatically as soon as the target device next contacts the Zecurit server. Use this for urgent deployments that need to reach devices as quickly as possible.<\/p>\n\n\n\n<p><strong>Schedule Deployment<\/strong> Set a specific date, time, and time zone for the deployment to begin.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Field<\/th><th>Description<\/th><\/tr><\/thead><tbody><tr><td><strong>Start Date<\/strong><\/td><td>The date and time when the deployment should begin<\/td><\/tr><tr><td><strong>Time Zone<\/strong><\/td><td>The time zone used to interpret the start date and time<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>If a device is offline at the scheduled time, the deployment will begin automatically the next time the device connects to the Zecurit server, no manual intervention is needed.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\ud83d\udca1 <strong>Tip:<\/strong> Use scheduled deployments for off-hours installations to avoid disrupting users during business hours.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Section 6: Notification<\/h2>\n\n\n\n<p><strong>Notify Administrators About the Deployment Status<\/strong> Enable this toggle to receive notifications when the deployment completes or fails on target devices. Notifications are sent to the administrators configured in your account settings.<\/p>\n\n\n\n<p>Enabling notifications helps your team stay informed about deployment outcomes without having to manually check the console.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Saving and Publishing the Policy<\/h2>\n\n\n\n<p>At the bottom of the page, you have three options:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Action<\/th><th>Description<\/th><\/tr><\/thead><tbody><tr><td><strong>Cancel<\/strong><\/td><td>Discard all changes and return to the Deployment Policy list<\/td><\/tr><tr><td><strong>Save as Draft<\/strong><\/td><td>Save the policy without activating it. Use this to complete configuration later before going live<\/td><\/tr><tr><td><strong>Publish<\/strong><\/td><td>Save and activate the policy. Once published, it is ready to be assigned to groups or devices<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u26a0\ufe0f <strong>Note:<\/strong> A policy that is saved as a draft will not deploy to any devices until it is published.<\/p>\n<\/blockquote>\n\n\n\n<p><\/p>\n","protected":false},"featured_media":0,"parent":3015,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-3027","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3027","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=3027"}],"version-history":[{"count":1,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3027\/revisions"}],"predecessor-version":[{"id":3038,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3027\/revisions\/3038"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3015"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=3027"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=3027"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}