{"id":3145,"date":"2026-02-20T10:48:24","date_gmt":"2026-02-20T10:48:24","guid":{"rendered":"https:\/\/zecurit.com\/help\/endpoint-management\/remote-script-execution\/associate-script-deployment-policy-to-devices-and-groups\/"},"modified":"2026-02-20T11:53:03","modified_gmt":"2026-02-20T11:53:03","slug":"associate-script-deployment-policy","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/endpoint-management\/remote-script-execution\/associate-script-deployment-policy\/","title":{"rendered":"Associate Script Deployment Policy to Devices and Groups"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Overview<\/h2>\n\n\n\n<p>Once you have a published <strong>Deployment Policy<\/strong> and your scripts are in the <strong>Script Repository<\/strong>, the final step is targeting the right endpoints. In Zecurit, you distribute (associate) deployment policies to individual devices or entire device groups from the <strong>Groups and Devices<\/strong> section.<\/p>\n\n\n\n<p>This page explains how to associate a script deployment policy at both the device and group level, how to track distribution status, and how to verify execution on individual endpoints.<\/p>\n\n\n\n<p>Navigate to <strong>Manage \u2192 Groups and Devices<\/strong> to begin.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Understanding Targeting: Devices vs. Groups<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Target<\/th><th>Best For<\/th><\/tr><\/thead><tbody><tr><td><strong>Individual Device<\/strong><\/td><td>One-off scripts for a specific machine (e.g., a diagnostic on a failing workstation)<\/td><\/tr><tr><td><strong>Device Group<\/strong><\/td><td>Batch deployment to a fleet of similar devices (e.g., all Windows laptops in the Sales department)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Groups are the most efficient targeting method for ongoing automation. Any new device added to a group automatically receives policies associated with that group on its next check-in.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Method 1: Associate to Multiple Devices (Bulk)<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1 : Go to Groups and Devices<\/h3>\n\n\n\n<p>Navigate to <strong>Manage \u2192 Groups and Devices<\/strong>. Ensure you are on the <strong>Devices<\/strong> tab.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2 : Select Target Devices<\/h3>\n\n\n\n<p>Check the checkboxes next to one or more devices you want to target. You can search or filter the list to narrow down your selection.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3 : Open the Actions Menu<\/h3>\n\n\n\n<p>Click the <strong>Actions<\/strong> button (top-right of the list). A dropdown menu appears with two main sections: <strong>Distribute<\/strong> and <strong>Power<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4 : Navigate to Deployment Policy<\/h3>\n\n\n\n<p>Under <strong>Distribute<\/strong>, click <strong>Deployment Policy<\/strong>. A sub-menu or modal will open.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 5 : Select and Associate the Policy<\/h3>\n\n\n\n<p>The <strong>Associate Deployment Policy<\/strong> dialog opens and lists all available published script deployment policies. You can:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Use the <strong>Search<\/strong> bar to find a specific policy by name.<\/li>\n\n\n\n<li>Filter by <strong>Script<\/strong> or <strong>Software<\/strong> using the dropdown filter.<\/li>\n\n\n\n<li>See policy details including <strong>Platform<\/strong>, <strong>Last Modified By<\/strong>, <strong>Last Created Time<\/strong>, and <strong>Version<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p>Select the checkbox next to the policy you want to associate, then click <strong>Associate<\/strong>.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><strong>Note:<\/strong> Zecurit automatically matches policies to compatible devices. Policies are only applied to devices whose platform matches the policy&#8217;s script platform. For example, a Windows script policy will not be applied to macOS devices even if both are selected.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Method 2: Associate to a Device Group<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1 : Switch to the Groups Tab<\/h3>\n\n\n\n<p>In <strong>Manage \u2192 Groups and Devices<\/strong>, click the <strong>Groups<\/strong> tab at the top.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2 : Select a Group<\/h3>\n\n\n\n<p>Find the group you want to target. Click the <strong>three-dot menu (\u22ee)<\/strong> next to the group, or select the group checkbox and use the <strong>Actions<\/strong> button.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3 : Distribute the Policy<\/h3>\n\n\n\n<p>Select <strong>Actions \u2192 Distribute \u2192 Deployment Policy<\/strong>. The same <strong>Associate Deployment Policy<\/strong> dialog opens.<\/p>\n\n\n\n<p>Select the policy and click <strong>Associate<\/strong>.<\/p>\n\n\n\n<p>All devices within the group will receive the policy on their next check-in. Newly added devices to the group will also automatically receive associated policies.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Verifying Deployment on a Device<\/h2>\n\n\n\n<p>After associating a policy, you can verify its delivery and execution status on individual devices.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1 : Open the Device Record<\/h3>\n\n\n\n<p>In <strong>Groups and Devices \u2192 Devices<\/strong>, click the device name (e.g., <code>alexanderdaniel<\/code>) to open the device detail view.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2 : Click the Deployments Tab<\/h3>\n\n\n\n<p>In the device detail page, click the <strong>Deployments<\/strong> tab. This shows all policies distributed to the device.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3 : Review the Deployment Status<\/h3>\n\n\n\n<p>The deployments table shows:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Column<\/th><th>Description<\/th><\/tr><\/thead><tbody><tr><td><strong>Deployment Name<\/strong><\/td><td>The name of the Deployment Policy<\/td><\/tr><tr><td><strong>Profile Type<\/strong><\/td><td>Deployment (for script policies)<\/td><\/tr><tr><td><strong>Created By<\/strong><\/td><td>Administrator who created the policy<\/td><\/tr><tr><td><strong>Status<\/strong><\/td><td><code>In Progress<\/code>, <code>Success<\/code>, <code>Failed<\/code>, <code>Pending<\/code><\/td><\/tr><tr><td><strong>Version<\/strong><\/td><td>Policy version currently distributed<\/td><\/tr><tr><td><strong>Distributed Version<\/strong><\/td><td>Version installed on this device<\/td><\/tr><tr><td><strong>Associated Time<\/strong><\/td><td>When the policy was pushed to this device<\/td><\/tr><tr><td><strong>Remarks<\/strong><\/td><td>Execution notes (e.g., &#8220;Execution\u2026&#8221;)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Click the <strong>Deployment Name<\/strong> link to open the full deployment report, including script output logs, exit codes, and error details.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Deployment Statuses Explained<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Status<\/th><th>Meaning<\/th><\/tr><\/thead><tbody><tr><td><strong>Pending<\/strong><\/td><td>Policy distributed; waiting for device to check in<\/td><\/tr><tr><td><strong>In Progress<\/strong><\/td><td>Script is currently executing on the device<\/td><\/tr><tr><td><strong>Success<\/strong><\/td><td>Script executed and returned a defined success exit code<\/td><\/tr><tr><td><strong>Failed<\/strong><\/td><td>Script returned an error exit code or timed out<\/td><\/tr><tr><td><strong>Retrying<\/strong><\/td><td>Retry is in progress (if retry was enabled in the policy)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Use Case: Deploy Security Audit Script to All Windows Laptops<\/h2>\n\n\n\n<p><strong>Scenario:<\/strong> You need to run a security baseline audit across all 150 Windows laptops in your organization.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Go to <strong>Manage \u2192 Groups and Devices \u2192 Groups<\/strong> tab.<\/li>\n\n\n\n<li>Find your group <code>Windows-Laptops-All<\/code>.<\/li>\n\n\n\n<li>Click <strong>Actions \u2192 Distribute \u2192 Deployment Policy<\/strong>.<\/li>\n\n\n\n<li>In the Associate Deployment Policy dialog, filter by <strong>Script<\/strong>.<\/li>\n\n\n\n<li>Select <code>WIN-SecurityBaseline-OnBoot<\/code> (version 1).<\/li>\n\n\n\n<li>Click <strong>Associate<\/strong>.<\/li>\n\n\n\n<li>All 150 devices will receive the policy. Devices currently online will begin execution immediately (or at the scheduled time). Offline devices will execute on next check-in.<\/li>\n\n\n\n<li>To monitor: click into any device \u2192 <strong>Deployments<\/strong> tab \u2192 look for <code>WIN-SecurityBaseline-OnBoot<\/code> with status <code>Success<\/code>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Use Case: Target a Single Diagnostic Script to One Device<\/h2>\n\n\n\n<p><strong>Scenario:<\/strong> One workstation (<code>andrew75<\/code>) is reporting high disk usage. You want to run a disk diagnostic script on it immediately without affecting other devices.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Go to <strong>Manage \u2192 Groups and Devices \u2192 Devices<\/strong> tab.<\/li>\n\n\n\n<li>Check the box next to <code>andrew75<\/code>.<\/li>\n\n\n\n<li>Click <strong>Actions \u2192 Distribute \u2192 Deployment Policy<\/strong>.<\/li>\n\n\n\n<li>Select <code>WIN-DiskDiagnostic-OnDemand<\/code> policy.<\/li>\n\n\n\n<li>Click <strong>Associate<\/strong>.<\/li>\n\n\n\n<li>Navigate to <code>andrew75<\/code> \u2192 <strong>Deployments<\/strong> tab to monitor status and review script output.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Re-Distributing an Updated Policy<\/h2>\n\n\n\n<p>When you update a Deployment Policy (creating a new version), you need to re-associate it with devices or groups to push the updated version. Zecurit tracks the <strong>Version<\/strong> and <strong>Distributed Version<\/strong> in the device&#8217;s Deployments tab, making it easy to identify devices running outdated policy versions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Removing a Policy Association<\/h2>\n\n\n\n<p>To remove a deployment policy from a device or group, open the device or group record, navigate to the relevant deployment, and select <strong>Remove<\/strong> from the actions menu. The policy will no longer execute on that endpoint on future check-ins.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Related<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/zecurit.com\/help\/endpoint-management\/remote-script-execution\/script-repository\/\">Script Repository<\/a> \u2192<\/li>\n\n\n\n<li><a href=\"https:\/\/zecurit.com\/help\/endpoint-management\/remote-script-execution\/script-deployment-policy\/\">Deployment Policy for Scripts<\/a> \u2192<\/li>\n\n\n\n<li><a href=\"https:\/\/zecurit.com\/help\/endpoint-management\/remote-script-execution\/script-best-practices\/\">Script Best Practices<\/a> \u2192<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n","protected":false},"featured_media":0,"parent":3019,"menu_order":1,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-3145","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=3145"}],"version-history":[{"count":2,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3145\/revisions"}],"predecessor-version":[{"id":3162,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3145\/revisions\/3162"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3019"}],"prev":[{"title":"Script Repository","link":"https:\/\/zecurit.com\/help\/endpoint-management\/remote-script-execution\/script-repository\/","href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3143"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=3145"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=3145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}