ANIXIS Web Site

Policy Assignment Conflicts

A policy assignment conflict occurs when more than one policy is assigned to a user. PPE can resolve these conflicts and choose one policy to enforce for each user.

PPE first tries to resolve a policy assignment conflict by examining the assignment types. Assignments by user take precedence over assignments by group, which in turn take precedence over assignments by container. For example, if "Policy A" is assigned to a user by group, and "Policy B" is assigned to the same user by container, then PPE will enforce "Policy A" because assignments by group take precedence over assignments by container.

If all the policies are assigned to the user by container, then PPE enforces the policy that is assigned to the nearest parent container. For example, if "Policy A" is assigned to the "Users" OU, and "Policy B" is assigned to the "Users\Students" OU, then PPE will enforce "Policy B" for all users in the "Users\Students" and "Users\Students\Science" OUs because it is the policy assigned to the nearest parent container.

If a policy assignment conflict still exists, then PPE checks the priority of each remaining policy, and enforces the policy with the highest priority. Refer to the Policy Selection Flowchart for a diagrammatic representation of this algorithm.

Use the Test Policies page to quickly determine which policy PPE will enforce for a particular user.