# Deploy Device Control policy using Endpoint Central

## Table of Contents

1. [Associating a Policy](https://www.manageengine.com/products/desktop-central/help/device-control/deploy-dc-policy.html#associate-policy)
2. [Exclude User Groups](https://www.manageengine.com/products/desktop-central/help/device-control/deploy-dc-policy.html#exclude-user-groups)

[Watch the video tutorial](https://www.youtube-nocookie.com/embed/56h8HxXo4xI?si=Era3mQxuZwU5aoMQ)

After creating a device control rule, the next step is deploying it. Deploying a policy ensures device control rules are enforced on endpoints, enabling real-time monitoring and management of peripheral devices connected to your network. This safeguards sensitive data by controlling data transfers to unauthorized devices, strengthening security across all endpoints.

## Associating a Policy with a Computer Group

1. To deploy a policy, navigate to **Policies → Deploy Policy → Associate Policy**.

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp1.png)

2. Select the computer group to which the policy should be associated.

> **Note:** In a computer group, the associated policy applies only to computers with the matching OS platform.

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp2.png)

> **Note:** To learn more about creating computer groups, [Click here](https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/creating_custom_groups.html)

3. Move the policy that you wish to associate from **Available Policies** to **Selected Policies**.
4. Deployment Methods:
   - Click **Deploy** to apply the policy. The policy will be deployed during the next refresh cycle.
   - Click **Deploy immediately** to deploy the policy immediately.

## Exclude User Groups

To exclude specific user groups within a computer group:

1. Select the computer group and select the desired policy → Click the exclude user group button.

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp3.png)

2. Select the user group(s) to exclude from the policy.

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp4.png)