# Deploy Device Control policy using Endpoint Central

Last Updated On: 08 Sep 2026

After creating a device control rule, the next step is deploying it. Deploying a policy ensures device control rules are enforced on endpoints, enabling real-time monitoring and management of peripheral devices connected to your network. This safeguards sensitive data by controlling data transfers to unauthorized devices, strengthening security across all endpoints.

## Associating a Policy with a Computer Group

1. To deploy a policy, navigate to Policies -> Deploy Policy -> Associate Policy

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp1.png)

2. Select the computer group to which policy should be associated.

**Note:** In a computer group, the associated policy applies only to computers with the matching OS platform.

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp2.png)

**Note:** To learn more about creating computer groups, [Click here](https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/creating_custom_groups.html)

3. Move the policy that you wish to associate from "Available Policies" to "Selected Policies".
4. Deployment Methods:
   - Click "Deploy" to apply the policy. The policy will be deployed during the next refresh cycle.
   - Click "Deploy immediately" to deploy the policy immediately.

## Exclude User Groups

To exclude specific user groups within a computer group:

1. Select the computer group and select the desired policy -> Click the exclude user group button

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp3.png)

2. Select the user group(s) to exclude from the policy.

![Policy deployment](https://www.manageengine.com/products/desktop-central/help/images/dc-dp4.png)