Abstract: Applying policy rules to software installed on a device. A group of devices to receive policy rules for the software is identified. The devices belonging to the specified group is identified. A set of policy rules assigned to the devices in the specified group are identified. The policy rules assigned to the devices are aggregated into one or more policy documents. The one or more policy documents are received. The received policy documents are stored in a data store associated with the device. The set of policy rules specified by the received policy documents are applied to the software. A feedback is provided to the policy authority in response to the applying, and the feedback is indicative of whether the set of policy rules is applied to the software.

Abstract: Managing software states using policy rules in a policy document in a distributed network. A policy document is generated and the policy document includes a set of policy rules defining one or more desired configurations of one or more pieces of software on the target devices. Target information is associated with the policy document, and the target information corresponds to a selected set of the target devices and includes information relating to characteristics of the software of the selected set of target devices. The set of policy rules included in the policy document is compared with other policy rules for the software. The policy document is modified as a function of the comparison and conflict resolution preferences. The modified policy document is provided for deployment to the selected set of the target devices.