Forcing Policy immediately after login

[robg3381]

Does anyone know of a way to force EPO Policies on a client upon every login?  I'm aware of the cmdagent /p /e /c.  But I wasn't sure if there was another way to do this within EPO or if doing cmdagent was the only way.

The use case I'm trying to solve is we have VDI hosts which do not immediately check into EPO when enstantiated.  Some of the policies we need to have implemented ASAP on the endpoint.  

The options I'm aware of are: 

1. Update policy on each VDI Gold Image and then recompose them (this is a painful process for the business currently).
2. Implement a GPO for each user to run the cmdagent /c /e at login (this requires change controls etc etc).

If anyone has an idea on how to imeplement this within McAfee EPO, we would greatly appreciate it.

[tao · Accepted solution]

I haven't seen policy base; task base yes.  Create a task, assign wakup agent w/full policy update with a Schedule type of either at start up or logon.

[robg3381]

Perfect.  This worked like a charm.  Hadn't even thought of using a client task.  Appreciate it!!

-R

[wouterr]

In MCafee Agent > General policy you can modify following setting to do so, 

"Initiate agent-to-server communication within 10 minutes after startup if policies are older than (days):"

this offcource if you can live with systems having an old policy for 10 minutes...