In the group structure, subgroups initially and automatically inherit the locations, policies, and settings from their parent group. By default, inheritance is enabled for every group. You can disable inheritance so that you can configure separate security settings for a subgroup. If you make changes and later enable inheritance, any changes that you made in the subgroup's settings are overwritten.
Policies that come from the cloud do not follow the Symantec Endpoint Protection Manager policy inheritance configuration. Instead, they follow the inheritance rules that are defined in the cloud.
To disable a group's inheritance
In the console, click Clients.
On the Clients page, under Clients, select the group for which you want to disable or enable inheritance.
You can select any group except the top-level group, My Company.
In the group name pane, on the Policies tab, uncheck Inherit policies and settings from parent group "group name".