If you use role-based administration, you must have the Remediation - updating and scanning right to perform this task. For more information, see Managing roles and sub-estates.
If you find computers that do not comply with the policies for their group, you can apply the group policies to that computer.
Select the computer(s) that do not comply with the group policy.
Right-click and select Comply with. Then select the appropriate policy type, for example, Group anti-virus and HIPS policy.