1. A computer implemented method, the method comprising: receiving, by a client, a set of defined property definitions, wherein the set of defined property definitions applies to a plurality of machines, wherein the plurality of machines includes the client; maintaining, by the client, property metadata associated with a resource of the client; receiving, by the client, a policy that is applicable to the plurality of machines, wherein whether the policy applies to the resource is determined based at least in part on at least one property definition of the set of defined property definitions; determining, by the client, that the resource meets the at least one property definition based at least in part on the property metadata; applying, by the client, the policy to the resource; updating, by the client, the resource, wherein updating the resource comprises updating the property metadata; determining, by the client, that the resource no longer meets the at least one property definition; and removing, by the client, the policy from the resource based on the update to the resource.