Preferably by consent. If your rules are seen to be sensible and necessary to the success of the business, they are likely to be observed anyway; but if employees have had a chance to discuss the reasons for them and the way in which they will work in practice, they are much more likely to buy into them - and much less likely to condone other employees breaching them. You do not need consent, however, for the statutory rules to apply.