Reference Guide
Security Management Server v10.2.7 AdminHelp
67
(For Active Directory Groups only) In Choose AD Group, enter the beginning characters of an
Active Directory group name (Example: Accounting), and select the desired group.
7. (For Rule-Defined and Active Directory Groups only) Click Preview to view the endpoints to be
included in the group.
8. Click Add Group to save the group definition.
9. After the group is added, modify the group priority if necessary.
Remove an Endpoint Group
1. In the left pane, click Populations > Endpoint Groups.
2. Select the group to remove.
3. Click Delete, then click OK.
Modify an Endpoint Group
1. In the left pane, click Populations > Endpoint Groups.
2. Select the group to modify.
3. Click the Details & Actions tab.
4. Click Modify.
5. Make changes as desired.
6. Click Update Group.
VDI Endpoint Groups
Upon activation, a VDI endpoint is added to the appropriate VDI Endpoint Group on Dell Server, and
policies are sent to the endpoint. Persistent VDI Endpoint Groups and Non-Persistent VDI Endpoint
Groups are System Endpoint Groups, which are maintained by Dell Server.
Policy settings differ, based on whether persistent or non-persistent VDI is deployed in the environment.
For an explanation of the differences between persistent and non-persistent VDI, see
Persistent vs.
Non-Persistent VDI.
Policy and Configuration Requirements for VDI Endpoint Groups
The policy requirements below are for VDI endpoints running Advanced Threat Prevention. The list
includes only policies that are significant for VDI endpoints. VDI User policy settings must also meet
certain requirements. See Policy and Configuration Requirements for VDI Users
.
Note: Ensure that you turn off Advanced Threat Prevention Agent Auto Update. In the left pane of the
Management Console, select Management > Services Management > Advanced Threats - Agent
Auto Update, then select Off.
Note: With Persistent VDI Groups, ensure that roaming user profiles are configured.
These policy and configuration settings for VDI Endpoint Groups must be configured before VDI client
activation:
Technology Category
Policy or
Setting
Persistent VDI
Group setting
Non-
Persistent VDI
Group setting