Reference Guide

Dell Security Center v10.2.7 AdminHelp
41
(For Active Directory Groups only) In Choose AD Group, enter the beginning characters of an
Active Directory group name (Example: Accounting), and select the desired group.
7. (For Rule-Defined and Active Directory Groups only) Click Preview to view the endpoints to be
included in the group.
8. Click Add Group to save the group definition.
9. After the group is added, modify the group priority if necessary.
Remove an Endpoint Group
1. In the left pane, click Populations > Endpoint Groups.
2. Select the group to remove.
3. Click Delete, then click OK.
Modify an Endpoint Group
1. In the left pane, click Populations > Endpoint Groups.
2. Select the group to modify.
3. Click the Details & Actions tab.
4. Click Modify.
5. Make changes as desired.
6. Click Update Group.
Endpoint Groups Specification
To skip to instructions about how to add an endpoint, see Add Endpoint Groups
.
At deployment time, all endpoints belong to a default endpoint group, which is generally sufficient for
most deployments. This feature is used to assign policy to a specific group of endpoints. For instance,
you may want to create an endpoint group based on the locale that the operating system sends up in
inventory. Once that endpoint group is established, you could then apply a specific policy set to just the
endpoints in your specified locale.
Conversely, creating an endpoint group based on a platform type would not be useful because policies
are already grouped by platform.
Endpoint groups are created using a group specification. This specification allows you to define the
endpoint characteristics used to add endpoints to a group. You cannot manually add endpoints to
endpoint groups. The system, based on the characteristics in the endpoint group specification,
automatically manages endpoints and endpoint group membership.
Endpoints can be members of many endpoint groups simultaneously, as there is no mutual exclusion
requirement for endpoints in groups. All endpoints are included in the default endpoint group in addition
to any defined endpoint groups that they may be a member of. This is similar to the way users are a
member of the domain they are a part of, in addition to any security groups. Like the user group
mapping, the endpoint group mapping creates a potential policy arbitration problem for endpoints. To
resolve this problem, the default endpoint group has the lowest possible precedence, and cannot be
altered. The endpoint groups that you create have medium precedence by default. For more information
on group precedence, see Modify Group Precedence
.
Endpoint Group Specification