Alexandyr 0 Posted May 23, 2017 Share Posted May 23, 2017 I have a Static Group (named Group1) to which I have attached/added a policy (named Policies1). I have created another Static group (named Group2) in Group1. I want added computers to Group2 not to inherit Policies1. Is it possible to do this? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,092 Posted May 23, 2017 Administrators Share Posted May 23, 2017 This is not possible. Policies assigned to superior groups are automatically inherited. Link to comment Share on other sites More sharing options...
ESET Staff MichalJ 434 Posted May 23, 2017 ESET Staff Share Posted May 23, 2017 @Alexandyr can you please provide more details abut your use-case? Why you want to have Policies 1 on the Group1, and not on the Grpup2, which is a member of the Group1 (basically a sub-group of Group1). The concept of ERA V6 policies is architectures on the concept of sub-ordinance and inheritance, that you configure the ones on top, which are always overwritten by the ones lower in the hierarchy. Eventually solution would be, to create a Policies2 applied on Group2, that will overwrite the Policies1 settings, to the ones, that you want to have on Group2 (for example enforce defaults, or opposite settings to the Policies1 settings). This would work only in case, when the Policies1 uses the "apply" and not "force" flag, which prevents the policy hierarchy rules to take place. Link to comment Share on other sites More sharing options...
Alexandyr 0 Posted May 24, 2017 Author Share Posted May 24, 2017 Example: There are several people working in each of our offices. Two of them must have Internet access, two do not have, one has access to a particular site, and so on. The aim is each office to have a main Static Group and its subgroups ie. proper structuring of all offices. In this way I will manage / control them much easier. And when we have a new colleague, the appointment of all policies will be very easy. Just add that user to the relevant Static Group. The concept of ERA V6 is clear to me, but it's will be good idea to add this options. This will provide additional flexibility / functionality for policy management. For example, I can give permissions to folders in Windows OS. Right there, this option for the elimination of inherit policies is there. Yes, you are right. I can create an additional policy that overwrites others, but all of this would lead to the creation of many additional policies (which I consider superfluous). After all, how much more politics do you have so hard to manage ... I'm sorry for my bad English, but I guess you understand me Link to comment Share on other sites More sharing options...
Recommended Posts