Assign Dynamic Group by Tag or "Server Role"

[D. Höfer | hcsystem 0]

Hello everyone, 

 

im trying to solve following problem:

we would like to plan weekly reboots for servers based on their installed server role (windows server). we need to start the servers on different times, based on their respective server roles. if we would reboot all server at the same time or timeperiod it could happen that no domain controller in the network is reachable and the windows server will place itself in the public network profile. 

for this purpose we assigned a custom tag "Domain Controller" to each domain controller in ESET Protect. If we're going to plan reboots, we filter with this tag manually. 

i'd like to make this more automatic without human interactions with a dynamic group and assigned task. but i couldnt find a way to create a dynamic group template to sort out, if a server is a domain controller or shares a specific tag. 

any idea how to solve that? a static group is no option, because we manage multiple customer tenants in our ESET Protect Server.

 

kind regards

Dominic

[Marcos 5,074]

Unfortunately tags cannot be used in dynamic group expressions. The membership in DG is evaluated by agent on clients while tags are used only by the server.

[D. Höfer | hcsystem 0]

15 minutes ago, Marcos said:

Unfortunately tags cannot be used in dynamic group expressions. The membership in DG is evaluated by agent on clients while tags are used only by the server.

Hello Marcos, 

thx for the clarification. do you have any idea how to achieve the above described outcome? 

[igi008 19]

On 3/1/2022 at 9:21 AM, D. Höfer | hcsystem said:

Hello Marcos, 

thx for the clarification. do you have any idea how to achieve the above described outcome? 

Hello,

Manny, thanks for your suggestion. We have in the backlog the reworking dynamic groups or, better say, enriching them to be possible to consider also data on the server (console).

For now, you can try a workaround (but not ideal) to filter servers based on OS name and exclude domain controllers by the "Not equal" condition for specific machines.

In the future, we will try to extend Dynamic groups / Dynamic group Templates to better-fitting this kind of need.