Adding devices to policy groups

Note the following considerations before adding devices to a policy group:

• A device can belong to only one policy group. When you add devices to a policy group, their association with their current policy group is automatically removed.

• You can't downgrade the agent on a device. If the agent version assigned to the target policy group is lower than the version assigned to the device's current policy group, the device will fail to move.

  To resolve this issue, Absolute recommends upgrading the agent version on the target policy group to the latest version and then try again to move the device.

• Changing a device's policy group does not change the product license assigned to the device, but it may change the policies activated on the device.

  Example

  You want to move 10 devices from Policy Group A to Policy Group B. The Full-Disk Encryption Status and Device Usage policies are activated in Policy Group A while the Web Usage and Device Usage policies are activated in Policy Group B. After you move the devices, the Device Usage policy remains unchanged on each device, but the Full-Disk Encryption Status policy is deactivated and the Web Usage policy is activated.

• If a device resides in a policy group with an activated Offline Freeze rule, moving it to a policy group without an activated Offline Freeze rule has the following effect:
  • The rule is deactivated on the device.
  • A Device freeze removed event is logged to Event History.
  • If the device was frozen by the rule, it remains frozen.

    To unfreeze the device, you can go to the Device Freeze Status report and submit a Remove Freeze request.

  To move a device in this scenario, your user role must be granted Perform permissions for Remove Freeze.

• If a device resides in a policy group without an activated Offline Freeze rule, moving it to a policy group with an activated Offline Freeze rule activates the rule on the device. A Device freeze requested event is logged to Event History.

To add devices to the policy group:

1. Log in to the Secure Endpoint Console as a user with Manage permissions for Policies.

2. On the navigation bar, click Policies > Policy Groups.
3. On the Policy Groups sidebar, click the policy group that you want to add devices to. The policy group opens in the work area.
4. Click (Add devices). The Add devices dialog page opens to show all devices in your account.

   If a warning message about Offline Freeze rules shows, see Important considerations.

5. To find devices to add to the policy group, you can:
   • Perform a search.
   • Add filters to find devices based on multiple filter criteria.

   If you want to review more information about each device, add more columns by clicking .

6. In the results grid, select each device you want to add. To select all devices, select the Select All checkbox in the result grid header. To select consecutive devices, select the first device and then hold down the Shift key and select the last device. To remove all selections, click Clear all.
7. Click Add.

   The dialog closes and the selected devices are removed from their existing policy group and added to this policy group. A Device added to policy group event is logged to Event History for each device.

8. [Optional] To view the list of devices that now belong to this policy group, click <#> devices under the policy group description.