Moving devices between policy groups

Note the following considerations before moving devices between policy groups:

• A device can belong to only one policy group. When you add devices to a policy group, their association with their current policy group is automatically removed.

• You can't downgrade the agent on a device. If the agent version assigned to the target policy group is lower than the version assigned to the device's current policy group, the device will fail to move.

  To resolve this issue, Absolute recommends upgrading the agent version on the target policy group to the latest version and then try again to move the device.

• Changing a device's policy group does not change the product license assigned to the device, but it may change the policies activated on the device.

  Example

  You want to move 10 devices from Policy Group A to Policy Group B. The Full-Disk Encryption Status and Device Usage policies are activated in Policy Group A while the Web Usage and Device Usage policies are activated in Policy Group B. After you move the devices, the Device Usage policy remains unchanged on each device, but the Full-Disk Encryption Status policy is deactivated and the Web Usage policy is activated.

• If a device resides in a policy group with an activated Offline Freeze rule, moving it to a policy group without an activated Offline Freeze rule has the following effect:
  • The rule is deactivated on the device.
  • A Device freeze removed event is logged to Event History.
  • If the device was frozen by the rule, it remains frozen.

    To unfreeze the device, you can go to the Device Freeze Status report and submit a Remove Freeze request.

  To move a device in this scenario, your user role must be granted Perform permissions for Remove Freeze.

• If a device resides in a policy group without an activated Offline Freeze rule, moving it to a policy group with an activated Offline Freeze rule activates the rule on the device. A Device freeze requested event is logged to Event History.

To move devices between policy groups:

1. Log in to the Secure Endpoint Console as a user with Manage permissions for Policies.

2. Do one of the following:
   To change the policy group of a single device

   On the Device Details page for the device, click > Change policy group. The Change Policy Group dialog opens.

   If the device is reported stolen, the Change policy group action is not available.

   To change the policy group of multiple devices

   1. From the navigation bar, open a page or report that contains a list of devices in the results grid, such as the Devices page in License Management.
   2. Use the Search field or filters to find the devices you want to update.

   3. In the results grid, select each device you want to include in the request. To select all devices, select the Select All checkbox in the result grid header. To select consecutive devices, select the first device and then hold down the Shift key and select the last device. To remove all selections, click Clear all.

   4. Depending on the page you're on, click Change policy group or > Change policy group. The Change Policy Group dialog opens.

3. Review the list of policy groups. The following information shows for each policy group:

   • List of policies that are currently activated

   • Device count

   • Assigned agent version

4. Click a policy group to select it.

5. Click Move x devices. The selected devices are removed from their existing policy group and added to the selected policy group. A Device added to policy group event is logged to Event History for each device.
6. If any devices can't be moved due to an agent version conflict, an error notification shows in the top right of the page. Click View Details in the notification to view more information in a message dialog. To close the dialog, click OK. A Failed to add device to policy group event is logged to Event History for each device.