DriveLock groups

Configuration: DOC -> Administration -> Groups

There are several DriveLock groups:

Static computer groups are defined by manually adding computers, groups or organizational units from the AD object inventory, from individual computers (which are added individually by name) or from existing DriveLock groups (also Microsoft Entra ID groups).

Dynamic computer groups are defined from the results of queries (filter criteria), for example, queries based on operating system version, IP range, Windows version, and more. A group membership of a DriveLock Agent is determined in the following way: First, the filter criteria are stored in a database. The criteria are then transmitted to the agent computers, where they are evaluated, and then feedback is provided on the respective group membership. After updating the configuration, the individual members are displayed in the properties of the dynamic group (Current members tab).

You can also create a copy of an already existing group.

Microsoft Entra ID groups are synchronized to DriveLock by triggering the Microsoft Entra ID integration. Click here to learn more about the settings you need for this.

Static user groups are defined by manually adding users or groups from the AD object inventory, from individual users (which are added individually by name) or from existing DriveLock user groups (also Microsoft Entra ID groups).

DriveLock system groups: These groups are the All computers or All users group (<All computers>;<All users>). It contains all existing computers and users as logical members.