Using groups in policies
Static and dynamic computer groups, and user groups as well, can be used in all whitelist rules (drive and device whitelist rules), application rules, file filter templates and configuration filters. You can also use groups to define rules for security awareness.
You must first define static and dynamic DriveLock groups before you can use them in policies. We do not provide any default DriveLock groups which you can use out of the box.
Once the DriveLock group has been defined, the respective usage is displayed in the group properties in the Used in policies menu.
Please note that it is absolutely necessary to be connected to a DES to be able to implement DriveLock's group concept.
Clients that are temporarily disconnected from the DES will be updated with the current policies (and group settings) the next time they connect. Until this update is done, the clients are displayed in the list of group members with an incorrect status, which means that either they are displayed although they are no longer members or they are not displayed although they should already be members.