AMP for Endpoints Parent-Child Group Inheritance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-11-2021 05:30 PM
Hi,
I want to clarify the settings inheritance between parent and child groups.
Parent Group: Org Group1
Windows Policy: Base Windows Policy
Mac Policy: Base Mac Policy
....
Child Group: Finance
Windows Policy: Finance Windows Policy
Mac Policy: --none-- (inherit from parent)
For computers assigned to the Finance group, it's clear the Mac Policy from the parent is inherited by the child group and will take effect. What about the Windows policy. Are the settings completely overridden and only the child 'Finance Windows Policy' is in effect, OR child still inherits and merges any settings from the parent group as applicable? For example, I may have generic Windows exclusions defined in Base Windows Policy, but a further few extra exclusions are needed for Finance users.
Regards,
Rick.
- Labels:
-
AMP for Endpoints
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-12-2021 06:15 AM
Settings are being overriden, the parent and child policy are not being merged.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-16-2023 03:37 AM
Sorry I have a related doubt. In this case Parent Policy Override child policy or Child Policy is more restrictive? If I look the computer, the applied policy Is that is configured on the group it belong not the policy on the Parent group.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-16-2023 07:32 AM
There is no policy merge. If you apply a policy to a child group, the whole thing applies, no matter if one is more restrictive.
