When creating MSM Groups for auto-assigning Sensors to Policies, it is important to remember the following
- Domain Name is case sensitive (use both uppercase and lowercase variations)
- Hostname/Device Name is case sensitive (use both uppercase and lowercase variations)
- Use a double backslash (\\) between Domain and Hostname (domain\\hostname)
- Add criteria in descending order of specificity (i.e., most specific to least specific) to avoid mix-ups
- Case sensitivity and the need for a double backslash will be resolved in future releases of the Endpoint Standard Web Console
- Ordering criteria is important to make sure shorter character strings are not errantly matched within longer strings
- The Active Directory Domain should match the Domain Name listed under the Distinguished Names of your devices
Examples
Domain, Hostname, and backslashes
- YOURDOMAIN\\HOSTNAME
- yourdomain\\hostname
- YOURDOMAIN\\hostname
- yourdomain\\HOSTNAME
Ordering Criteria
- YourDomain\\SECURITY
- YourDomain\\IT
IT can be found in Security, so filter out the devices with Security in the name before those with just IT in the name