Login to participate
Security IdeasRSS
4

non-shared policies management

Giuseppe.Axia's picture

Actually SEPM behaves in this way, a KB already exists:
you select a group, go in its policies and uncheck the inheritance. Now you can edit the policies of this group. For example you double click on the "AV&AS policy". A pop-up asks you if you want to edit the shared policy on create a new one non-shared policy from a copy. Select the creation of a copy. You edit and save it. You have a new non-shared policy with the same name of the original shared policy (unless you remember to change it).
Now you go in the main tab "Policies" and select the set of the AV&AS policies but here you don't find the new non-shared policy. Why?

My suggestion:
When you select to create a new policy from a copy, its default name should be "copy of..." and it should be listed in the proper set of policies under the main tab "Policies" with the "locations count" =1 (=non shared).

When I internally suggested this I got this answer: "the "Policies" panel is only for the shared policies... by design", no sense for me. In my opinion there is enough space for both, the shared policies already have the "locations count">1, the non-shared policies should have it =1, it is logic and easy.

It is not a serious issue but I strongly believe that it takes few minutes to fix it.

Giuseppe.Axia's picture

What is the result of the revision?

What is the result of the revision?

Giuseppe

chenh's picture

Good suggestion

This is a good suggestion, It is nice to have the Policy Tab display all the policies Shared and non-shared policies used in SEPM. 

Giuseppe.Axia's picture

Then you can agree with it

Hi Chenh,

thank you for your opinion, can you officialy support this idea by pressing the "agree" button?

Best regards,

Giuseppe

AravindKM's picture

Good Idea

Good Idea