CSA Groups

Unanswered Question
Jul 6th, 2007
User Badges:

Is it best to use the default Groups in the CSAMC such as desktop, laptops and servers instead of cloning them and then using the group? What is the best practice or advice?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (2 ratings)
tsteger1 Sat, 07/07/2007 - 14:12
User Badges:
  • Red, 2250 points or more

I use the default groups and policies and make exceptions separately. This makes upgrades and tracking changes easier since they are all in one place.

I used to clone everything and make changes directly to the clones but it made upgrades very tedious.


kerraj2004 Mon, 07/09/2007 - 04:36
User Badges:

Tom, thanks for your response regarding both of my postings.

TradeSecrets Tue, 07/10/2007 - 12:31
User Badges:
  • Bronze, 100 points or more

Hi Kerra,

The best thing to do it have clone the ploicy if you want to add protection and have another for exceptions.

So policy A is the protection, Group B is the exception. Finally Policy C for additional protection.

This is nice, you can use the compare feature and compare A + C and see the changes you or people made.

Modifying the original polices is bad practice and make it much harder for someone to help you if you get into a jam or change employee's


This Discussion