CSA Groups

Unanswered Question
Jul 6th, 2007

Is it best to use the default Groups in the CSAMC such as desktop, laptops and servers instead of cloning them and then using the group? What is the best practice or advice?


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (2 ratings)
tsteger1 Sat, 07/07/2007 - 14:12

I use the default groups and policies and make exceptions separately. This makes upgrades and tracking changes easier since they are all in one place.

I used to clone everything and make changes directly to the clones but it made upgrades very tedious.


TradeSecrets Tue, 07/10/2007 - 12:31

Hi Kerra,

The best thing to do it have clone the ploicy if you want to add protection and have another for exceptions.

So policy A is the protection, Group B is the exception. Finally Policy C for additional protection.

This is nice, you can use the compare feature and compare A + C and see the changes you or people made.

Modifying the original polices is bad practice and make it much harder for someone to help you if you get into a jam or change employee's


This Discussion