You can organize devices and applications in two ways using
- Service groups
- Site groups
Groups allow you to manage a large number of systems by filtering devices to run reports, run automated tasks, and perform patch management such as applying patching policies to multiple devices at one time.
Devices can belong to multiple groups; however, in this case, any device alerts appear on the Central Dashboard under all the groups to which the device belongs.
A service group is an organizational container for devices, which may contain devices from multiple sites. The advantage of service groups is the ease of administration when managing like devices or applications. As well, it provides views at the group level and reports at the group level.
You can create as many service groups as you want.
A site group is an organizational container for devices related to a single site. The advantage of site groups is the ease of identifying alerts occurring on a per-site basis.
Any customer may be monitored by multiple Onsite Managers and Device Managers organized into one or more sites in Service Center. When this is the case, you can organize the sites by physical location, and the site groups by function, such as Netstone-Finance, Netstone-Marketing, and so on.
Site group creation is extremely important since it provides you the filters required for enhanced reporting as well as staff organization and a more effective and friendly user interface. Site grouping is also very effective for asset management and scripting.
You can create as many site groups as you want. You can also create shared site groups, which are centrally managed with one site group definition that automatically creates site groups at new sites. For more information, see Creating Shared Site Groups.
How You Can Use Groups
Groups can be used for a variety of asset management purposes, including:
- for custom views or filters of devices (such as alert views)
- for reporting on a group of devices
- to organize your staff into groups supporting certain IT technologies. For example, if you are a Microsoft Exchange Specialist, you can quickly view and manage multiple Exchange servers across multiple clients.
- for persistent state management, whereby you can create grouping rules to automatically add devices to a group when malware is detected, and then run an automated task against those device to remove the malware. When the malware is removed, the device is automatically removed from the group.
- to apply configuration profiles to Android, iOS, and OS X devices
- for user permissions whereby you can assign users to view and access certain groups only
Automatically Adding Devices to Groups
You can create automatic inclusion rules that determine the criteria a device must match to be included in the site or service group. As new devices are discovered, they are automatically added to the site and service groups to which they meet the defined inclusion rules. Conversely, if a change is made to a device and it no longer meets the inclusion rules, it is automatically removed from the group.
You can create automatic inclusion rules by defining logical AND or OR statements, and then adding the rule criteria.
Defining the scope
When creating automatic inclusion rules, you can optionally limit the scope of devices that are monitored. The scope of a group's automatic inclusion rules defines against which sites and groups any rules run, looking for devices with matching criteria.
You can choose to use a system-wide scope, which means all devices that appear in Service Center have the rules check for inclusion, or a custom scope, where you limit the rules execution to sites and groups you specify.
You can further refine the scope by adding exclusions to prevent sites, groups or devices you specify from being included, even if they are within the defined scope. For site groups, you can exclude specific devices. For service groups, you can exclude sites, groups, and devices.
A folder is a top-level organizational unit for service groups. For example, a folder called Workstations could contain a service group for Windows XP Workstations and Windows 7 Workstations.