Forum Discussion

frank79's avatar
frank79
Copper Contributor
Jun 27, 2023

Multiple Autopilot Deployment Profiles - Catch All

Hi.

 

I was just wondering about the following scenario, if this is the right way to go if I want to achieve a common base (catch all) for profiles/policies/apps for all autopiloted devices, whether or not they have a GroupTag assigned:

 

  • Create two security groups: All Autopiloted Devices + All Autopiloted Devices - VM.
  • Create two deployment profiles: AP Default + AP VM.
  • Assign only All Autopiloted Devices to the AP Default profile.
  • Assign both All Autopiloted Devices + All Autopiloted Devices - VM groups to the AP VM profile.

Any help is highly appreciated.

 

Kind regards,

frank79

 

  • frank79's avatar
    frank79
    Copper Contributor
    It stumbles me that nobody else have questioned this. Are you assigning all the different security groups to each profile/policy/app? Seems like a tideous way to do it, instead of just including one (catch all). Am I asking the right question BTW?
  • rahuljindal-MVP's avatar
    rahuljindal-MVP
    Bronze Contributor
    It will depend on your policies. If the settings are same for phyical and virtual devices then use a single group. In my opinion there is no right answer, nor a best practice here. The only thing I can suggest as a general practice, keep it simple and use Device filters wherever possible.

Resources