Issues with file exceptions migrating from legacy AV McAfee/SEP

[paulhoff]

We have multiple endpoint classes in a private cloud,  from end user endpoints,  app servers, DB servers etc.) In our previous AV system console we separated these by groups and applied specific policies for each type, there are occasion where we are required to provide a specific class of server a file exception we would never apply to roaming laptop, how would we manage these distinct policies? Is it possible via Intune? Is this done via GPO, SCCM?

Thanks in advance for any help

P

[#2]

Hello paulhoff,

You will be able to provide different policies from Intune and GPO that you apply to groups or, in case of GPO's, to security AD groups and/or OU's. To use groups in Intune you could use dynamic Azure AD groups which add members based on specific properties like OS, please see:
https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-create-rule

For more information about dynamic groups.