A group is a collection of endpoints that share the same policy. In Nebula, you can choose which policy you assign to each group. Organize your endpoints by adding groups and moving endpoints to them. This article provides an overview of how endpoints, groups, and policies work together.
Groups
- Groups must have a policy. When you create or edit a group, you assign a policy for the group to use.
- Groups can be children of other groups. When creating a group, you can create it as a child of an existing group.
- You can change a group's policy. Select a different policy for a group at any time.
Endpoints
- Endpoints must belong to a group. By default, endpoints belong to the Default Group which uses the Default Policy.
- Endpoints can be directed into a specific group during installation using the GROUP="Group_ID" parameter. For more information, see the following links:
- If the Active Directory organizational unit structure has been imported using the Discovery and Deployment tool, endpoints are automatically assigned to their Active Directory group. For more information, see Malwarebytes Discovery and Deployment Tool Handbook.
- You can move endpoints to other groups. When you move endpoints to a different group, they use that group's policy.
Policies
- You can create a policy without assigning it to a group. When you create a policy, you do not have to assign it to a group. However, if a policy is not assigned to a group, it is not protecting any endpoints.
Return to the Malwarebytes Nebula Administrator Guide.