Check Point HARMONY R81 - Managing Virtual Groups

Virtual Groups in Policy Rules
R81 Harmony Endpoint Server Administration Guide|154
n
All Servers
n
All Mac OS X Desktops
n
All Mac OS X Laptops
n
All Windows Desktops
n
All Windows Laptops
n
Capsule Docs external users - Users that are not part of the organization's Active
Directory but are registered on the Endpoint Security Management Server as an external
user. See "Working with External Users" on page293 . These are typically users who are
not part of the organization, but must be able to view documents which originated in the
organization.
n
Capsule Docs internal users -Users that are part of the organization's Active Directory.
The users and computers can be added to another virtual group, or removed from a virtual
group and added to another virtual group.
If you add objects to a virtual group with an installation package, the objects are not
automatically put into these virtual groups. You must do so manually. See .
Managing Virtual Groups
Work with virtual groups in the Virtual Group branch of the Users and Computers tree.
When you create a new virtual group, you set the group type, which you cannot change.
Changes to a virtual group are saved automatically and installed immediately on the Endpoint
Security clients.
n
A user or a computer can belong to multiple virtual groups
n
Only computers can be added to Computer virtual groups
n
You can copy users and computers to other virtual groups.
n
You can remove users and computers from a virtual group
n
You can copy Active Directory users, computers and members of Active Directory
groups to a virtual group.
Assign the Virtual Groups in a Policy rule, as for any other entity.
To create a new virtual group:
1. In the Users and Computers tree, click Global Actions > New Virtual Group.
2. In the New Virtual Group window: