Back to Documentation

    Policies

    Configure and manage device policies to control features and settings across your infrastructure

    Introduction

    Policies are used to decide which features will be enabled on the machines to which the policy has been assigned. You can assign only one policy to a machine at any given time.

    Important: Each device can only have one policy assigned at a time. Choose your policy configuration carefully to ensure all required features are included.

    Security

    Control antivirus settings and security features

    Monitoring

    Enable sensors to track system metrics

    Automation

    Schedule jobs to run on managed devices

    Assigning a New Policy to Your Devices

    For detailed instructions on how to assign policies to your devices using automation, please refer to the dedicated guide:

    Policy Assignment Guide

    Learn how to use automation to automatically assign policies based on conditions like tenant, location, or group.

    View Assignment Guide

    Manage Policies

    In the navigation panel, click on Policies.

    Add New Policy

    1

    Click on Add

    Start creating a new policy

    2

    Fill in the required information

    Enter the policy name and description

    3

    Select the target operating system

    Choose Windows, Linux, or macOS

    4

    Click Confirm

    Save the new policy configuration

    Manage Your Policy

    To edit your policy, select the policy and then click on Manage.

    Antivirus

    Under Antivirus, you can configure which settings for Microsoft Defender Antivirus should be enforced on the machines.

    • Adjust scanner settings
    • Configure scan jobs
    • Set exclusions
    • Monitor folder access
    • Specify what events should be logged or trigger notifications

    Sensors

    Select the sensors from your sensor collection that should be enabled. Sensors allow you to monitor various system metrics and custom checks on your managed devices.

    Jobs

    Choose the jobs from your job collection. Jobs are scheduled tasks that will run automatically on devices assigned to this policy.