How to change the Elements Endpoint Protection “Default profile” or automate profile selection with Active Directory?

Issue:

How to change the default profile that is taken into use after installing Elements Endpoint Protection Agent (Elements EPP for Computers or Servers) or automate profile selection with Active Directory?

Resolution:

To change the default profile for Elements Endpoint Protection devices:

1. Log in to the Elements Security Center portal
2. Navigate to the Security configurations > Profiles page
3. Go to the Profile assignment rules tab
4. In the Profile assignment rules table, in the Default rules section, click on the three dots on the right side of the client type for which you want to change the default profile
5. Select Edit
6. Select the profile from the Assign profile drop-down menu 
7. Click Save

On the Elements Security Center portal's Profile assignment rules tab you can enable Change tracking if you want to continuously evaluate rules for the devices, and change the profile and label assignments for each device when changes in the Active Directory Organizational Unit, IP, reverse DNS, WINS name or asset groups are detected.

To create a custom rule so that a device is assigned an Elements profile automatically based on its AD Organizational Unit path:

1. Log in to the Elements Security Center portal
2. Navigate to the Security configurations > Profiles page
3. Go to the Profile assignment rules tab
4. In the Profile assignment rules section, click Add Custom rule
5. Select from the Condition drop-down menu either:
   1. Enter AD Organizational Unit path
   2. Select AD Organizational Unit path
6. Enter or select the AD Organizational Unit path
7. Select the client type:
   1. Windows workstations
   2. Windows servers
   3. Mac computers
8. Assigning asset group and labels is optional 
9. Click Add rule

Now the devices will be automatically assigned a profile based on their AD Organizational Unit path.