Hi,
We have couple of used cases one of which is following-
a. Obtain update online over the Internet when a laptop is roaming
b. USB access needs to be enabled on a laptop
We have different groups created for each of them a & b.
With current design we cannot have a policy applied on them as they cannot be part of both the group when the policy is applied as a computer based policy.
I propose an option to be created where a computer should be part of both the groups. Policy should be applied with an option to be a restrictive or non-restrictive policy. In a non-restrictive policy if a specific option is enabled in one policy same will be applied whereas when in restrictive mode if a certain option is not enabled in any of these policies same will not be applied.
With current policy design if I need to apply both the options (a & b) I need to create a 3rd policy where both these options need to be enabled and need to move the computer in this group.
By having the suggested design in place we can eliminate creating multiple groups.
Regards,
Anshuman