Software Updater changing what profile is assigned to client.

Stephan1

We use Withsecure Elements on our laptops and have different profiles.
For example, we have profile1 and profile2 (where profile2 accepts USB sticks).
A laptop was assigned to profile2. After this software updates were performed;
Software updates -> check all software -> Update on 166 workstations.

After this time the assigned profile of the laptop is suddenly Profile1.

Can this behavior be explained and can something be done about it?

Sethu Laks

Hi @Stephan1

Thank you for contacting the WithSecure Community,

I would first like you to review the profile assignment rule. I doubt this behavior could be related to Profile assignment rules which continuously evaluate rules for the devices and change the profile and label assignments for each device when changes in the AD group, IP, reverse DNS, or WINS name are detected. You can refer to this help page here:

https://help.f-secure.com/product.html#business/psb-portal/latest/en/task_C723CF40DB854F5B8AF92D26EE167000-psb-portal-latest-en

In an effort to explain various scenarios that will aid in your comprehension of the feature:

1. If we set a default AD profile: this will be applied to new devices installed and not the existing one
2. If toggle mentioned is disabled, and device moves between AD, then the device profile will not change
3. If the toggle is enabled, and device moves between AD, then the device profile will be updated with new AD default
4. If a profile is manually applied, and the toggle is disabled, and devices moves to another AD group, the profile remains the same
5. If a profile is manually applied, and the toggle is enabled, and device moves to another AD group, the profile will be updated to new AD default profile.

Please feel free to reach us if you still need any assistance.

Thanks

Sethu