...
Apply a
...
A provisioning policy has users that can be provisioned, groups that can be provisioned...a provisioning interval is the frequency that an object is checked. It will apply once the policy is created, and then it will.
Best Practices
Removing Administrator Rights Policy,
After the initial removal of Administrator Rights, the interval should be anywhere between 1 to 7 days if the end user is not an administrator.
After the initial removal of Administrator Rights, the interval should be much shorter, anywhere from 30 minutes to 4 hours.
Validate your work by going to Reports.provisioned group to target computers after you have created a provisioned group. When you provision the Administrators Provisioned Group, remember that you want to run the policy on a schedule that will ensure the strictest integrity of your local group accounts.
To apply a provisioned group, do the following steps:
- From the Arellia Security Manager Console to the Policies tab.
- Navigate to Policies > Arellia > Local Security > Policies.
- Right-click Policies > New > Client Scheduled Tasks > Local Security Scheduled Client Task.
- Select Local Security Provision Command.
- From Provision Administrator Group select Provisioned Groups.
- Create a New Schedule for the provisioning policy.
- Enable the policy, by ensuring the green toggle is on.
- Add Target computers to the Policy.
- Save the policy. The Administrators Group will be applied on the set schedule.
