6.2 Creating Change Guardian Policies

You can create a policy in the one of the following methods:

6.2.1 Creating a Fresh Policy

You can create a fresh policy without preconfigured settings.

To create a policy:

  1. In the left pane of Policy Editor, select one of the following applications:

    • Active Directory

    • Group Policy

    • UNIX

    • Windows

    • Azure Active Directory

    • NetApp share

    • Dell EMC

    • Microsoft Exchange

    NOTE:Only the installed application are displayed.

  2. Expand the list of policies and select the policy type you want to create, such as Active Directory Policies > AD Object.

  3. Click Create Policy.

  4. On the policy details window, make the appropriate changes.

  5. (Conditional) If you are creating a Windows policy to monitor Local Users and Groups, complete the following:

    1. To ensure the policy generates events, you must add at least one of the following:

      • Event List

      • LGU Privileges

    2. Select the events or privileges, or both that you want to monitor.

  6. Click Submit.

  7. (Conditional) If you want to enable the policy now, select the Enable this policy revision now check box

    NOTE:For more information about enabling a policy, see Enabling a Change Guardian Policy Revision .

6.2.2 Creating from a Template

Policy templates provide examples of policies and best practice content you can reuse. Applying a policy template from the platform template library will clone the policy into your active policy area. When a copy of the template appears in the list of policies for the module, you can edit the constraints to specify your monitored computers and files.

To clone from a template:

  1. In the left pane of Policy Editor, select one of the following:

    • Active Directory

    • Group Policy

    • UNIX

    • Windows

    • Azure Active Directory

    • NetApp share

    • Dell EMC

    • Microsoft Exchange

  2. Expand the list of templates and select the template you want to clone. For example, Active Directory Templates > AD Object > Site Link Cost Modified.

  3. Click Apply.

  4. On the policy details window, make the appropriate changes, and then click Submit.

  5. (Conditional) If you want to enable the policy now, select the Enable this policy revision now check box

    NOTE:For more information about enabling a policy, see Enabling a Change Guardian Policy Revision