Configuring OU/Container Policies

1. Click the Discovery > Domains > Domain Watch > Policies > OU/Containers.
   • Use this tab to specify which domain machines you want to install a Kaseya agent on.
   • Each OU/container in this tab is identified by its canonical name. A canonical name provides the complete hierarchy of OUs/containers used to locate folders and items—such as computers, contacts or groups—in a domain, similar in format to the full path name of a file in a disk directory.
   • Additional columns show counts for the computers and contacts selected and available in each OU/container.
2. Select an OU/container that shows a count for one or more computers.

   Note: Sort this tab by clicking the Sort Descending option in the Total Computers column heading. This ensures any OU/containers with computer counts greater than zero are listed first.

3. Select the Computers Policy button.
   • The dialog box lists all the available computers of the OU/container you can include in selected policies.
   • Entering a checkbox next to a computer in this dialog means you want to install an agent on that domain computer.
   • Optionally checking the Include new Computers checkbox means you want to include new computers added to this OU/container. They will be assigned the same Discovery policy you have previously configured for selected computers in this OU/container.
   • Optionally checking the Automatically assign portal access to portal candidates means you also want to designate these computers as portal candidate machines.
   • Select the Machine Group to assign machine ID accounts created by this policy.
     • Select a fixed account, or
     • Use Directory Default - Administrators can automatically map the VSA machine groups used to organize domain computers inside the VSA using the OU hierarchy that already exists in Active Directory. This occurs when a OU policy or a computer policy selects the Use Directory Default value. When this occurs, the domain machine is assigned to the machine group that matches its current OU location. If an Active Directory administrator renames the OU or moves the computer to a different OU location, the machine group is changed in the VSA to match it. Tracking moves fully requires policies be set in both the source and target OUs. Parent machine groups are created as necessary, to match the OU hierarchy. Alternatively, a computer can be assigned a policy that assigns it to a fixed machine group.
4. Check one or more computers in the list and click Save.
   • The dialog closes and the count in the Selected Computers column is updated with the number of machines included in the computer policy you just set.
   • The Computers/Contacts Status displays Modified.
   • Do not Apply Changes yet.