How to exclude devices from a cloned Hexnode policy using device group exceptions?Solved

Hi @raelynn,

You can exclude devices from a policy by adding exceptions to the device group that is used as the policy target.

If the cloned policy is associated with a device group, update the group criteria as follows:

1. Go to Manage > Device Groups, and open the device group targeted by the policy.
2. Go to Criteria, and open Conditions and Exceptions.
3. Click Edit, and use Add Exceptions to exclude the devices that should not receive the policy.

Once the devices are added as exceptions, the policy will no longer be associated with those excluded devices through that device group.

If the policy should apply only to certain users instead, create a custom user group with the required users and associate the policy with that user group instead of using a broad target group.

Regards,
Sienna Carter
Hexnode UEM

I added the exceptions under the device group, but the device count didn’t change immediately. The excluded device wasn’t showing under the policy anymore, though. Is that normal?

Hi @raelynn,

Yes, that can happen. After modifying the group criteria or exceptions, run a sync for the device group:

1. Open the device group and go to Actions.
2. Select Scanning & Monitoring and click Sync now.

The policy association can update before the total device count fully refreshes. Once the device group sync completes, the device count should reflect the updated membership. If the excluded device no longer appears under the policy, the exemption is already working as expected.

Regards,
Sienna Carter
Hexnode UEM