Hello,
Thanks for reaching out to Hexnode Connect.
Here is the recommended approach for handling both your operating systems and your departmental policy targeting:
1. Regional Grouping for Windows Devices
For Windows devices, utilizing region-specific enrollment profiles is the most effective method. When you create a Windows enrollment profile in Hexnode, you can enable the Add to device groups option. By creating a separate enrollment profile for each region and mapping each to a corresponding custom device group (e.g., an enrollment profile for North America mapped to a North America device group), any Windows device enrolled using that specific link will automatically land in the correct regional group upon enrollment.
2. Regional Grouping for macOS Devices
For macOS, we recommend using Dynamic Device Groups. You can build dynamic groups based on available device attributes or location-based criteria like geofences. However, if your users frequently travel, relying purely on location geofences might cause devices to shift groups dynamically. In those cases, relying on stable user attributes or naming conventions established during ADE is a more reliable way to maintain fixed regional groupings.
3. Departmental Policy Targeting via Google Workspace
If you are already using Google Workspace, you can integrate your Google Workspace directory with Hexnode to sync your existing user groups.
- Once synced, your Google Workspace departments (IT, HR, Finance, etc.) will populate directly under the User Groups tab in your Hexnode console.
- You can then associate your departmental policies directly to these synced User Groups instead of individual Device Groups.
- As long as the enrolled devices are assigned to their respective authenticated users, they will automatically inherit the policies targeted at their department’s User Group.
I hope this helps. If you find any more issues or need further assistance feel free to reach out.
Best regards,
George,
Hexnode UEM