Fortinet black logo

EMS Administration Guide

Adding an OS group assignment rule

Adding an OS group assignment rule

When enabled, an OS group assignment rule requires all endpoints with a certain OS installed to be placed into the specified endpoint group.

  1. Go to Administration > Group Assignment Rules.
  2. Click Add.
  3. Under Type, select OS.
  4. In the OS field, enter the desired OS. Endpoints who have the specified OS installed will automatically be placed into the specified group. You can enter the OS family name or specify a certain version of the OS. For example, you can enter "Windows", or "Windows 10". " If you enter "Windows", endpoints with any version of Windows installed (including Windows 7, Windows Server 2012, and so on), are applicable for the group assignment rule. If you enter "Windows 10", only endpoints with Windows 10 installed are applicable.
  5. In the Group field, do one of the following:
    1. If you want to place the endpoints into an already existing group, select the desired group from the dropdown list.
    2. If you want to place the endpoints into a new group, click Create a new group from the dropdown list, then enter the desired group name. FortiClient EMS creates the new group.

      To create a new nested group, enter the desired group hierarchy. For example, to create a Seattle group nested under a West Coast group, enter West Coast/Seattle. FortiClient EMS then dynamically creates any group that does not exist. For example, if both the West Coast and Seattle groups do not exist, FortiClient EMS creates both groups with the desired hierarchy. If the West Coast group exists, FortiClient EMS creates a new Seattle group nested under it.

  6. Enable or disable the rule by toggling Enable Rule on or off.
  7. Click Save.

Adding an OS group assignment rule

When enabled, an OS group assignment rule requires all endpoints with a certain OS installed to be placed into the specified endpoint group.

  1. Go to Administration > Group Assignment Rules.
  2. Click Add.
  3. Under Type, select OS.
  4. In the OS field, enter the desired OS. Endpoints who have the specified OS installed will automatically be placed into the specified group. You can enter the OS family name or specify a certain version of the OS. For example, you can enter "Windows", or "Windows 10". " If you enter "Windows", endpoints with any version of Windows installed (including Windows 7, Windows Server 2012, and so on), are applicable for the group assignment rule. If you enter "Windows 10", only endpoints with Windows 10 installed are applicable.
  5. In the Group field, do one of the following:
    1. If you want to place the endpoints into an already existing group, select the desired group from the dropdown list.
    2. If you want to place the endpoints into a new group, click Create a new group from the dropdown list, then enter the desired group name. FortiClient EMS creates the new group.

      To create a new nested group, enter the desired group hierarchy. For example, to create a Seattle group nested under a West Coast group, enter West Coast/Seattle. FortiClient EMS then dynamically creates any group that does not exist. For example, if both the West Coast and Seattle groups do not exist, FortiClient EMS creates both groups with the desired hierarchy. If the West Coast group exists, FortiClient EMS creates a new Seattle group nested under it.

  6. Enable or disable the rule by toggling Enable Rule on or off.
  7. Click Save.