tacticalrmm icon indicating copy to clipboard operation
tacticalrmm copied to clipboard

Create default policy

Open dinger1986 opened this issue 2 years ago • 10 comments

Something to make life easier for new users, why dont we have a predefined automation policy? It could be applied (or not) just have one setup with recommended checks and tasks, also patch automation policy, if its already there it would make it easier for a user to setup their own ones as they could check how the defaults are setup, its quite common for av/firewalls etc to have a default policy so makes sense to have one.

I'm thinking fairly simple stuff, disk space check, av check,error checking, windows updates on etc, guess should draw up a list which I am happy doing if anyone has any suggestions.

The default policy would probably be windows only at the moment and should probably be read only but a user could right click and copy to a new one.

dinger1986 avatar Aug 19 '22 07:08 dinger1986

This will be a summary note. I'll keep editing for reference: Have a checkbox on the first welcome screen with the new install to "create default policies".

Automation Policy Script:

  • Disk space 10% warn, 5% error. Dashboard notification.

Task:

  • Defender: Status check, run daily 10:12am. Dashboard notification.

Patch Policy

  • Approve All. Schedule Monthly on 25th day, 3 AM. Reboot when required.

Alerts Manager I would love to have at least Agent Overdue enabled, but if they haven't setup email and SMS on the server, it's going to error.

Some other ideas: https://discord.com/channels/736478043522072608/1099701768956424264

silversword411 avatar Aug 19 '22 10:08 silversword411

I was thinking even more basic and just have it on by default, not asking if users want it enabled.

I had thought about about Agent overdue notifications but that would be annoying, guess it would teach new users fairly quickly how to use the policys

dinger1986 avatar Aug 19 '22 10:08 dinger1986

So...here's my TRMM's first impression pretending to be a new user. I've followed the install. I have the dashboard. #NowWhat

There it is. For IT people with experience, they're going to open every menu/dialog and see what's there and start poking.

I think a default policy could/should auto-expose by example, a minimum of everything. Once. Drawing the user into the exploration, and giving a minimum of functionality. Basic game theory design :)

silversword411 avatar Aug 19 '22 10:08 silversword411

I love this idea as well.

I think there should be different Default for Windows Server and their common Roles Some Small Examples

  • Exchange Server Role Defaults
    • Monitor Certificate for Expiry
    • Monitor for deffered mail or any type of mail error preventing flow or too much flow
    • Exchange Store Size
    • Exchange System Services
  • Microsoft SQL
  • Active Directory
  • DHCP
  • Time Issues

Im sure ill think of more.

Also I believe SolarWinds has Predefined Role Templates as well. In fact I think it auto detects whats installed and autom`atically adds the right checks and tasks.

johnnyq avatar Aug 22 '22 20:08 johnnyq

To be honest that moves into a almost template system which is quite afew steps ahead of what I had planned.

A default policy would mainly be setup for examples more than anything else. Disk space, high cpu, high ram, temp clean up etc

dinger1986 avatar Aug 22 '22 20:08 dinger1986

ahh yes @dinger1986 i am thinking way ahead lol, but yeah lets start off with the small basics hehehe

johnnyq avatar Aug 22 '22 20:08 johnnyq

I like the idea of a Global Policy that applies to all sites and clients (for example, nearly all our clients share the same patching & maintenance schedule).

It could then be overridden by client and site-specific policies further down the chain.

joeldeteves avatar Sep 20 '22 16:09 joeldeteves

+1 for sample policies or some sort of basic Windows workstation automation policy.

volkswagner avatar Apr 23 '23 14:04 volkswagner

+1 for default Server and Workstation policies.

jlydia avatar Apr 28 '23 17:04 jlydia

If you're going to comment on the issue, give ideas of what you think might be useful for all

silversword411 avatar Apr 29 '23 00:04 silversword411