You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-[Investigate the device details](/defender-endpoint/investigate-machines) to identify behaviors or events that might be related to the alert.
51
51
- In the device details pane, select the ellipsis on the top right to [take response actions on a device](/defender-endpoint/respond-machine-alerts).
52
+
-[Manually update the site associated with a device](manage-sites.md#change-site-location-of-a-device) to maintain accurate monitoring of the network traffic.<!-- Devices can be manually updated[Update the site associated with a device.-->
## Manually change the site location/association of a device or multiple devices <!--location/association? Amit-->
21
21
22
-
It's possible that Defender for IoT identifies a device located in the wrong site. To change the site listed for a device:
22
+
Security admininstrators can manually assign or modify the site location for a device. Manually assigning a site overrides the automatic site association created when making the site. Therefore, once a site is set manually, this device <!-- surely: once the device is set manually, it will no longer.... AMIT? --> will no longer appear in the automatic site association suggestions in the Site set up process, until the manual association is reset.<!-- why do i need to add this, if the device is already associated with a site, why would it appear in a list anyway? Amit -->
23
+
24
+
To quickly update a group of devices, select multiple devices from the inventory and set the site for all of the selected devices simulataneously.<!-- The 'Set site' action can be used for bulk management by selecting multiple devices from the inventory and setting the site for all selected devices simultaneously. This allows for quick updates to site associations when managing a group of devices. this was Amits wording, i think this is better. but should i use the words bulk management? Should this be added at the end instead of the beginning? Limor-->
25
+
26
+
To change the site associated with a device:
23
27
24
28
1. Select **Assets -> Devices** to open the **Device Inventory**.
25
-
1. Select the deviceto update. A list of actions appears at the top of the Device Inventory table.
26
-
1. Select **Set site**.
29
+
1. Select the device, or group of devices, to update. A list of action buttons appear at the top of the Device Inventory table.
30
+
1. Select **Set site**. The **Set site** pane opens.
27
31
28
32
:::image type="content" source="media/manage-sites/set-site-from-inventory-boxed.png" alt-text="Screenshot of the set site button in the device inventory table for changing the site location setting" lightbox="media/manage-sites/set-site-from-inventory-boxed.png":::
29
33
30
-
1. In **Set site manually**, open the **Select site** drop down list and select the site to associate with this device. If you are unsure of the location, select **Unassigned**.
34
+
1. In **Set site manually**, open the **Select site** drop down list and select the site to associate with this device. If you want to leave a device unassociated with a specific site, select **Unassigned**.
31
35
32
36
:::image type="content" source="media/manage-sites/device-set-site-manually.png" alt-text="Screenshot of the set site manually drop down list for changing the site location setting" lightbox="media/manage-sites/device-set-site-manually.png":::
33
37
34
38
1. Select **Save and close**.
35
-
1. The Set site confirmation box appears. Select **Confirm** to finalize the change.
39
+
1. The Set site confirmation box appears. Select **Confirm** to finalize the change. Finalizing the change prevents automatic site reassignment based on existing site security rules and remains until the device is reset manually.
36
40
37
-
Alternatively, you can also go to **Site security** and edit the site and change the devices associated to it using the **Edit site** wizard. For more information, see [link to site security](monitor-site-security.md). <!-- but this is more like removing a device from a specific site, not adding it to a different one instead?? AMIT-->
41
+
Alternatively, for managing multiple device or making site wide changes, it is recommended to go to **Site security** and use the **Edit site** wizard to more efficiently manage the site and the devices associated to it. For more information, see [link to site security](monitor-site-security.md). <!-- but this is more like removing a device from a specific site, not adding it to a different one instead?? how is this different from the bulk management mentioned above? AMIT-->
0 commit comments