Skip to content

Commit a35d31a

Browse files
authored
Merge pull request #1277 from dmcwee/docs-editor/configure-asset-rules-1725475318
Update configure-asset-rules.md
2 parents ebeff02 + 2fda8c8 commit a35d31a

File tree

1 file changed

+16
-7
lines changed

1 file changed

+16
-7
lines changed

defender-xdr/configure-asset-rules.md

Lines changed: 16 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.collection:
1212
- tier2
1313
ms.topic: conceptual
1414
search.appverid: met150
15-
ms.date: 07/11/2023
15+
ms.date: 09/04/2024
1616
---
1717

1818
# Asset rule management - Dynamic rules for devices
@@ -37,24 +37,31 @@ Dynamic rules can help manage device context by assigning tags and device values
3737

3838
A rule can be based on device name, domain, OS platform, internet facing status, onboarding status and manual device tags. You can select or create a tag that will be applied based on the conditions you've set.
3939

40+
> [!IMPORTANT]
41+
> Use of [dynamic device tagging](/defender-xdr/configure-asset-rules) capabilities in Defender for Endpoint to tag devices with `MDE-Management` isn't currently supported with security settings management. Devices tagged through this capability don't successfully enroll. This is currently under investigation.
42+
4043
The following steps guide you on how to create a new dynamic rule in Microsoft Defender XDR:
4144

4245
1. Sign in to the [Microsoft Defender portal](https://security.microsoft.com) as a user who can view and perform actions on all devices.
46+
4347
2. In the navigation pane, select **Settings** \> **Microsoft Defender XDR** \> **Asset Rule Management**.
48+
4449
3. Select **Create a new rule**.
50+
4551
4. Enter a **Rule name** and **Description***.
52+
4653
5. Select **Next** to choose the conditions you want to assign:
4754

48-
:::image type="content" source="/defender/media/defender/rule-conditions.png" alt-text="Screenshot of the Rule conditions page" lightbox="/defender/media/defender/rule-conditions.png":::
55+
:::image type="content" source="/defender/media/defender/rule-conditions.png" alt-text="Screenshot of the Rule conditions page" lightbox="/defender/media/defender/rule-conditions.png":::
4956

5057
6. Select **Next** and choose the tag to apply to this rule.
5158

52-
:::image type="content" source="/defender/media/defender/actions-to-apply.png" alt-text="Screenshot of the actions page" lightbox="/defender/media/defender/actions-to-apply.png":::
59+
:::image type="content" source="/defender/media/defender/actions-to-apply.png" alt-text="Screenshot of the actions page" lightbox="/defender/media/defender/actions-to-apply.png":::
5360

5461
7. Select **Next** to review and finish creating the rule and then select **Submit**.
5562

56-
>[!Note]
57-
> It may take up to 1 hour for changes to be reflected in the portal.
63+
>[!NOTE]
64+
> It may take up to 1 hour for changes to be reflected in the portal.
5865
5966
### Dynamic tags in the Device Inventory
6067

@@ -63,13 +70,15 @@ You can see the dynamic tags assigned in the Device Inventory view.
6370
To see tags on individual devices:
6471

6572
1. Select **Devices** from the **Assets** navigation menu in the [Microsoft Defender portal](https://security.microsoft.com).
73+
6674
2. In the **Device Inventory** page, select the device name that you want to view.
75+
6776
3. Select **Manage tags**.
6877

69-
:::image type="content" source="/defender/media/defender/manage-machine-tags.png" alt-text="Screenshot of the machine tags page" lightbox="/defender/media/defender/manage-machine-tags.png":::
78+
:::image type="content" source="/defender/media/defender/manage-machine-tags.png" alt-text="Screenshot of the machine tags page" lightbox="/defender/media/defender/manage-machine-tags.png":::
7079

7180
### Updating rules
7281

73-
Dynamic tags and device values set by dynamic rules can't be manually updated. To edit, delete or turn off a rule, in the **Asset Rule Management** page select the rule and choose the action you wish to take:
82+
Dynamic tags and device values set by dynamic rules can't be manually updated. To edit, delete or turn off a rule, in the **Asset Rule Management** page select the rule and choose an action.
7483

7584
:::image type="content" source="/defender/media/defender/update-rule.png" alt-text="Screenshot of the rule details page" lightbox="/defender/media/defender/update-rule.png":::

0 commit comments

Comments
 (0)