Community Ideas

In cases where domain member systems cannot reach the DC, enforcing settings via registry to ensure that GPO processing doesn't affect these systems.

Ability to clone baselines groups. Both within a tenant or clone to a separate tenant. This will be critical from an MSP workflow standpoint

Expanding the baseline primer template system to allow for templates of complete groups for faster deployment

Currently if an endpoint is disabled, it cannot be added to an exception group. Ideally it would be beneficial to add a device to a pre-made exception group where the agent might be in a disabled state for troubleshooting purposes.

Ability to mass acknowledge drift alerts.

Intention is to streamline the process of handling changes to the CIS Benchmarks and the inclusion of new settings.

When editing group configurations, the final save should include a modal to indicate what's actually being changed.