Endpoint Groups & Department Tags

Organize workstations by department, location, or risk profile to apply targeted policies.

Sentinel Operations Team

4 min read

Updated August 28, 2026

v3.2

Different departments have different security requirements. For example, Finance laptops might require strict USB blocking, while Engineering laptops require custom developer directory exclusions.

Policy Configuration — Application & USB Monitoring

Policy Engine

Policy:Global Corporate Standard v2

Enforced

USB Storage Enforcement

Policy Mode: Read-Only Enforced

Prompt User Alert: Enabled

Log File Copies: Enabled (All Sizes)

Directory Watch Patterns

✓ C:\Users\*\Documents\**

✓ C:\CompanyData\**

✗ Exclude: C:\Windows\**

Pin #1:USB Storage Control Mode

Toggle between Allow All, Read-Only Enforcement, or Complete Block with custom user prompt alerts.

Pin #2:Directory Watch Patterns

Configure specific folder paths (e.g. C:\Finance or /etc/) to trigger real-time alerts on file modifications.

1USB Storage Control Mode

2Directory Watch Patterns

Figure 2.1: Policy management screen for configuring process whitelists, browser telemetry, and USB block rules.

Tags:#Groups#Tags#Department Policies

Was this documentation page helpful?

Your technician feedback helps our team continuously improve Sentinel guides.

Organization & Tenant Settings

Application & Process Monitoring Policies