Automated way of assigning ENS-related policies to multiple endpoints/servers in ePO

[JKBH1]

Hi, I'm hoping someone from the ePO team can help with this question.

Wondering if there's a way in ePO to assign policies to multiple endpoints? Our use case is when app is set for maintenance, the app owners want Endpoint Security policies such as OAS/ODS/Access Protection to be disabled for a brief period. Is there a more efficient way to do this, i.e. automation/scheduling, rather than manually dragging the multiple servers to the sub group, where the OAS/ODS/Access Protection policies are disabled, in the system tree? The other reason is sometimes the admins forget to put the endpoints back to the original ENS policies. It leaves the endpoints vulnerable for a long period of time, especially without having OAS running.

I looked into the Server Tasks. I didn't see anything that could do this. 

Policy Assignment doesn't do a schedule.

Thanks!

@cdinet 

[cdinet]

You can generate a text file as a list of systems you want to manage the policies for, use server task to load systems by file.  As secondary action, you can assign policy.  You can set up 2 tasks to run on demand - one to disable oas, the other to re-enable it by assigning the appropriate policies.