Agents → Agents, Group column: the
effective group as the server calculates it. “(auto)” means targeting
matched. No suffix means a manual assignment. Default
means nothing matched.
Machine drawer → Policy group: the manual
assignment. The first option reads (auto: Finance) when
targeting decides, or Default. Only enabled groups are
listed. Changing it takes effect at the machine’s next sync without
Publish & Sign, and is logged as Agent assigned
to group.
Machine drawer → Active policies: the labels and
rules this machine really receives, with the group name.
Machine drawer → Mailbox: the address used for mail
targets, with its source (Active Directory or Outlook
profile).
Policy → Groups → group drawer → Machines in
this group, and the Default card’s
View drawer.
On a Windows endpoint, the tray app’s About window shows the
group.
