Skip to content

Move Host to Another Subgroup

Purpose

The Move Host function lets an administrator move one or more endpoint Hosts from their current Subgroup to a different Subgroup. Moving a Host changes which inherited policies and Trust/Blocking/Monitor configuration the Host receives from the Security Group Inheritance Tree, because the Host begins inheriting from the destination Subgroup and its parents instead of from its previous Subgroup.

Where to Find It

The Move Host workflow is available from the WCS Admin interface. From the Main Menu:

  1. Click the Admin Info button.
  2. Click the Hosts ... button.
  3. Click Move Hosts to New Subgroup.

The page is titled Show Hosts for Accounts. From this page, an administrator can:

  • Find Hosts using search filters.
  • Select one or more Hosts.
  • Choose the destination Subgroup.
  • Move the selected Hosts.
  • Cancel a pending Host move.

Filtering Hosts

The Show Hosts for Accounts page provides several search and filter controls to narrow the Host list before selecting Hosts to move.

Text Filters (REGEX)

Each of the following fields accepts a regular expression:

  • REGEX for Account Username
  • REGEX for Account Email
  • REGEX for Subgroup Name
  • REGEX for Host Name or Nickname
  • REGEX for Notify Email

Subgroup ID Filter

  • Subgroup ID, separated by commas — filter by one or more specific Subgroup IDs.

Status Radio Buttons

Use the radio buttons to filter Hosts by move status:

  • Active
  • Move Pending
  • Moved
  • Show All

Organization Scope

  • Just My Orgs — restrict the list to the administrator's own Organizations.
  • And My Clients' Orgs — also include Organizations belonging to managed clients.

Combine these filters as needed to locate the correct Hosts before moving them.

Selecting Hosts

After filtering, use the Host selection controls to choose which Hosts to move:

  • Select Hosts
  • Deselect Hosts
  • Select ALL
  • Deselect ALL

Selected Hosts appear in the Host table and can be moved together as a single batch.

Choosing the Destination Subgroup

The Choose the Subgroup to Move to area is used to pick the destination Subgroup. There are two ways to scope the destination list:

  1. Move to: Inheritance Tree — choose a destination Subgroup from the Security Group Inheritance Tree.
  2. Move to: Groups I Manage — choose a destination Subgroup from the groups the administrator manages.

Once a scope is selected, choose the destination account/Subgroup from the dropdown list. Use the Filter subgroups by name field to quickly find a specific destination Subgroup.

Moving the Selected Hosts

To move one or more Hosts:

  1. Select one or more Hosts in the table.
  2. Choose the destination Subgroup.
  3. Click Move Selected Hosts.
  4. Confirm the move in the confirmation dialog.

The confirmation dialog displays the details of the pending move, including:

  • Number of Hosts being moved
  • Host name
  • Destination Subgroup
  • Group ID

Click Move Hosts to Other Subgroup in the confirmation dialog to commit the move. The Host move is then processed and the Host table updates to reflect the new status.

Canceling a Pending Move

If a Host move has been initiated but has not yet completed, the administrator can cancel it. Select the Hosts with a pending move and click Cancel Move of Selected Hosts. The pending move is cleared and the Hosts remain in their original Subgroup.

What Changes After a Host Is Moved

After a successful move:

  • The Host is assigned to the selected destination Subgroup.
  • The Host inherits policies from the destination Subgroup and its parent groups in the Security Group Inheritance Tree.
  • The Host may receive a new Subgroup ID / Auth Code assignment as part of the move process, depending on system configuration.
  • Administrators can use the Move Pending, Moved, or Show All filters to review Host move status.

Best Practices

  • Confirm the destination Subgroup before moving production Hosts.
  • Move a small number of Hosts first when changing policy inheritance, so any unexpected policy effects can be observed before a larger rollout.
  • Review the inherited Approved / Trust, Blocking, and Monitor policies for the destination Subgroup before moving Hosts.
  • Use the search filters to confirm that the correct Hosts were selected.
  • Use the Move Pending and Moved filters to verify the status of each Host move.