Already a NinjaOne customer? Log in to view more guides and the latest updates.

Create and Edit Dynamic Policies Effectively

Topic

This article describes how to create and edit dynamic policies in NinjaOne.

For an overview of dynamic policies and the logic they use, refer to NinjaOne Policies: Getting Started With Dynamic Policies.

This feature is currently in beta. To enable it, contact your NinjaOne Account Manager.

Environment

NinjaOne Endpoint Management

Description

Dynamic policies enable you to configure individual policy components and settings that target users and devices dynamically while leveraging a prioritization matrix to resolve conflicts.

Operating system support for dynamic policies is currently limited to Microsoft Windows endpoints only.

NinjaOne administrators and technicians can create, edit, and delete dynamic policies across your entire organization from a single location within the platform. To learn how to do so, select a topic to continue.

Overview

You can manage dynamic policies within the NinjaOne platform at Administration → Dynamic policies → Windows.

dynamic-policies-windows-policies.png
Figure 1: Dynamic Windows policies table (click to enlarge)

The Dynamic Windows polices page consists of the following features and fields:

FeatureDescription
Desktops and laptopsNinjaOne organizes dynamic policies into tabs based on policy type, with one tab for Microsoft Windows desktops and laptops and another for Microsoft Windows servers. You prioritize policies within each type separately.
Servers
Manage priorityNinjaOne sorts policies by priority, where a lower number indicates higher priority. By default, policy lists order policies from highest to lowest priority. Click Manage priority to view and customize the prioritization of your dynamic policies
Create dynamic policyBegin the workflow for creating a new dynamic policy; for more information, refer to the Creating or Editing a Dynamic Policy section of this article.
Refresh (refresh icon.png)Refresh the dynamic policies table.
Table settings (GearIcon.png)Configure sort behavior, column visibility, and ordering for the dynamic policies table.
Dynamic policy tableThis table enumerates the policies you've created across all organizations and surfaces status and configuration details for each. Click any interactive header to sort the displayed records by the column's value. Move your cursor over any entry in the table to invoke its Actions drop-down menu. Click any entry to view and edit its configuration. For column definitions, refer to the Dynamic Policies Table Columns section of this article.
Actions (ellipsis.png)Enables you to edit or delete the selected policy

Dynamic Policies Table Columns

The dynamic policies table provides a comprehensive list of all active and inactive dynamic policies across your organization. By default, the table displays the following information:

ColumnDescription
PriorityA numeric representation of the policy's priority; the lower the number, the higher the priority; to learn more about priority, refer to NinjaOne Policies: Getting Started With Dynamic Policies
Dynamic policy nameAssigned a user-friendly name to the policy; NinjaOne uses this value throughout the platform when referencing the policy
StatusIndicates whether the policy is active; when inactive, the policy's settings will not apply or appear on lists of dynamic policies affecting an endpoint
OrganizationsTotal number of organizations and locations to which this policy applies; click any number to view and export granular lists for each type
Locations
DevicesEnumerates a count of all devices to which the policy applies
Areas configuredA comma-separated list of configured areas within the selected policy
Target rulesAll target rules within which the policy is assigned; for further details, review our NinjaOne Policies: Working With Target Rules article

You can customize the table with the following optional columns:

ColumnDescription
Last updated dateThe most recent date that the policy underwent changes
Last updated byIdentity of the most recent technician to update the policy
Created dateThe date of the policy's creation
Created byIdentity of the technician who created the policy

Creating or Editing a Dynamic Policy

To create or edit a dynamic policy, perform the following steps:

Create or Select a Policy

  1. In NinjaOne, navigate to Administration → Dynamic policies → Windows.
  2. On the Dynamic Windows policies page, select the Desktops and laptops or Servers tab.

If you're creating a new policy:

  1. Click Create dynamic policy.
  2. The Create dynamic policy modal will open.
  3. In the Name field, input a user-friendly value that clearly identifies the policy.
  4. Optionally, in the Description field, enter a description of the policy's purpose (up to 250 characters).
  5. To automatically activate the dynamic policy upon its creation, select the Enable dynamic policy toggle.

    Dynamic policies that are not active will not apply to devices.
  6. Click Continue.
  7. Proceed to the Configure the Policy section of this workflow.

If you're editing an existing policy:

  1. In the dynamic policies list, click the name of the policy you'd like to configure. Alternatively, move your cursor over the policy's list entry, click its Actions menu, and click Edit.
  2. Proceed to the Configure the Policy section of this workflow.

Configure the Policy

  1. Once you've completed the steps in the Create or Select a Policy section of this article, the dynamic policy's detailed view will open, where the following page features will be available to you:
FeatureDescription
Page actions (ellipsis.png)Edit the policy's details or activate, deactivate, or delete the policy.
CloseClose the policy's detailed view.
SaveSave changes to the policy.
ConditionsManage conditions for the policy. Refer to the Conditions section of this article for additional page details.
Scheduled AutomationsView and manage automations associated with the policy. For further information, refer to the Scheduled Automations section of this article.
OS patchingDefine how and when the dynamic policy scans, approves, and deploys operating system patches across devices. Review this article's OS Patching section to learn more.
  1. Make all desired customizations to the dynamic policy. For guidance about each configurable area, refer to the Conditions, Scheduled Automations, OS Patching, and Good to Know sections of this article.
  2. When you finish making changes, click Save. To discard your changes, click Close.

    If you have partially configured a dynamic policy and want to work on it later, and you don't want it to apply until you have done so, save the policy and then deactivate it from the policy's page actions drop-down menu.
  3. NinjaOne will redirect you to the Dynamic Windows policies page.
  4. If you created a new policy, it will appear in the dynamic policies table, as shown in the preceding Figure 1.

Conditions

In remote management and monitoring (RMM), policy conditions are rules set by managed service providers (MSPs) or IT departments to remotely oversee endpoints. When these conditions are met, they trigger actions such as opening a ticket, running an automation, or sending a notification. A common use case for conditions is identifying issues or problematic situations requiring resolution.

Compound conditions in NinjaOne are combinations of multiple criteria that increase the granularity of how alerts are triggered and actions are executed. They enable administrators to define more precise rules for device targeting, monitoring, and automation.

Conditions in a dynamic policy stack together. If more than one policy applies to a device, their conditions are added together and sent to the agent as a single combined set. Refer to the Additive and Merging and Policy Application Order sections of NinjaOne Policies: Getting Started With Dynamic Policies for more information about additive and policy application behavior in NinjaOne.

The Conditions page enables you to review and customize the conditions, compound conditions, and notifications associated with the selected dynamic policy.

Dynamic policy condition management differs from that of other policies. Future NinjaOne releases will deliver a unified experience across all policy types. For general guidance about working with conditions, review NinjaOne Policies: Condition Configuration. To learn how to add or edit dynamic policy conditions, refer to the Adding or Editing a Condition section of this article.
dynamic-policies-entity-conditions-compound.png
Figure 2: Policy details → Conditions (click to enlarge)

Page Features

Move your cursor over any entry in the conditions table to invoke its Actions drop-down menu. Click any entry to view and edit its configuration.

FeatureDescription
SearchEnter a partial or whole value to filter current view to matching records.
Import templateAdd conditions from a categorized library of pre-defined templates.
Add conditionAssociate a new single or compound condition with the selected policy. To learn how to do so, refer to the Adding or Editing a Condition section of this article.
Conditions tableView and manage all conditions associated with the selected policy.

Page Fields

Click any interactive header to sort the displayed records by the column's value.

FieldDescription
NameThe name of the scheduled automation and a brief description of its behavior; move your cursor over any automation entry to access its action menu
StatusIndicates whether the condition is active or inactive
Device healthDesignates the device health status that will apply to any monitored endpoints where the condition is met
TypeIndicates whether the ruleset is a single condition or a compound condition
TicketingActions the condition will take, if any, in NinjaOne Ticketing
ConnectWiseActions the condition will take, if any, in ConnectWise
ChannelsEnumerates the channels by which technicians will receive notifications when the condition is met
Actions (ellipsis.png)Enables you to edit, activate, inactivate, or delete the selected condition
Adding or Editing a Condition

NinjaOne policies enable the activation of predefined conditions and the creation of new custom policies from templates or from the ground up. Each policy can include multiple conditions, and each condition can have several associated automations, with parameters that you can configure for each condition. To add a condition to your dynamic policy, perform the following steps.

  1. Create or select a dynamic policy by following the steps in the Create or Select a Policy section of this article.
  2. Open the policy's detailed view.
  3. In the left navigation menu of the policy details page, select the Conditions tab. Then, proceed to the Adding a New Condition From a Template or Creating a New Condition section of this article.
Adding a New Condition From a Template
  1. On the Conditions page, click Import template.
  2. The Monitoring Templates modal will open.
  3. Select a template category from the Folders tree. The preconfigured templates in that category will populate in the Available Templates column. To filter the list, enter a term in the Search box. For template definitions, refer to NinjaOne Policies: Condition Templates.
  4. Select a template from the Available Templates list.
dynamic-policies-select-condition-template.png
Figure 3: Selecting a monitoring template (click to enlarge)
  1. The newly-added condition will populate in the conditions table in an Enabled status. To learn how to review or edit its configuration, proceed to the Configure the Condition section of this article.
Creating a New Condition
  1. On the Conditions page, click Add condition (Figure 4-1).
  2. The Add condition modal will open, with the Condition tab selected by default (Figure 4-2).
  3. Proceed to the Configure the Condition section of this workflow.
Configure the Condition
  1. If you added a condition from a template, or you're editing an existing condition, click its name in the conditions table. The Add condition modal will open. If you created a new condition, the Add condition modal will already be open.
  2. On the Condition tab, define the parameters under which the condition will trigger. The available parameters will vary depending on the selected condition. For field definitions, refer to NinjaOne Policies: Condition Types Breakdown. Figure 4 shows the parameters for the Memory condition. 
dynamic-policies-add-condition.png
Figure 4: Adding a condition (click to enlarge)
  1. Next, on the Settings tab, use the following configuration areas to review the condition's run rule, set the condition's name, and customize reset and health impact behaviors:
ConfigurationDescription
ConditionThis read-only field describes the circumstances under which the condition will trigger, as defined by the settings on the Condition tab.
Custom nameOptionally, you can designate a user-friendly name to identify this condition in the conditions table.
Auto-reset after time periodIf you'd like the condition's run rules and device health impact to automatically reset, even if the condition is currently met, select this checkbox and choose an interval from the drop-down menu.
Reset when no longer met forIf you'd like the condition's run rules and device health impact to reset only after the condition hasn't been met for a designated period, select this checkbox and choose an interval from the drop-down menu.
Device health impactWhen the condition is met, NinjaOne will reflect the device health status you select here on the Devices dashboard. If you select Use global default, the condition will inherit your status settings from Administration → Devices → Health status.
  1. If you'd like the dynamic policy to run designated automations when the condition is met, click the Automations tab. Then, click Add automation to associate a new automation with the condition. Automations added to the condition will run in descending order, beginning with the first in the list and ending with the last. Use your mouse cursor to click and hold the move-handle-icon.png (move handle) icons to adjust the run order.
  2. Finally, select the Notifications tab to specify how and whom the dynamic policy should notify when the condition is met. You can define the following criteria:
ConfigurationDescription
SeverityDefine the extent to which this condition can impact an endpoint when it occurs.
PrioritySelect a value to indicate how urgent the condition's resolution is relative to all other open issues they might currently be triaging.
ConnectWise ticketDesignate the notification actions the dynamic policy will take, if any, in ConnectWise and NinjaOne Ticketing when the condition is met.
Ticketing rule
Notification channelsIf technicians should receive notifications when the condition is met, choose the specific alerting channels or points of contact within all configured instant messaging, webhook, email, SMS, and integrated communication methods where those notifications should populate.
Notify technicians via SMS/EmailActivate this toggle switch to send notifications to technicians via all configured SMS and email channels, alongside any other selected notification channels for the condition.
Notify on resetWhen this toggle switch is active, NinjaOne will generate notifications when the condition resets in addition to when it triggers.
  1. If you're creating an entirely new condition, when you finish making configuration changes, click Add. If you're editing an existing condition (including one added from a template), click Update.
  2. The configured condition will appear in the conditions table. New conditions populate in an Enabled status by default.
  3. Click Save to commit the changes to your dynamic policy.
dynamic-policies-added-condition.png
Figure 5: Configured condition (click to enlarge)

Scheduled Automations

NinjaOne streamlines information technology (IT) operations by centralizing software deployment, system monitoring, reporting, and endpoint management through policy-driven processes for routine tasks such as password resets, software installations, and device reboots. The platform also supports scripting tools like PowerShell for more complex operations, including service restarts, disk cleanups, and device provisioning. Additionally, policy-based workflows enable full automation of patching, antivirus scans, and backup management, helping to maintain endpoint health and ensure compliance.

From the Scheduled Automations page, you can view and manage automations associated with the policy. To learn how to create an automation, associate it with a policy, and set a deployment schedule, refer to our NinjaOne Policies: Scheduled Automations article.

dynamic-policies-entity-scheduled-automations.png
Figure 6: Policy details → Scheduled Automations (click to enlarge)

Page Features

Move your cursor over any entry in the scheduled automations table to invoke its Actions drop-down menu. Click any entry to view and edit its configuration.

FeatureDescription
SearchEnter a partial or whole value to filter current view to matching records.
Add automationAssociate a new scheduled automation with the selected policy.
Table settings (GearIcon.png)Configure sort behavior, column visibility, and ordering for the scheduled automations list.
Scheduled automations tableView and manage all scheduled automations associated with the selected policy.

Page Fields

Click any interactive header to sort the displayed records by the column's value.

FieldDescription
NameThe name of the scheduled automation and a brief description of its behavior; move your cursor over any automation entry to access its action menu
StatusIndicates whether the automation is active or inactive
TicketingActions the automation will take, if any, in NinjaOne Ticketing
ConnectWiseActions the automation will take, if any, in ConnectWise
Notify techniciansIndicates whether technicians will be notified when the scheduled automation executes
ChannelsEnumerates the channels by which technicians will receive notifications when the scheduled automation executes
Actions (ellipsis.png)Enables you to edit, activate, inactivate, or delete the selected scheduled automation

OS Patching

NinjaOne streamlines the automatic deployment of operating system patches across Windows, macOS, and Linux, reducing manual updates and maintaining device security. You can create tailored OS patching policies and minimize disruptions by scheduling updates during low-usage or maintenance windows. Flexible, policy-driven deployment ensures remediation aligns with your organizational risk tolerance, while manual controls provide IT with the ability to respond instantly to zero-day vulnerabilities.

On the OS patching page, you can define how, when, and whether the dynamic policy scans, approves, and deploys operating system patches across devices. For information about creating and managing policy-based patching, review Patching: Resource Catalog.

dynamic-policies-entity.png
Figure 7: Policy details → OS patching (click to enlarge)

Page Features

FeatureDescription
StatusActivate or deactivate OS patching.
ModeDefine whether NinjaOne fully manages OS patches for endpoints associated with the dynamic policy or if managed devices should adhere to a specified Windows Update configuration.
Scan scheduleDesignate the frequency and time at which endpoint OS patch scans should occur, whether NinjaOne should stagger the scheduled start time for all devices in the policy, and the actions NinjaOne should take to address missed scans and offline endpoints.
Update scheduleSpecify the frequency and time at which endpoint OS patch updates should occur, whether NinjaOne should stagger the scheduled start time for all devices in the policy, and the actions NinjaOne should take to address missed updates and offline endpoints. Customize maintenance mode behaviors, update pre-staging, and metered connection handling. 
AutomationsSelect optional automations to run before and after applying OS patch updates. Choose whether the patch update continues or terminates if the pre-script returns a failure message.
Reboot optionsConfigure reboot behaviors for logged-in and logged-out users, including prompt intervals and scheduling.
ApprovalsDefine if and how NinjaOne should automatically approve or reject security updates and general updates.
Advanced approvalsChoose the approval actions that the dynamic policy will apply to important and optional driver patches and feature updates.
Patch Intelligence AI approvals overridesCustomize alternate actions that the patch approvals process should take if NinjaOne's Patch Intelligence AI detects known issues or major reasons for concern with an OS patch. Learn how to leverage this powerful autonomous approval feature in our NinjaOne Patching: Windows Patch Intelligence AI Approval Overrides article.
Approval overridesAdd specific patches to the policy that NinjaOne should automatically approve or reject, regardless of any other existing rules.

Good to Know

When configuring a dynamic policy, keep the following details in mind.

A blue dot next to the Conditions, Scheduled Automations, or OS patching tab in the left navigation menu indicates that the area has active configurations.

dynamic-policies-configured-tabs.png
Figure 8: Configured dynamic policy area

A count of the total number of configured areas will also appear.

To configure an area, select the checkboxes next to the features you'd like to adjust. Then, modify their settings. In nearly all scenarios, you must select a feature's checkbox before you can edit it. The only exception to this rule is the OS patching → Mode feature.

dynamic-policies-example-partially-configured.png
Figure 9: Partially configured dynamic policy (click to enlarge)

To save a policy, you must configure at least one feature in one area. For example, in Figure 9, Status is configured, while Mode and Scan Schedule are not.

dynamic-policies-conflict-resolution-notice.png
Figure 10: Configured section count and conflict resolution notice

The header of each configurable area reports the number of configured sections and the method NinjaOne will use to resolve setting conflicts. To learn more about dynamic policy conflict resolution, refer to NinjaOne Policies: Getting Started With Dynamic Policies.

Deleting a Dynamic Policy

To delete a dynamic policy, perform the following steps:

  1. In the NinjaOne platform, navigate to Administration → Dynamic policies → Windows.
  2. Select the Desktops and laptops or Servers tab.
  3. In the dynamic policies table, locate the policy you'd like to remove.
  4. Move your cursor over the policy's list entry and click its Actions menu icon, or click the policy's name to load its detailed view, and click the page actions menu icon.
  5. Delete the policy as follows:
    • From the dynamic policies list, in the Actions drop-down menu, click Delete.
    • From the dynamic policy's detailed view, in the page actions drop-down menu, click Delete policy.
  6. NinjaOne will prompt you to confirm the removal of the policy. In the Delete dynamic policy? modal, enter your NinjaOne email address. Then, click Delete.
dynamic-policies-delete-modal.png
Figure 11: Dynamic policy deletion modal (click to enlarge)
  1. You can only delete dynamic policies that are not assigned to a target rule. If NinjaOne does not detect any rule associations, the policy's removal will succeed.
  2. If the dynamic policy is assigned to one or more target rules, you'll see a Dynamic policy cannot be deleted modal similar to the example shown in Figure 12.
dynamic-policies-delete-error.png
Figure 12: Dynamic policy deletion error
  1. You can review the policy's associated target rules by navigating to Administration → Dynamic policies → Target rules. Use the page filter to locate the policy and view its target rule details.
  2. Remove all of the dynamic policy's rule associations. Then, repeat Steps 1 through 6 in the Deleting a Dynamic Policy section of this article.

Additional Resources

The following articles provide further learning resources to help you leverage policy-based endpoint management in your environment:

FAQ

Next Steps