Policy details
NameWindows WorkstationActive
ClassWindows desktops and laptops; can only inherit from a parent of the same classClass
ParentOKTO Baseline: patches, alerts and maintenance inherited, overridable section by sectionInheritance
AssignmentsDubois Clinic, Lemieux Workshop, Roy Law Office · 41 devices41
15 sections39 alert conditionseach alert fires onceescalates to OKTO PSA
Patches inherited, overridden
SourcesWindows Update · winget · Chocolatey3 active
ApprovalCritical and important: automatic · Moderate: after 7 days · Low: manualRings
ScheduleWeekly, Tuesday 10 p.m., America/TorontoScheduled
RebootIf required, 15-minute notice to the user, may be postponed 3 timesPolicy
Native WindowsMicrosoft automatic channel closed by the agentExclusive
Alerts 39 conditions
CPUAbove 90% for 10 minutesNotice
Free space C:Below 10% · runs Disk-Cleanup, re-checks, then alertsCritical
Spooler serviceStopped while set to automatic · restart, then notifyAuto
Event 6008Unexpected shutdown · System logNotice
AntivirusDisabled for more than 5 minutes · re-enabled by policyCritical
AND/OR groups60-minute cooldownmuted during maintenance
Monitoring
HeartbeatEvery 60 s · metrics every 5 minActive
MetricsCPU, memory, disk per volume, network, processes8
BootBoot performance and reliabilityActive
LogsSystem, Application and Security forwarded to the consoleActive
Maintenance window
RecurrenceSunday, 1 a.m. to 5 a.m., America/TorontoWeekly
MutedAlerts, scripts, patches and automations4 types
RebootIf a reboot is pendingAllowed
NoticesTo the user before, at the start and at the end3 notices
Automations 4 active
Disk-CleanupTriggered by the disk alert · SYSTEMEvent
Local-Admins-AuditDaily 6 a.m. · alert on a new administratorSchedule
Agent catch-upWeekly · aligns the agent versionSchedule
On failureNotify, then continue on the other devicesBehaviour