First time posting I hope I am putting this in the correct community. I have been thinking about ways to test DEM configs without effecting production. Does anyone have any recommendations for this? My plan was to create a separate DEM config and condition it to our test environment. We could add configurations to this test config and then move them to their respective production config when we are confident they are working correctly. My concern with this is if we have conflicting configs in test. For example if we are excluding a folder in test that was specifically included in production which policy get applied? Is it just which ever one gets processed last? Is there another better way to do this?
Thanks for any recommendation/replies!
When we are testing configs in DEM, we usually create a condition set. Usually in the condition set we just apply the config to a specific user or group and test. If testing is successful, we remove the condition set and apply it to all users