# Groups & policies

> Put devices in groups and push settings to devices from the QuickDesk console.

Use the **Groups & policies** screen to sort devices into groups. You can also
push settings to all devices of an organization, or to one group. The screen
is at `/groups` in the QuickDesk console.

## Who can use it

Owners and admins of an organization can manage the groups and policies of
their organization. Platform operators can manage all organizations.

## Select an organization

Select the organization at the top of the screen. A device joins its
organization when a person signs in to QuickDesk on that device.

## Groups

You can create, rename, and remove groups.

- A device is in one group at most.
- When you remove a group, its devices have no group. The console also
  removes the policy of the group.
- The QuickDesk desktop and mobile apps show the group name in their group
  view.

To set the group of a device, use the select for that device in the
**Devices** card.

## Policy

The **Settings pushed to devices** card sets the policy. First, choose a
scope:

- **Organization default** applies to all devices of the organization.
- **One group** applies to the devices in that group.

A group policy overrides the organization default key by key. If a group
policy has no value for a key, the device uses the organization default.

Each setting has one of these states:

- **Not managed**. The device keeps its own value.
- A value. The device uses this value.

> **NOTE:**
> Devices apply a change in about 15 seconds. This is the time of the next
> heartbeat.

> **WARNING:**
> If you remove a value from the policy, the device does not reset. The device
> keeps the last value that you pushed. To change the device, push a new value.

## Settings

| Setting | Values |
| --- | --- |
| Keyboard and mouse | On, Off |
| Clipboard | On, Off |
| File transfer | On, Off |
| Camera | On, Off |
| Audio | On, Off |
| Terminal | On, Off |
| Remote restart | On, Off |
| TCP tunneling | On, Off |
| Blocking user input | On, Off (Windows only) |
| Privacy mode | On, Off |
| Session recording | On, Off |
| Record incoming sessions automatically | On, Off |
| How to accept a session | Password or click, Password only, Click only |
| Password type | One-time password, Permanent password, Both |
| One-time password length | 6, 8, or 10 characters |

## Related

- [Operator console](/modalities/quickdesk/operator-console) — all console screens
- [Device registry](/modalities/quickdesk/device-registry) — how devices register
- [Recordings](/modalities/quickdesk/recordings) — the session recordings that a policy can start