A separate policy for each endpoint update group is necessary to control the upgrade. Once policies have been created for each endpoint group, enable or disable their upgrade of agent software updates by following these steps:

1. On the Trend Vision One admin console and navigate to Endpoint Security Operations > Standard Endpoint Protection app.
2. Go to Policies then select the policy for an endpoint group.
3. Click Settings > Privileges and Other Settings menu.

   

4. Go to Other Settings tab.
5. On the drop-down list, ensure that the setting specified below is set as follows:

   

6. When choosing to upgrade the agents covered by the policy, change the option for the same setting, as shown below:

   

7. Deploy the modified policy to allow agents to learn about the new setting and initiate update process.
8. After confirming that the agents covered by the policy have been successfully upgraded, return the update setting to only pattern files to prevent uncontrolled future update rollout.