I need a solution
I have been applying null policies to assets until they are placed in the proper group. Then I will contact someone from the SH team to place the asset in PD mode so I can properly tune so and not interrupt the business. This process takes to long and is a security risk. I would like to create a policy or somehow alter the null policy so it "allows and logs" (basically find a way to simulate placing assets in prevention disabled mode by using policy). This custom policy will be applied to those systems that I am currently working on to disallow flooding the console. Any ideas?