By default, the entire reference machine content is applied to the base layer. You can define rules to exclude specific content on the reference machine from being captured for the base layer, but include specified subsets of that content.

The system employs a built-in default rule set for production use. You can define a draft rule set, or edit a rule set. You can test a draft rule set, and when you are satisfied, define it as the default. Only the rule set currently defined as the default applies for base layer capture purposes.

When a draft rule set is being tested, only the selected CVD is affected. Other CVDs still use the default rule set, so the production environment is not affected.

You can also define Override policies to prevent specific endpoint content from being overwritten by the base layer. See Applying a Base Layer Override Policy.