Hi Everyone

Hope you can help with this, I am trying to deploy software to PC's stored in an AD group. I am trying to do this via LDAP label. LDAP label works in testing but once I create the label it seems to pick up all the devices I we have not only the few we have in the group. ( ie: group has 2 but it has picked up 360 computers)

here are the steps i used

created a Normal label called  "software install"
created a LDAp label with below,Note that the AD group lies a few levels deep

(&(objectclass=computer)(&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org)))

When i test using * for the KBOX_COMPUTER_NAME it picks up the correct number in the group which is 2 and lists the names out, however when the label is saved it eventually picks up 360 Computers. any help appreciated. screen shot below shows what the label shows.
2 Comments   [ + ] Show Comments


  • Hello,
    what version of Kace are you running?
    Can you try to remove the objectclass=computer clause?
    (&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org))
    Kind regards,
    Marco -StockTrader
    • Hi,
      We have Kace 6.3.314.That did the trick, removing objectclass=computer clause worked. Thank you
  • This is what our LDAP label queries look like:
    (&(name=KBOX_COMPUTER_NAME)(distinguishedName=CN=KBOX_COMPUTER_NAME,OU=Department Name,OU=Departments,OU=GPO Exceptions,DC=FAS,DC=LCL))
    • This content is currently hidden from public view.
      Reason: Removed by member request
      For more information, visit our FAQ's.
    • Hi ,
      Thank you for the reply
Please log in to comment

There are no answers at this time


Answer this question or Comment on this question for clarity