I am trying to limit the computers that can download a package from the software library.  It seems I also must select a user limiting label as well.  I don't care who downloads this package, I just care what machines they go on so I'm trying to create an EVERYONE label.

Is there a way I can use the LDAP label function to assign the everyone label to everyone in the domain users group.  I am having a hard time with the proper syntax.
2 Comments   [ + ] Show Comments

Comments

  • Are you sure you can't just leave the access control label empty and everyone will have access to it?
    • I want to limit the selection by computer because it is something I only want to give people at a certain location. They scripts are for installing printers and I only want people at location X to see printers relevent to them, not all the printers in AD.

      The reason being is that I see through KACE that people have printers setup from all over the globe and many times there have been instances where someone in the UK prints a job to Japan and it is hundreds of pages.
  • The USER and MACHINE labels work together here..

    You tell the KBOX what user labels will be allowed to it and then use the Also restrict to select what machine labels have access to it.

    User label : U1, Machine label : M1

    U1 logs into M1 = sees title
    U1 logs into M2 = doesn't see

    You might have to create manual labels and assign them to machines if smart labels won't do it or if those machines are within another label and you want to isolate them.
Please log in to comment

Answers

0

I got the answer on another thread. I can create a machine LDAP query that checks if the current logged one user is a part of a group:

(&(sAMAccountName=KBOX_USERNAME)(memberOf=CN=Group Name,OU=Groups,DC=mydomain,DC=com))

In my case I would check for Domain users.  I also had to create a smart label that would filter by site and in my case it was the subnet range.  Now I can apply what is effectively my Everyone label (ldap_Domain Users) and my smart label for my site (HQ) and it filters the way I want.

My issue seemed to be that KACE allows to limit to Users or Users + Computers and when I chose just a computer label it interpreted users as None instead of All when no user filter was present.

Answered 07/08/2014 by: JordanNolan
Third Degree Black Belt

Please log in to comment
0
You could also run some WMI script to identify the type of chassis that the code is running on. If I recall correctly, the WMI command is W32_SystemEnclosure.
Answered 07/09/2014 by: EdT
Red Belt

Please log in to comment
0
You could also run some WMI script to identify the type of chassis that the code is running on. If I recall correctly, the WMI command is W32_SystemEnclosure.
Answered 07/09/2014 by: EdT
Red Belt

  • Thanks Ed,

    The computer type label works fine. It was just the users type that needed to be resolved. It does not appear that we can limit the software library to only computer labels. It has to also include a user label or else it interpretes it as Nobody instead of Anybody. Addint the filter I noted above resolved the issue.
Please log in to comment
Answer this question or Comment on this question for clarity