Is there a way to make a Smart Label based on a users Active Directory user group?

I'm looking to push the registry change for the IE Home Page to a group called UG-ALL-Superintendents  95% of these users never bring in their laptops to the internal office network, so a GPO will only hit a few users.  But the vast majority of them have Internet access at the job site.  So if I can narrow down the machine/user base and have the script run on just those machines, then I'm good.
0 Comments   [ - ] Hide Comments


Please log in to comment

Community Chosen Answer


Yes you can. Have you seen this article? You just have to use the memberOf in your filter. 



Answered 06/21/2016 by: nshah
Red Belt

  • I think I'm going to need a little bit more help on this. I read through those articles and tried setting up the Label the way it said too. I created the LDAP Label "UG-ALL-Superintendents" as a Device label. I know I have the right server and port #.

    Base DN: OU=CTUsers,OU=CTDomain,DC=domain,DC=com

    Advance Search: (&(samaccountname=KBOX_USER_NAME)(meberOf=CN=UG-ALL-Superintendents,OU=User Groups,OU=CTGroups,OU=CTDomain,DC=domain,DC=com))

    I know the login information is correct, but it's not applying the label to the devices that my test user is logged into.
    • you don't have memberof spelled right.
Please log in to comment
Answer this question or Comment on this question for clarity


also try this out. See image. 

Answered 06/22/2016 by: nshah
Red Belt

Please log in to comment
Admin Script Editor
Admin Script Editor is an integrated scripting environment available free here at ITNinja