/bundles/itninjaweb/img/Breadcrumb_cap_w.png
We are running a Kace K1000 Virtual appliance on version 7.1.149.  We plan to upgrade to v8 soon.  We are 60-40 Mac-Windows

We want to enable the User Downloads so that our users can install the business software that we have configured (as Distributions).  However we would like to place a restriction on the User Download so that users cant install the software on any machine.  They should only be allowed to install the software to their assigned device.  Is this possible (windows and macs)?

Answer Summary:
Cancel
1 Comment   [ - ] Hide Comment

Comments

  • Thanks for your response Hobbsy, however the issue is that we would like userA to only be able to access/install User Downloads from UserA's assigned device. If UserA logs into another device that is not their assigned device, then they should not be able to access/install any User Downloads. Hope this is clear.

    If I read your answer correctly, the label you are referring to will include all our devices and any user will be able to access/install User Downloads to any device.

    Let me know if I misunderstood your answer.
Please log in to comment

Answer Chosen by the Author


Answers

0
Unfortunately, this functionality is broken in KACE 7.0, 7.1, 7.2 and 8.0. It's supposed to be fixed in version 8.2. This functionality was working in KACE 6.4. We reported this issue to KACE support with Version 7.0.

In KACE 6.4 you would create an LDAP label for workstations in AD and assign it to the User Download along with the user source label. When a user logs into the portal, the "Also Restrict By" checkbox for the application would require that the workstation be a member of the LDAP group and the User be logged in.

Quest's workaround for this is to do assignments to user groups, however, this allows the user to install the apps associated to them on any devices that they log into.

The issue was reported several times as support incidents to KACE support but the problem was completely ignored. 


Answered 02/26/2018 by: napiert
Senior White Belt

Please log in to comment
Answer this question or Comment on this question for clarity

Answers

0
The only way you may be able to do this would be to include all machines that you want to be able to receive downloads to be included in a label. Within the User Download settings for the Managed Installation, access control you can restrict access to machines within that label.
Answered 02/23/2018 by: Hobbsy
Red Belt

Please log in to comment
0
Thanks for your response Hobbsy, however the issue is that we would like userA to only be able to access/install User Downloads from UserA's assigned device.  If UserA logs into another device that is not their assigned device, then they should not be able to access/install any User Downloads.  Hope this is clear.

If I read your answer correctly, the label you are referring to will include all our devices and any user will be able to access/install User Downloads to any device.

Let me know if I misunderstood your answer.
Answered 02/23/2018 by: ArroyoD
White Belt

Please log in to comment
0
So you can restrict downloads from the end user portal by User label and you can also restrict by Machine label, but not by both which is what you appear to be asking for.
Answered 02/26/2018 by: Hobbsy
Red Belt

Please log in to comment
0
Thanks to Hobbsy & Napiert for the information.  I was trying to do the same thing as Napiert.  Basically allow all users to download apps, however the software that shows up needs to be compatible with the OS that they are using at the time.  I also had this working on v6.4.  Ill follow up with Quest & try to find a workaround.
Answered 02/27/2018 by: ArroyoD
White Belt

Please log in to comment