Hi all

Let me try to explain what i'm trying to accomplish. We are deploying applications (licensed per seat) through SCCM based on the membership of an active Directory Group and it works great.

The problem exists that users will float between machines and the applications will follow them, however the application will remain on the machine they came from and the users occupying it may not need the application.

I need to devise a method of uninstalling the application through SCCM automatically. I was thinking of creating a collection that queryies for all users that are not members of the install group and then having an uninstall deployment that would target those users. This unfortunately doesnt work.

Has anybody come across this issue before and have any suggestions on how to automatically do this without relying on device collections or manual uninstall deployments every so often?

Any thoughts appreciated

1 Comment   [ - ] Hide Comment


  • For most clients I've worked for, the solution is pragmatic: use the AD group to permission the folder where the app is installed. The app's still there, certainly, but users who aren't in the group will be unable to even see the folder's contents much less launch it.
Please log in to comment

Answer this question or Comment on this question for clarity



Deploy the application on per user basis rather than machine based.

Answered 10/17/2013 by: piyushnasa
Red Belt

Please log in to comment