KACE Product Support Question

Deploying software using AD group via LDAP label

11/22/2015 2347 views
Hi Everyone

Hope you can help with this, I am trying to deploy software to PC's stored in an AD group. I am trying to do this via LDAP label. LDAP label works in testing but once I create the label it seems to pick up all the devices I we have not only the few we have in the group. ( ie: group has 2 but it has picked up 360 computers)

here are the steps i used

created a Normal label called  "software install"
created a LDAp label with below,Note that the AD group lies a few levels deep

(&(objectclass=computer)(&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org)))

When i test using * for the KBOX_COMPUTER_NAME it picks up the correct number in the group which is 2 and lists the names out, however when the label is saved it eventually picks up 360 Computers. any help appreciated. screen shot below shows what the label shows.
2 Comments   [ + ] Show comments


  • Hello,
    what version of Kace are you running?
    Can you try to remove the objectclass=computer clause?
    (&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org))
    Kind regards,
    Marco -StockTrader
    • Hi,
      We have Kace 6.3.314.That did the trick, removing objectclass=computer clause worked. Thank you
  • This is what our LDAP label queries look like:
    (&(name=KBOX_COMPUTER_NAME)(distinguishedName=CN=KBOX_COMPUTER_NAME,OU=Department Name,OU=Departments,OU=GPO Exceptions,DC=FAS,DC=LCL))
    • This content is currently hidden from public view.
      Reason: Removed by member request For more information, visit our FAQ's.
    • Hi ,
      Thank you for the reply

Be the first to answer this question

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login