/build/static/layout/Breadcrumb_cap_w.png

Deploying software using AD group via LDAP label

Hi Everyone

Hope you can help with this, I am trying to deploy software to PC's stored in an AD group. I am trying to do this via LDAP label. LDAP label works in testing but once I create the label it seems to pick up all the devices I we have not only the few we have in the group. ( ie: group has 2 but it has picked up 360 computers)

here are the steps i used

created a Normal label called  "software install"
created a LDAp label with below,Note that the AD group lies a few levels deep

(&(objectclass=computer)(&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org)))

When i test using * for the KBOX_COMPUTER_NAME it picks up the correct number in the group which is 2 and lists the names out, however when the label is saved it eventually picks up 360 Computers. any help appreciated. screen shot below shows what the label shows.
 
wDhnXE.png

2 Comments   [ + ] Show comments
  • Hello,
    what version of Kace are you running?
    Can you try to remove the objectclass=computer clause?
    (&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org))
    Kind regards,
    Marco -StockTrader - StockTrader 8 years ago
    • Hi,
      We have Kace 6.3.314.That did the trick, removing objectclass=computer clause worked. Thank you - ManiSe 8 years ago
  • This is what our LDAP label queries look like:
    (&(name=KBOX_COMPUTER_NAME)(distinguishedName=CN=KBOX_COMPUTER_NAME,OU=Department Name,OU=Departments,OU=GPO Exceptions,DC=FAS,DC=LCL)) - chucksteel 8 years ago
    • Hi ,
      Thank you for the reply - ManiSe 8 years ago

Answers (0)

Be the first to answer this question

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ