/build/static/layout/Breadcrumb_cap_w.png

K1000 user based software install based on AD group membership?

Hi there guys.


Wondering if the k1 does install and uninstall of software, based on the AD group membership of users.

My k1 is connected to our active directory DC. 

Could I initiate a software install to the machine when the user logs in, if the user is in a certain group?

Just wondering if we can deploy software using this system.


0 Comments   [ + ] Show comments

Answers (1)

Answer Summary:
Posted by: Unsullied 11 months ago
Senior White Belt
1

Hey akmagnum,

One of many ways to achieve this is by using labels. You may want to create 2 labels:

  • LDAP Label - LDAP sync to the intended AD users group
  • Device smart Label - Use the following SQL query below to filter the targeted machines based on the LDAP label

SELECT U.FULL_NAME, U.EMAIL, M.NAME, M.IP, M.MAC, L.NAME
FROM USER AS U
JOIN USER_LABEL_JT AS UL ON U.ID = UL.USER_ID
JOIN LABEL AS L ON L.ID = UL.LABEL_ID
JOIN MACHINE AS M ON M.ID = U.PRIMARY_DEVICE_ID
WHERE L.NAME LIKE "%LDAP_LABEL_NAME%"

After which, you will be able to schedule MI/scripting scoped to the smart label for software deployment needs.

Comments:
  • Thanks for the info "unsullied". Will try this and see what I get. Cheers mate - akmagnum 11 months ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ