Currently trying to create a filter that will look at the users in a DL in an OU, then find those user's computers in KACE and then apply a label to those computers to make software deployment easy. The problem is that I don't see any kbox variables like 'last user that logged in' for machines that would allow me to match up AD users to their KACE machines:


Because our KACE usernames are the same as our AD usernames, perhaps we use KBOX_Username? I'm pretty ignorant when it comes to LDAP filters, so any help would really be appreciated.
0 Comments   [ - ] Hide Comments


Please log in to comment

Community Chosen Answer



Reading over i am confused at what you are trying to do. There are 4 areas of applying labels, Computers, Software, Patches and Users. When you target software installations you are targeting machines. Could you give an example of what you mean?
Answered 10/26/2011 by: nshah
Red Belt

Please log in to comment
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


Let's say I have some software I want to distribute via KACE to all computers in Marketing. We have an AD distribution list that contains all the users that currently work in Marketing. I want to create a computer label (in KACE) that will ONLY label machines that are used by users within the Marketing DL.

The only way this seems feasible to me is if somehow AD 'sAMAccountName' (user attribute) can be matched to KACE 'KBOX_USERNAME', thus connecting KACE computers to AD users.

Let me know if this still seems confusing.
Answered 10/26/2011 by: corbins
Senior Yellow Belt

Please log in to comment
KBOX_USERNAME is what you are looking for. This variable represents the "last user" value. So, to put that machine in a label based on the user's ldap attributes you can use a label like this the example called "MemberOfFinanceGroup" that is in your kbox.

If you have deleted it this was the search filter:

When the machine checks in the "last user" value will be substituted into the filter above. if the search passes (i.e. returns at least 1 result) then the machine will be put into that label. It's evaluated at every inventory.

You can do label users in the kbox in a similar way
Answered 10/26/2011 by: GillySpy
Seventh Degree Black Belt

Please log in to comment
It seems with 5.3 server and agent the last user is only kept if a user was logged when the inventory happens, otherwise it is blank. Is that by design? In previous versions the last user was remembered. I prefer the old way. Should a bug report be filed?
Answered 10/26/2011 by: RichB
Second Degree Brown Belt

Please log in to comment