Scripting Question

Smart Label based on Active Directory User Groups

06/21/2016 1509 views
Is there a way to make a Smart Label based on a users Active Directory user group?

I'm looking to push the registry change for the IE Home Page to a group called UG-ALL-Superintendents  95% of these users never bring in their laptops to the internal office network, so a GPO will only hit a few users.  But the vast majority of them have Internet access at the job site.  So if I can narrow down the machine/user base and have the script run on just those machines, then I'm good.
0 Comments   [ + ] Show comments


Community Chosen Answer

Yes you can. Have you seen this article? You just have to use the memberOf in your filter. 



Answered 06/21/2016 by: nshah
Red Belt

  • I think I'm going to need a little bit more help on this. I read through those articles and tried setting up the Label the way it said too. I created the LDAP Label "UG-ALL-Superintendents" as a Device label. I know I have the right server and port #.

    Base DN: OU=CTUsers,OU=CTDomain,DC=domain,DC=com

    Advance Search: (&(samaccountname=KBOX_USER_NAME)(meberOf=CN=UG-ALL-Superintendents,OU=User Groups,OU=CTGroups,OU=CTDomain,DC=domain,DC=com))

    I know the login information is correct, but it's not applying the label to the devices that my test user is logged into.
    • you don't have memberof spelled right.

All Answers

also try this out. See image. 

Answered 06/22/2016 by: nshah
Red Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ