Can an Install from the User Downloads Portal be restricted to a specific workstation?
We are running a Kace K1000 Virtual appliance on version 7.1.149. We plan to upgrade to v8 soon. We are 60-40 Mac-Windows
We want to enable the User Downloads so that our users can install the business software that we have configured (as Distributions). However we would like to place a restriction on the User Download so that users cant install the software on any machine. They should only be allowed to install the software to their assigned device. Is this possible (windows and macs)?
We want to enable the User Downloads so that our users can install the business software that we have configured (as Distributions). However we would like to place a restriction on the User Download so that users cant install the software on any machine. They should only be allowed to install the software to their assigned device. Is this possible (windows and macs)?
2 Comments
[ + ] Show comments
Answers (5)
Answer Summary:
Please log in to answer
Posted by:
Hobbsy
6 years ago
The only way you may be able to do this would be to include all machines that you want to be able to receive downloads to be included in a label. Within the User Download settings for the Managed Installation, access control you can restrict access to machines within that label.
Posted by:
ArroyoD
6 years ago
Thanks for your response Hobbsy, however the issue is that we would like userA to only be able to access/install User Downloads from UserA's assigned device. If UserA logs into another device that is not their assigned device, then they should not be able to access/install any User Downloads. Hope this is clear.
If I read your answer correctly, the label you are referring to will include all our devices and any user will be able to access/install User Downloads to any device.
Let me know if I misunderstood your answer.
If I read your answer correctly, the label you are referring to will include all our devices and any user will be able to access/install User Downloads to any device.
Let me know if I misunderstood your answer.
Posted by:
Hobbsy
6 years ago
So you can restrict downloads from the end user portal by User label and you can also restrict by Machine label, but not by both which is what you appear to be asking for.
Posted by:
napiert
6 years ago
Top Answer
Unfortunately, this functionality is broken in KACE 7.0, 7.1, 7.2 and 8.0. It's supposed to be fixed in version 8.2. This functionality was working in KACE 6.4. We reported this issue to KACE support with Version 7.0.
In KACE 6.4 you would create an LDAP label for workstations in AD and assign it to the User Download along with the user source label. When a user logs into the portal, the "Also Restrict By" checkbox for the application would require that the workstation be a member of the LDAP group and the User be logged in.
Quest's workaround for this is to do assignments to user groups, however, this allows the user to install the apps associated to them on any devices that they log into.
The issue was reported several times as support incidents to KACE support but the problem was completely ignored.
Posted by:
ArroyoD
6 years ago
Thanks to Hobbsy & Napiert for the information. I was trying to do the same thing as Napiert. Basically allow all users to download apps, however the software that shows up needs to be compatible with the OS that they are using at the time. I also had this working on v6.4. Ill follow up with Quest & try to find a workaround.
If I read your answer correctly, the label you are referring to will include all our devices and any user will be able to access/install User Downloads to any device.
Let me know if I misunderstood your answer. - ArroyoD 6 years ago
We are trying to leverage this option to limit items appearing in the User Downloads list for only users who have enabled Active Directory accounts (LDAP Smart Label) and then only when the the users in logged-in to a certain type of device [ex: a Windows workstation but not a Windows server] (Device Smart Label).
Does anyone know how to get the "Also Restrict By Device Label" option working on 10.2 or can offer a workaround that will make the SMA display software in the User Downloads list that is filtered by both a user and device smart label at the same time? - JMC-JoeD 4 years ago