Deploying software using AD group via LDAP label
Hi Everyone
Hope you can help with this, I am trying to deploy software to PC's stored in an AD group. I am trying to do this via LDAP label. LDAP label works in testing but once I create the label it seems to pick up all the devices I we have not only the few we have in the group. ( ie: group has 2 but it has picked up 360 computers)
here are the steps i used
created a Normal label called "software install"
created a LDAp label with below,Note that the AD group lies a few levels deep
(&(objectclass=computer)(&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org)))
When i test using * for the KBOX_COMPUTER_NAME it picks up the correct number in the group which is 2 and lists the names out, however when the label is saved it eventually picks up 360 Computers. any help appreciated. screen shot below shows what the label shows.
2 Comments
[ + ] Show comments
Answers (0)
Please log in to answer
Be the first to answer this question
what version of Kace are you running?
Can you try to remove the objectclass=computer clause?
(&(name=KBOX_COMPUTER_NAME)(memberOf=CN=Software Install,OU=version 9 Install,OU=SMS Installs,OU= Applications,OU=SESOE,DC=aus,DC=org))
Kind regards,
Marco -StockTrader - StockTrader 9 years ago
We have Kace 6.3.314.That did the trick, removing objectclass=computer clause worked. Thank you - ManiSe 9 years ago
(&(name=KBOX_COMPUTER_NAME)(distinguishedName=CN=KBOX_COMPUTER_NAME,OU=Department Name,OU=Departments,OU=GPO Exceptions,DC=FAS,DC=LCL)) - chucksteel 9 years ago
Thank you for the reply - ManiSe 9 years ago