Group or label our AD users by division
We are new to the KACE 1000. The company I work for has 10 divisions and about 60 locations.
Each division has its own OU in AD as do the locations of those divisions. All users and computers are placed in containers within the respective location. Each location has its own IP subnet. Each division has its own machine suffix like A1, B1, C1.
We have created smart labels based on IP and Machine suffix name and those work great.
Question: How can we group or label our AD users by division? Can we label our users by their respective AD OU some how? Goal is to report how many users at division A are having issues compared to division B.
It seems like we have a lot of organized data in AD, but we cannot figure out how to group it together into a report or label.
Thanks!
Answers (3)
Nest the labels together based on their location. Using the create smart label use the drop down:
example:
Label name beings with chicago
or Label name beings with new york
or Label name beings with Florida
or Label name beings with Washington, DC
then assign it a lable Division 1 and create smart label. If you need to add more labels the for 4 lines the wizard gives you, you can edit the smart label Sql
Comments:
-
We have over 5000 users in AD. I would like to create some sort of smart label that would auto assign the user to the right divisional label just like IP based or PC name based smart labels do. - Jalvey74 11 years ago
-
is there something to key off of in their AD profile that you guys put there? The KBOX would need something as a primary key to find and assign a label based on that. Then it's matter of building out the search filter to look for it. - nshah 11 years ago
-
Each division has a unique domain name in the user's email address. Each division is all like separate company. Everyone's email was all imported from AD and visible from the Users tab. Perhaps we can parse the email address after the @ sign and group those users with a label relating to their division. All of which I am not sure how to do on a tactical level in KACE yet. - Jalvey74 11 years ago
-
that might work
I won't be able to test it but check out this site and you might be able to use one of these strings as your search filter
All user objects except for ones with primary email addresses that end with test
(&(&(objectclass=user)(objectcategory=person))(!(mail=*test)))
All user objects except for ones with primary email addresses that contain the word “testâ€
(&(&(objectclass=user)(objectcategory=person))(!(mail=*test*)))
*website*
http://www.google.com/support/enterprise/static/postini/docs/admin/en/dss_admin/prep_ldap.html#997170
The base DN would be something like :DC=your domain name, DC= are you a com, local, net
The search filter could be like what you see but remove the ! so it looks for it instead of blocking it from the return result. - nshah 11 years ago
see the note in this about machines vs users
http://www.itninja.com/blog/view/automatically-deploy-software-based-on-ad-membership
Just a note about smart labels for users. They only get applied with the user logs into the KBOX, so if you aren't using self service heavily there's no guarantee that all of your users will get the appropriate label applied.
Comments:
-
I did find that I can make 'regular' labels based on user accounts, so I created a label called Division A and used the wizard to create a conditional filter of 'email address ending in DivisionA.com' and called the new label DivisionA Users, but it still extremely limiting. I need a way to tie that data set into tickets or software inventory. I thought there was a way to tie labels to reports but I could not find it. - Jalvey74 11 years ago
