How do I limit a Software Library Install to JUST computers
I am trying to limit the computers that can download a package from the software library. It seems I also must select a user limiting label as well. I don't care who downloads this package, I just care what machines they go on so I'm trying to create an EVERYONE label.
Is there a way I can use the LDAP label function to assign the everyone label to everyone in the domain users group. I am having a hard time with the proper syntax.
2 Comments
[ + ] Show comments
Answers (3)
Please log in to answer
Posted by:
JordanNolan
10 years ago
I got the answer on another thread. I can create a machine LDAP query that checks if the current logged one user is a part of a group:
(&(sAMAccountName=KBOX_USERNAME)(memberOf=CN=Group Name,OU=Groups,DC=mydomain,DC=com))
In my case I would check for Domain users. I also had to create a smart label that would filter by site and in my case it was the subnet range. Now I can apply what is effectively my Everyone label (ldap_Domain Users) and my smart label for my site (HQ) and it filters the way I want.
My issue seemed to be that KACE allows to limit to Users or Users + Computers and when I chose just a computer label it interpreted users as None instead of All when no user filter was present.
Posted by:
EdT
10 years ago
You could also run some WMI script to identify the type of chassis that the code is running on. If I recall correctly, the WMI command is W32_SystemEnclosure.
Posted by:
EdT
10 years ago
You could also run some WMI script to identify the type of chassis that the code is running on. If I recall correctly, the WMI command is W32_SystemEnclosure.
Comments:
-
Thanks Ed,
The computer type label works fine. It was just the users type that needed to be resolved. It does not appear that we can limit the software library to only computer labels. It has to also include a user label or else it interpretes it as Nobody instead of Anybody. Addint the filter I noted above resolved the issue. - JordanNolan 10 years ago
The reason being is that I see through KACE that people have printers setup from all over the globe and many times there have been instances where someone in the UK prints a job to Japan and it is hundreds of pages. - JordanNolan 10 years ago
You tell the KBOX what user labels will be allowed to it and then use the Also restrict to select what machine labels have access to it.
User label : U1, Machine label : M1
U1 logs into M1 = sees title
U1 logs into M2 = doesn't see
You might have to create manual labels and assign them to machines if smart labels won't do it or if those machines are within another label and you want to isolate them. - nshah 10 years ago