How to install software on device when user is member of Active Directory Security Group (LDAP label)?
Hello,
First, I don't have much experience with creating LDAP labels.
I don't even know if what I am trying to do is even possible.
What I want to do is install Chrome on a device when the user (that is assigned to the device) is in a security group called SOF_Chrome in AD.
What are the steps to be taken?
0 Comments
[ + ] Show comments
Answers (1)
Please log in to answer
Posted by:
five.
6 years ago
It's a two step process:
1) Create LDAP label, on my box there is an example LDAP label that should be of assistance called MemberOfFinanceGroup. You could use something like ADExplorer or LDAP browser to get the CN of your specific group in your AD structure. Powershell could probably be used as well, but the others are easy to use GUI's.
2) Assign that label to a managed install or script that installs the software.
Comments:
-
What causes the scripts to run? We have only had luck using managed installs with ldap labels it will show the computer in the ldap label and show it in the computer's inventory as a script to be run but will never run. Manually running the script works though. - khoelle 6 years ago
-
Good point. I guess it would have to be script instead of MI. Since it will continue to be in that label. Typically our scenario is on labels that it will eventually fall out of. You just add the label and make sure the script is marked as enabled. - five. 6 years ago
