Client Management Suite

 View Only
  • 1.  Computer filters based on AD user groups

    Posted Aug 18, 2011 10:57 AM

    I am looking for a SQL query to associate users from an imported AD group by username to the username that Altiris has as being the owner of the computer. I looked over the forums and did not find anything right off.

    I have SMC 7.1 on Server 2008 r2 standard.



  • 2.  RE: Computer filters based on AD user groups

    Posted Aug 18, 2011 06:12 PM

    A filter is a SQL query that provides conditions to limit resources returned (e.g. Computer resources with less than 2GB of RAM) so that a filter can be used in a target.

    So what do you want to filter on?

    It sounds like you're importing User resources from Active Directory.  And then Altiris is determining a Primary User of the computer based on Logon/Logoff events.  Are these the resources and data classes you're talking about, and if so, what do you want to do exactly?



  • 3.  RE: Computer filters based on AD user groups

    Posted Aug 19, 2011 10:30 AM

    For better or worse, before moving to Altiris my company deployed software by user security group.  It was rough moving to a "computer-centric" model like Altiris.  I can only imagine that's what this person is looking for...



  • 4.  RE: Computer filters based on AD user groups

    Posted Aug 19, 2011 12:02 PM

    Altiris can do software installs by user..



  • 5.  RE: Computer filters based on AD user groups

    Posted Aug 19, 2011 03:48 PM

    By an active directory user security group?  Easily?  I mean, we came up with a way, but it wasn't worth the hassle.



  • 6.  RE: Computer filters based on AD user groups

    Posted Aug 19, 2011 04:15 PM

    If you import the security groups, user resources will be part of them, and you can associate your policies (e.g. Managed Software Delivery) with users.  In this case, something like exclude all users not in Organizational Group 'Cisco VPN Users'.



  • 7.  RE: Computer filters based on AD user groups

    Posted Sep 22, 2011 12:31 PM

    sorry I am so late getting back to this, I will test pushing the jobs to an imported AD group. I just want to make sure that it only gets installed on the user's primary system, and not just any system they log into. User are being assigned by altiris pirmary user



  • 8.  RE: Computer filters based on AD user groups

    Posted Oct 03, 2011 12:14 PM

    The software will be installed wherever they log in.  If you need it based on Primary User, you would need to create a computer filter and modify the SQL to look for the particular approved users.  e.g. and aci.[Primary User] IN ('jdoe1','sdoe2','user123')

    Keep in mind that if you spend 168 hours on the computer at your desk, but you also spent 8 hours each on five test computers, and nobody else used the test computers, that software is going to install on six computers.  And keep in mind, too, that a reassigned computer could be in use by Susan but the inventory data is still reporting John as the primary user.



  • 9.  RE: Computer filters based on AD user groups

    Posted Nov 29, 2011 01:08 PM

    Can you please provide the SQL query to create a filter on a specif user group in SMP7.1