DS and AD synch
Updated: 22 May 2010 | 1 comment
This issue has been solved. See solution.
Having followed the advice in this article
http://juice.altiris.com/artic...ectory-synchronization
I am now seeing what someone else posted, our SQL database seems to be getting overloaded with clients trying to update the groups folders to mirror our active directory structure.
Does anyone have any thoughts on how I might resolve this?
discussion Filed Under:
Comments
I have solved this by using a scheduled task which runs a series of osql commands in a batch file
I have also modified the query so if you want to mirror your AD structure you can use the following :
To generate a list of the Group IDs from DS do this
osql -E -S SERVERNAME -d dsolution -Q "select group_id, name from computer_group" -o "C:\list.txt"
Replace SERVERNAME with the name of your server and dsolution with the name of your database. This generates a text file called list.txt on the C: drive which contains all the groups in DS with their ID listed next to them
To then assign machines to groups based on OU membership in Active Directory use the following
osql -E -S SERVERNAME -d dsolution -Q "update computer set group_id = '67' where msnet_domain_ou in ('sub_ou/sub_ou/main_ou')
Replace SERVERNAME with the name of your server and dsolution with the name of your database, get the group_id from the list you generated above and the OU structure by either looking at the properties of a client in the Deployment Solution console, or by studying your Active Directory structure.
You can then put as many of those commands as you like (one for eachOU/group) into a batch file and set that to run as a scheduled task.
This is using DS 6.9SP1 on Server 2003 with SQL 2005
Would you like to reply?
Login or Register to post your comment.