So I have been away from Altiris for a long time and have to adjust to the new style of 7.x but that aside I'm having a devil of a time deploying script tasks without scheduling specific machines.
I want to use filters to exclude machines which I don't want to get the script, filters to include the machines which I want to run the script, and finally a filter to exclude the machines which I know have run the script already.
So I have a script task created, If I try to make a new Client Task Schedule, I can do what I want to collect the specific machines I want to run the script on, but this is a one time approach it seems (Please correct me if I'm wrong).
Basically I have to grant a service account local admin access for our Information Security team Admin across all servers running a specific application (exclude our workstations and desktops as we have a different process/company policies on those) and I have the script worked out for that but I need it to go out to all servers which haven't run it already based on their local admin group membership as reported by inventory solution, and I need it to run on any new server we deploy automatically that includes the security application (we don't deploy servers via Altiris so it's unfortunately not a job task I could include durring deployment) once the agent checks in and gets it's policies.
I must be missing something simple because I can deploy software packages like policies but I can't deploy a script task this way? Hopefully someone can smack me upside the head and tell me where I'm wrongly doing things in Jobs/Tasks, and I should really be over in some other menu/submenu. ;)
(I realize with creative GPO / OU use I could accomplish this, but we need to do this for hundreds of accounts and groups, for different departments and we're trying to leverage Altiris to get more granular control down to things with specific systems based on criteria we want to use rather than splattering our OU structure with a bunch of different group policies)
Thanks :)