skissinger
Posts: 2114
Score: 134 Joined: 9/13/2001 From: Sherry Kissinger Status: offline
|
The end users have to logoff/logon in order for the ConfigMgr client to 'see' that the logged in user is a member of that new usergroup. That's one of the main reasons where, if I can, I try to convince anyone and everyone that "computers get software, users and usergroups do not". However, if you're stuck there, you could try this. It requires some back-end work on your part, and some interesting collection queries, but it works mostly. At least a little better than waiting for users to logoff/on. You could also put computer's AD accounts in a usergroup (instead of the users), and target a collection query of 'computers that are a member of group whatever'. I know a lot of people use that approach to easily allow non-ConfigMgr administrators to use AD to target objects with an advertisement.
_____________________________
mofmaster@smsexpert.com (version 2007) | http://www.smsexpert.com | http://www.sccmexpert.com My Blog Microsoft MVP - ConfigMgr
|