Remove Software when removed from group

myITforum.com Community Forum

Home Forums Blogs Live Support chat Search Articles Wiki FAQ Email Lists Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

All Forums RSS Feed Subscription:

Remove Software when removed from group

View related threads: (in this forum | in all forums)

Logged in as: Guest

Printable Version

All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager >> Remove Software when removed from group

Page: [1]

Message

<< Older Topic Newer Topic >>

Remove Software when removed from group - 10/6/2008 4:58:39 PM

blockcipher

Posts: 8
Score: 0
Joined: 9/24/2008
Status: offline

Good Afternoon!

I have an application advertised to a AD group. Is there a way to remove the software automatically when the user is removed from the AD group?

This is so we can keep our licenses under control via a group.

Thanks!

Post #: 1

RE: Remove Software when removed from group - 10/6/2008 9:00:42 PM

skissinger

Posts: 2119
Score: 134
Joined: 9/13/2001
From: Sherry Kissinger
Status: offline

Short answer: no

Long answer: to start, computers have software installed, users do not. To overcome this issue, do you already know *exactly* what computers belong to what users? No exceptions? (If you do, I'm sure we'd all like to hear it; we're always looking for how people accomplish 100% compliance on that issue!)

But if you do know that precisely/exactly, and can make that association by mapping views within the database, then sure; you could probably craft a collection of "Computers which have application XYZ, and the main user of this computer is not in usergroup XYZ, so target an advertisement to this collection & uninstall application XYZ".

I was asked to do something just like that a few months ago at the old job, and taking the parameters given to me, created a collection query; and at first glance I could tell there was no way to fully automate that... when the project manager's computer was in the collection of "to be removed", and I *knew* that he was the main proponent of that particular software. (His assistant logged into his computer more often than he did, so they were the primary user according to ConfigMgr! LOL)

So, yes... everything is possible. But often not practical to fully automate. You might want to consider instead doing internal "true-ups", and adding individual computers to an uninstall collection weekly/monthly once confirmed.

_____________________________

mofmaster@smsexpert.com (version 2007) | http://www.smsexpert.com | http://www.sccmexpert.com
My Blog
Microsoft MVP - ConfigMgr

(in reply to blockcipher)

Post #: 2

RE: Remove Software when removed from group - 10/7/2008 1:14:00 PM

rbennett806

Posts: 827
Score: 13
Joined: 6/14/2006
Status: offline

You could also think about creating a VBScript (or your preferred language) that checks domain group memberships and does certain tasks depending on the membership (would need more details to know if this would indeed work for you). Then create a package containing the VBScript and advertise it to the designated machines (or all your machines depending on what you coded).

I'd also suggest staying away from deploying based on users and stick to computer-based groups/deployments...

(in reply to skissinger)

Post #: 3