|
skissinger -> RE: Deploying software to AD usergroups (9/24/2008 8:32:56 AM)
|
The end users have to logoff/logon in order for the ConfigMgr client to 'see' that the logged in user is a member of that new usergroup. That's one of the main reasons where, if I can, I try to convince anyone and everyone that "computers get software, users and usergroups do not". However, if you're stuck there, you could try this. It requires some back-end work on your part, and some interesting collection queries, but it works mostly. At least a little better than waiting for users to logoff/on. You could also put computer's AD accounts in a usergroup (instead of the users), and target a collection query of 'computers that are a member of group whatever'. I know a lot of people use that approach to easily allow non-ConfigMgr administrators to use AD to target objects with an advertisement.
|
|
|
|