Remove Software when removed from group (Full Version)

All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager



Message


blockcipher -> Remove Software when removed from group (10/6/2008 4:58:39 PM)

Good Afternoon!

I have an application advertised to a AD group.  Is there a way to remove the software automatically when the user is removed from the AD group?

This is so we can keep our licenses under control via a group.

Thanks!




skissinger -> RE: Remove Software when removed from group (10/6/2008 9:00:42 PM)

Short answer: no

Long answer: to start, computers have software installed, users do not.  To overcome this issue, do you already know *exactly* what computers belong to what users?  No exceptions? (If you do, I'm sure we'd all like to hear it; we're always looking for how people accomplish 100% compliance on that issue!)

But if you do know that precisely/exactly, and can make that association by mapping views within the database, then sure; you could probably craft a collection of "Computers which have application XYZ, and the main user of this computer is not in usergroup XYZ, so target an advertisement to this collection & uninstall application XYZ".

I was asked to do something just like that a few months ago at the old job, and taking the parameters given to me, created a collection query; and at first glance I could tell there was no way to fully automate that... when the project manager's computer was in the collection of "to be removed", and I *knew* that he was the main proponent of that particular software.  (His assistant logged into his computer more often than he did, so they were the primary user according to ConfigMgr! LOL)

So, yes... everything is possible.  But often not practical to fully automate.  You might want to consider instead doing internal "true-ups", and adding individual computers to an uninstall collection weekly/monthly once confirmed.




rbennett806 -> RE: Remove Software when removed from group (10/7/2008 1:14:00 PM)

You could also think about creating a VBScript (or your preferred language) that checks domain group memberships and does certain tasks depending on the membership (would need more details to know if this would indeed work for you). Then create a package containing the VBScript and advertise it to the designated machines (or all your machines depending on what you coded).

I'd also suggest staying away from deploying based on users and stick to computer-based groups/deployments...




Page: [1]

Valid CSS!




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI
0.328125