PENDING Deploy to user collection, but excluding certain devices

[andyinv]

Hi

We have a need to deploy software to user collections but excluding certain devices? Say, for example, at the level of "only deploy to WORKSTATION devices this user uses" or "only deploy to this group of servers that this user uses" ?

It will be done by AD group membership for users, typically - but we've had instance where servers have received the packages and shouldn't have. Because we have a VDI installation where users should get the package (eg win2016), it's not as simple as just changing the deployment so it only targets workstation devices.

We need to be fine-grained to be able to say "this user group, but never to these device collections". From what I see in reading about, it doesn't work that way tho...

Thanks
A

 

[Prajwal Desai]

So you are looking to deploy the applications to users based on devices that they use. This is nothing but User device affinity.

 

[andyinv]

No, that's not the whole story.

Yes, user to device affinity. But to exclude some devices that they will also have gained affinity with.

Some users will have received an association with servers as well as workstations. So User A might be associated with Win10-A, but also because of terminal services sessions or citrix, with WIN2016-RDP1.

So was looking to still user user->device assignment, but have it specifically excluded so in case of some error, they never try to push the software to some server.