SOLVED Device Collection Based on OU

[kakashi824]

Hello,

I am trying to create a device collection based on the user's OU in AD. Do I need a certain discovery method enabled to do this? And can someone tell me the best way about going about this?

I am pushing a specific software and we are doing them in groups, so I wanted to create a device collection based on the user's OU.

For example, we have the parent OU named Test and inside that Test OU is a child OU named TestGroup. I want to be able to create a device collection based off of that TestGroup OU.

Hopefully, this made sense lol. Or maybe someone can direct me into a better way of doing this. Either way, thanks in advanced!

 

[Garth]

How do you map a user to a computer? This is the question you need to answer first?

Or do you? Why don't you deploy the SW to the users within the OU, maybe just targeting the Top Console users only?

 

[kakashi824]

I'm not sure how to answer your first question, can you explain more? I'm guessing if I'm not sure of the answer maybe we don't?

So, I was thinking it maybe best to do the users within the OU since we are doing them by groups. The way our AD is set up, we have the OUs by dept. Marketing, Admins, IT, and various engineering divisions all split into their own groups.

 

[Youssef Saad]

Why don't create a simple based query user collection for each department, then deploy the application directly to the user collection?
What is your current SCCM version?

 

[kakashi824]

OH that makes sense!

But, I think I may have figured it out.

I enabled the AD group discovery under the Discovery methods. Then I was able to create a user collection based on the OU.

 

[kakashi824]

Why don't create a simple based query user collection for each department, then deploy the application directly to the user collection?
What is your current SCCM version?

But going back to your suggestion, what simple query do you suggest?

 

[Youssef Saad]

After enabling Group AD discovery method, run it, go to user collection, run a update of membership of "All Users and User Groups", create new user collection with the above limitation collection, then use the following query rule:

select SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_R_User where SMS_R_User.UserGroupName = "AD_Group_name"

 

[kakashi824]

This is solved, btw. We can mark it as solved.

 

[Youssef Saad]

Great! Do not hesitate to post again in PrajwalDesai Forum if you need a future help.