NEW Excluding Application deployment to VPN clients

[Sukhjit]

Looking for way to exclude VPN clients to get specific deployment. In our boundaries we have VPN subnets as well. Is there any way to exclude these from specific application deployment?

 

[pgnmst]

Best way would be to create a global condition that detects wether a client is a vpn client or not. This global condition can be imported as requirement into a application. The client would evaluate this condition right before installing the application.

Another method would be to create a collection with a query that returns all vpn clients. This collection can be excluded from you install collection. With this method vpn clients wouldn't even get the deployment. If you use this method there is a disadvantage. A client has to report each change to the SCCM Server before it can be evaluated. This might lead to timing problems which could end in the device installing the software before getting removed from your install collection.