SOLVED Query SCCM applications to detect associated AD security groups

[rhardyman]

Hi all,

I am new to the forum, my name is Russ and I work as an SCCM/Group Policy administrator in the finance sector. I am after some assistance if possible, but not sure this is the correct area of the forum to raise this so apologies if in the wrong section.

Long story short, we are automating a software request process using SNOW to detect applications on devices in our organisation, albeit it doesn't seem to be detecting them very well! In order to fully populate the list of what is available from SCCM, we need to provide a few things. Those are, the application name, the AD group that is queried in the User Collection, and the SNOW app ID. (The SNOW app ID is someone else's remit so I don't need to worry about that!).

My question is, is there a way (Powershell maybe?) that I can input a list of applications that are deployed to a distribution point which can read the name of said applications, and detect the AD security group that will be queried in the User Collection for said application? There are 793 of these that I need to go through and i'm not really feeling like doing it manually! Our AD security groups follow a similar naming pattern for applications, however there could be some inconsistencies as some engineers who have packaged apps previously haven't always followed the correct process.

I'm only really interested in apps that are held in the main "Applications" library, and i've already ran a report on SCCM to detect All Content on a specific DP, then stripped out everything I don't believe is necessary. Any help would be gratefully received!

Many thanks,

Russ

 

[Garth]

Hi all,

I am new to the forum, my name is Russ and I work as an SCCM/Group Policy administrator in the finance sector. I am after some assistance if possible, but not sure this is the correct area of the forum to raise this so apologies if in the wrong section.

Long story short, we are automating a software request process using SNOW to detect applications on devices in our organisation, albeit it doesn't seem to be detecting them very well! In order to fully populate the list of what is available from SCCM, we need to provide a few things. Those are, the application name, the AD group that is queried in the User Collection, and the SNOW app ID. (The SNOW app ID is someone else's remit so I don't need to worry about that!).

My question is, is there a way (Powershell maybe?) that I can input a list of applications that are deployed to a distribution point which can read the name of said applications, and detect the AD security group that will be queried in the User Collection for said application? There are 793 of these that I need to go through and i'm not really feeling like doing it manually! Our AD security groups follow a similar naming pattern for applications, however there could be some inconsistencies as some engineers who have packaged apps previously haven't always followed the correct process.

I'm only really interested in apps that are held in the main "Applications" library, and i've already ran a report on SCCM to detect All Content on a specific DP, then stripped out everything I don't believe is necessary. Any help would be gratefully received!

Many thanks,

Russ

You can do this via PowerShell and CM appletts BUT IMO this will be very slow, if there is a lot of data.
You can Also do this via PowerShell an querying CM SQL db directly, much faster.
But in both cases it will NOT be simple task. As you will need to link collections to application and then to DP. And some how tie this to a ServerNow ID.

In any case, I would start by querying ServerNow ID for the App name and ID. then create a second script to query CM for app; Ignore the DP and Sec groups for now. Then add each one one at a time.