Re: Group Membership

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Garth,

Could you explain to me ho to setup such a collection? Because we have to
run a discovery cycle every time a user is added to a security group or else
the use will not show up in de collection. Reading your story it sounds like
I have setup the collection wrong...

In forward thanx.

--
Regards,

Erik
MCSE 2000/2003


"Garth" wrote:

Once the collection is created you don't need to update it, it is the client
that will determine if they are a member of that security group. Once a PC
or User is added into the security group a login or a reboot will reset they
security tokens and give them access the advert.

"Andy C" <acracchiolo@xxxxxxxxxxxxxxx> wrote in message
news:uvCxyrWNIHA.5720@xxxxxxxxxxxxxxxxxxxxxxx
I have tried doing it this way, What becomes the update cycle? Is it up to
the client or how does this work?

Thanks

-Andy


"Garth" <Spam@xxxxxxx> wrote in message
news:902A66A4-29C8-421B-B1C0-CAF37885CB65@xxxxxxxxxxxxxxxx
This is likely to be related to you collection refresh cycle. However I
personally preferred the adding a PC / User to a security group and
having only that group a member of the collection. Two main reasons

1) Once the security group is discovered, the advert can be
created. Adding new Client to the advert only means that you need to add
the PC/User to the security group only.

2) By using the method you can reduce your SMS over head by no
refreshing the collection cycle, since the collection will never change
there is no need to ever update the collection membership.



"Andy C" <acracchiolo@xxxxxxxxxxxxxxx> wrote in message
news:umlIpj5MIHA.4308@xxxxxxxxxxxxxxxxxxxxxxx
As of now I have a group that has PC's as members to install a piece of
software. When I add members(computers) to this group they take a very
long time to show up. Like a day or so. Is there a way to speed this
up or a better way to manage collection membership? I would like to use
AD groups but it may be better to use direct memberhsip?? Any help much
appreiciated.

-Andy





.

Relevant Pages

  • Re: Group Policy Wont Apply Unless User is a Member of Domain Admin. Why?
    ... the security group that my test user is a member of. ... you wrote added by default when I created the gpo. ... gpo will only apply if the test user (uTest) is a member of theDomain> Adminssecurity group. ...
    (microsoft.public.windows.server.sbs)
  • Re: Automatically adding computers to a group
    ... their domain computer account password expires. ... security group every time its joined to a domain. ... Interesting concept, "run once GPO. ... that all machines are a member of. ...
    (microsoft.public.windows.server.active_directory)
  • GP/OU Problem/Question
    ... DC and a separate Windows 2003 member server as the TS. ... Create OU & GPO for the TS: ... Make the Security group member of RDU. ... Edit GPO & Setup Edit for test: ...
    (microsoft.public.windows.terminal_services)
  • RE: GP wont apply
    ... to enforce a GP, try making that account a member of Enterprise admins, Group ... >> "To filter the scope of Group Policy according to security group membership ... >> Open the Group Policy object whose scope you want to filter. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local vs Global groups in a large forest with trusts
    ... Domain Users is a special global security group. ... It's not that you're a member of the ... objects a member of Domain Security Groups, ... apply the permissions to that local security group. ...
    (microsoft.public.windows.server.active_directory)