Is there an easy way to pull Active Directory user data from the BigFix client? We’d like to identify computers by the user that logs into the system. In AD there is a user field called “Department”.
So if user A logs in, we’d like to pull the users’s “Department” property from AD and set it in the registry OR if the property is already being stored in the registry or other microsoft file we’d like to know where.
That said, it’s also pretty dangerous; Windows doesn’t cache AD queries very well, so every time that script runs it will go back to AD for the information. Multiply by X thousand computers, and you’re potentially DDOS’ing yourself. If you’re using a login script it should be naturally limited to a safe level, but it’ll still be an increase over your existing login traffic.