For Windows systems when we want to define relevance for an active directory group I use this expression:
(version of client >= “6.0.0.0”) AND (exists true whose (if true then (((exists value whose(it as lowercase = “AD COMPUTER GROUP NAME” as lowercase) of components whose(type of it=“CN”) of distinguished names ((distinguished names of groups of it; distinguished names of it) of local computer of it))) of active directory) else false))
This does not work for the Macs in our environment as BigFix on it’s own does not seem to pick up AD group membership for Macs. I DO see them in the C3 analysis called “Active Directory - Win/Mac”. Can someone give an example relevance expression that checks values from this analysis?
See if this raw data returns what you are looking for:
values of components whose(type of it=“CN”) of (distinguished names it) of (distinguished names of groups of it; distinguished names of it) of local computer of active directory
And if not, peel back the onion until you find something and then work back up:
components whose(type of it=“CN”) of (distinguished names it) of (distinguished names of groups of it; distinguished names of it) of local computer of active directory
OR:
(distinguished names of groups of it; distinguished names of it) of local computer of active directory
I find it is most helpful to look at the raw data before trying to write a TRUE/FALSE relevance with it.