@badias, you could also utilize a policy fixlet that checks the network signature to identify if the endpoint is on a corporate network or at a users home.
Here’s the action script that I utilize for setting the network signature.
// Tattoo the settings with the Network Signature
setting “_BESClient_NetSignature”=“{unique value of concatenations “;” of (it as string) whose(it != “127.0.0.1” and it does not start with “169.”) of addresses of ip interfaces of network as string}” on “{now}” for client
Here’s the relevance that utilized for applicability.
(not exists setting “_BESClient_NetSignature” whose (value of it = unique value of concatenations “;” of (it as string) whose(it != “127.0.0.1” and it does not start with “169.”) of addresses of ip interfaces of network as string) of client)
I hope this helps.