Creating Auto-Assigned Computer Groups based upon AD Group Membership

Content Authoring
1

(imported topic written by SystemAdmin)

I have an AD group whose members I want to be automatically added/removed from an automatic computer group in TEM. This will be used for a set of test workstations for evaluating new patches.

I figure that I can accomplish this by the following:

  1. Create a Task that runs on a regular basis (e.g. weekly) that performs some action script expression to do an AD Group look up, and if it determines the computer is contained within that set, set a custom property in TEM for that workstation.

  2. Create an auto-generated computer group using relevance expression to check for the custom property I defined.

Has anyone done this, or something similar? I don’t know what action script and relevance to use to accomplish this, and it’s a bit of a steep learning curve. I’m wondering if anyone has any helpful advice to put me on the right path and avoid me wasting a weekend working through this.

Thanks!

2

(imported comment written by SystemAdmin)

There is a property that is already captured that you could use for this. I created an auto group that looks for all systems in the OU Prod. So in the auto group use: Active Directory Path contains Prod.

Martin Carnegie

Gulf Breeze Software Partners

http://www.gulfsoft.com

1 Like
3

(imported comment written by SystemAdmin)

You can also use the DN in the relevance for your dynamic group. Active Directory Path contains “OU=something,DC=domain,DC=com”