Dynamic computer locking

Usage and Config
1

(imported topic written by Shlomi91)

Hi,

i created an automatic group who holds all computers with the main BES server as relay, out of our local network, and are not Relays.

now, i want to create a dynamic policy that locks the computers in that group, and unlocks them if they leave that group.

any idea how i can put that policy together? (again - i do not want to use any of the “regular” methods of “distance from relay”, but rather rely on group membership)

thanks,

Shlomi

2

(imported comment written by BenKus)

Hi Shlomi,

To do dynamic lock policies, you will need to make the setting “__Lockstate” value a relevance expression that evaluates to “true” or “false”.

More info here:

http://support.bigfix.com/cgi-bin/kbdirect.pl?id=367

Your expression will look something like this:

Setting Name:

__Lockstate

Setting Value:

{(member of group 12345 of site “actionsite”)}

Replace the “12345” with the automatic Group ID that you created. You can get the Group ID by adding the “Group ID” column in the “Computer Groups” tab of the BES Console. Additionally, you will need to change the site name if the group was not created by a master operator.

Ben