On Windows I’m able to target offers to user groups, such as “Help Desk” or “Administrators”, to make them installable only by those people. How can I achieve this on the Mac? I am trying to target a specific user account or local admin group.
I tried Local user group = admin, but it didn’t work.
Can you provide the actual relevance you tried?
Would it achieve what you want if only local admins got the offer?
Yes, local admins would work.
What I meant to say is that I went to the Users tab, removed all the groups and added a new local group called “admin” and another called “Administrator”, but that did not work. I based the “admin” name on the group names that were outputted from the id command on Mac OSX.
I think the users tab options are windows only. I think for the Mac you would need to write custom relevance, which is possible.
I’m a fairly new user to BigFix, so if you can point me in the right direction as to how to do this with custom relevance that would be appreciated. I’m guessing it would have something to do with leveraging the, current logged on user?
I’m not sure we have the means to easily show that the current user or any logged on user is actual an admin.
This would basically mean adding a Directory Services interface to the Groups section of DS much like the Windows client exposes.
You can get some info from the dscl utility so for example on my machine…
> dscl . -read /Groups/admin GroupMembership
GroupMembership: root alanm
But group inheritance is a fun thing here.
This might help: http://bigfix.me/analysis/details/2994546
(concatenations "; " of strings of values of arrays of values of entries whose(key of it = "users") of dictionaries of files "/var/db/dslocal/nodes/Default/groups/admin.plist")