Kevin,
Yes, you can create collections of system (device) resources based upon Active Directory security group membership as well. You can target either user or system resources, and depending on which one you target, it changes the behavior of the Deployment. The article that Chris Nackers just sent out is a great one, and should help clear all this up. Cheers, Trevor Sullivan <http://trevorsullivan.net/> <http://twitter.com/pcgeek86> <http://facebook.com/trevor.sullivan> <https://plus.google.com/106658223083457664096> From: [email protected] [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Thursday, May 9, 2013 10:50 AM To: '[email protected]' Subject: RE: [mssms] RE: Limit certain software install for certain group/person in SCCM 2012 Trevor, Thanks for the information. I was hoping to leverage Software Center instead of Application Catalog, that way the users only have 1 area to get software. Is it possible to still do the AD groups but have the software install per device? We are not really into having multiple versions of software for users on different devices (like user affinity). Ideally I was thinking about the AD groups (or even groups in SCCM) so we can just add the user, and once the policy is set they can install it. Orchestrator is something that is on the road map, but currently we are doing manual things even in SCCM. I only have Forest discovery, AD System Discovery and heartbeat discovery turned on. We have not yet added users to SCCM, and currently I don't see a need to do it right now. It should be easy enough to create the AD groups and set up the discovery. It is planning that was not thought of, and since it is very new, now is the time for me to make changes. Appreciate the help. Kevin From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Trevor Sullivan Sent: Thursday, May 09, 2013 11:18 AM To: [email protected] <mailto:[email protected]> Subject: RE: [mssms] RE: Limit certain software install for certain group/person in SCCM 2012 Kevin, Yes, if you want to use the ConfigMgr Application Catalog Website, you must target user resources, not system resources. As long as you have your discovery methods configured correctly, you can create collections of user resources based off of Active Directory security groups. Given this, you could create an Active Directory security group called Microsoft Project 2013, and then have an approval process (eg. through System Center 2012 Orchestrator) add the user to that security group, once it has been signed off / approved. After the user has been added to the security group, ConfigMgr discovery will pick up on that change, automatically add the user to the collection - based on the Active Directory security group query rule - and the user can then "see" the Application is the Application Catalog Website. ConfigMgr isn't going to do everything you want exactly the way you want it, right out of the box. You'll need to get familiar with the APIs, ConfigMgr object model, and PowerShell module that is included with ConfigMgr 2012 SP1, and be prepared to tweak the product according to your needs. System Center 2012 Orchestrator would be a great tool for building process automation models (eg. application approvals). Cheers, Trevor Sullivan <http://trevorsullivan.net/> <http://twitter.com/pcgeek86> <http://facebook.com/trevor.sullivan> <https://plus.google.com/106658223083457664096> From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Dzikowski, Michael Sent: Thursday, May 9, 2013 7:43 AM To: [email protected] <mailto:[email protected]> Subject: [mssms] RE: Limit certain software install for certain group/person in SCCM 2012 If you want to do user based installs, really look at the application model stuff with CM12. If you aren't yet able to look into 3rd party applications, you might benefit from application catalog. For free, it might work for you and offer a better user experience over Software Center. application model: http://blogs.msdn.com/b/steverac/archive/2012/07/08/configmgr-2012-applicati on-model-internals-part-i.aspx app catalog: http://wibier.me/using-application-catalog-in-sccm-2012/ http://henkhoogendoorn.blogspot.co.uk/2011/04/new-application-catalog-in-con figmgr.html http://technet.microsoft.com/en-us/library/hh489603.aspx Mike D- _____ From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Thursday, May 09, 2013 8:34 AM To: '[email protected]' Subject: [mssms] RE: Limit certain software install for certain group/person in SCCM 2012 Thanks Mike. My assumption is that the Application catalog is based on User assigned apps, whereas Software Center is based on Device assigned apps? Maybe I am wrong here. I don't currently have that set up, as I wasn't sure if it would confuse users to have 2 different places to install software depending on what the requirement is. I am hoping to be able to use Software Center for all the apps we want users to be able to install. I will look more into it though, as that may be a better solution. I have not looked at a third party solution yet as we purchased SCCM for these types of scenarios. Kevin From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Dzikowski, Michael Sent: Thursday, May 09, 2013 8:27 AM To: [email protected] <mailto:[email protected]> Subject: [mssms] RE: Limit certain software install for certain group/person in SCCM 2012 Have you explored the native application catalog role in CM12? For free, it might meet your needs and you can certainly create user based installs... Have you checked out 3rd party vendors like 1E shopping or Flexera? "I would think I create a collection called MS Project, and add the machines as we get approvals, then it will show up in Software Center" - Yes, that would work. Mike D- _____ From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Thursday, May 09, 2013 8:06 AM To: '[email protected]' Subject: [mssms] Limit certain software install for certain group/person in SCCM 2012 Hi All, Was wondering if there is a good way to allow a certain group/person access to software using SCCM 2012. Let's say I have a sales person who requires MS Projects. Now this particular software is licensed based, so I don't want to make it available until it is approved. I don't want to use the built in "requires approval" in SCCM. I just want the software to be made available after we get the approval, so they can install it themselves. What is the best way to allow certain users the ability to see the available package in the Software Center. Would this be a User install only? We currently only install per device. We get a lot of request for certain software, and currently they are not made as packages yet (just starting to use SCCM 2012) so I am looking at making these available but want to control it so that it only appears once we "add the machine or user to a collection or group". I would think I create a collection called MS Project, and add the machines as we get approvals, then it will show up in Software Center? Hope this makes sense. Thanks, Kevin Johnston
<<image001.gif>>
<<image002.gif>>
<<image003.gif>>
<<image004.gif>>
