My account doesn't have any deployments listed in my user properties. The targeted collection itself doesn't actually have any user accounts in it - only AD Groups, so my account will never appear in that collection. However, the SCCM database does list my DomainB account as a member of DomainA\AppUsers.
The deployment is "Available". *Michael K McGuire* / Sr Systems Administrator MS 188-300, Cedar Rapids, IA, 52401 Phone: 319-263-0328 / VPN: 263-0328 [email protected] <[email protected]> www.rockwellcollins.com On Fri, Dec 12, 2014 at 4:05 PM, Daniel Ratliff <[email protected]> wrote: > If you look up your account in the console do you see the deployments in > the properties? Has the collection updated with your account? Is it > available or required? > > -----Original Message----- > *From: *Michael McGuire [[email protected]] > *Sent: *Friday, December 12, 2014 04:54 PM Eastern Standard Time > *To: *[email protected] > *Subject: *[mssms] Application Catalog and AD Group > > We have an application that is deployed to a collection with a specific AD > Group listed inside. > AppCollection > +DomainA\AppUsers > > My account is a member of a different domain (we'll call it DomainB), we > have added my "DomainB\Mike" account to "DomainA\AppUsers" in AD. > I have run the following query to determine that SCCM does in fact know > that I am a member of that AD Group. > SELECT usr.Name0,User_Group_Name0 > FROM v_RA_User_UserGroupName ugn > inner join v_R_user usr on ugn.ResourceID=usr.resourceid > where usr.Name0 like '%mike%' > > So I know that SCCM knows I'm a member of DomainA\AppUsers, but even after > waiting several hours, running the user policy retrieval and the > application deployment evaluation cycles, the application is never listed > in the Application Catalog. > It seems like the App Catalog is working because I can add a collection > from DomainB that I am a member of and the application shows up. > > Even though the account from one domain is in a group in another domain, > it seems like it should work as long as SCCM knows that my account is a > member of the targeted group in the collection. I hardly ever work with > the App Catalog, so I'm probably missing something obvious. > > I'm still digging into this, but I'm hoping that someone will have some > ideas. > > > *Mike* > > > > The information transmitted is intended only for the person or entity to > which it is addressed > and may contain CONFIDENTIAL material. If you receive this > material/information in error, > please contact the sender and delete or destroy the material/information. > >
