Have you tried querying the membership of the group for addition to the collection as opposed to adding the gorup itself to the collection?
On Fri Dec 12 2014 at 5:16:22 PM Michael McGuire < [email protected]> wrote: > My account doesn't have any deployments listed in my user properties. > > The targeted collection itself doesn't actually have any user accounts in > it - only AD Groups, so my account will never appear in that collection. > However, the SCCM database does list my DomainB account as a member of > DomainA\AppUsers. > > The deployment is "Available". > > > > *Michael K McGuire* / Sr Systems Administrator > MS 188-300, Cedar Rapids, IA, 52401 > Phone: 319-263-0328 / VPN: 263-0328 > [email protected] <[email protected]> > www.rockwellcollins.com > > > On Fri, Dec 12, 2014 at 4:05 PM, Daniel Ratliff <[email protected]> > wrote: > >> If you look up your account in the console do you see the deployments >> in the properties? Has the collection updated with your account? Is it >> available or required? >> >> -----Original Message----- >> *From: *Michael McGuire [[email protected]] >> *Sent: *Friday, December 12, 2014 04:54 PM Eastern Standard Time >> *To: *[email protected] >> *Subject: *[mssms] Application Catalog and AD Group >> >> We have an application that is deployed to a collection with a specific >> AD Group listed inside. >> AppCollection >> +DomainA\AppUsers >> >> My account is a member of a different domain (we'll call it DomainB), >> we have added my "DomainB\Mike" account to "DomainA\AppUsers" in AD. >> I have run the following query to determine that SCCM does in fact know >> that I am a member of that AD Group. >> SELECT usr.Name0,User_Group_Name0 >> FROM v_RA_User_UserGroupName ugn >> inner join v_R_user usr on ugn.ResourceID=usr.resourceid >> where usr.Name0 like '%mike%' >> >> So I know that SCCM knows I'm a member of DomainA\AppUsers, but even >> after waiting several hours, running the user policy retrieval and the >> application deployment evaluation cycles, the application is never listed >> in the Application Catalog. >> It seems like the App Catalog is working because I can add a collection >> from DomainB that I am a member of and the application shows up. >> >> Even though the account from one domain is in a group in another >> domain, it seems like it should work as long as SCCM knows that my account >> is a member of the targeted group in the collection. I hardly ever work >> with the App Catalog, so I'm probably missing something obvious. >> >> I'm still digging into this, but I'm hoping that someone will have some >> ideas. >> >> >> *Mike* >> >> >> >> The information transmitted is intended only for the person or entity to >> which it is addressed >> and may contain CONFIDENTIAL material. If you receive this >> material/information in error, >> please contact the sender and delete or destroy the material/information. >> >> >
