RE: [mssms] Adding a list of users to a user collection

[Heaton, Joseph@Wildlife]

I figured out what the issue was.  There were a bunch of disabled users in the 
original list/group, which, apparently, SCCM doesn't care for.  Looks like I'm 
all good,

Thanks for all the help, guys.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of John Marcum
Sent: Tuesday, November 21, 2017 9:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Adding a list of users to a user collection

There's actually two different ways to write the query for the membership of 
those type collections. I don't have one in front of me though. One way each 
member of the group is displayed in the collection, the other way only the 
group name itself is displayed. If you use the way that each user is shown in 
the collection I think the user has to log out and back in after they are added 
to the group before they will show up. I don't do it that way for that reason.






Sensitivity: Confidential between partners
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, November 21, 2017 9:25 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Adding a list of users to a user collection

Ok, so it worked To a point.  For some reason, the user collection does not 
have the same number of members that the AD security group has.  It's over 100 
users short.  Any idea why that would happen?  User discovery is at the root of 
the domain, so should be getting all users, no matter where they are.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of John Marcum
Sent: Tuesday, November 21, 2017 6:36 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Adding a list of users to a user collection

Agreed... this is by far my preferred method for populating collections. You 
get the added flexibility of being able to reuse the groups  for other purposes 
too such as GPO's that are related to the software being deployed. At the law 
firm I left recently we used 1E shopping to populate the groups in a 
self-service manner which was super easy



Sensitivity: Confidential between partners
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Monday, November 20, 2017 1:58 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Adding a list of users to a user collection

Awesome, thanks.  I'll try that out.
Sent from my iPhone

On Nov 20, 2017, at 3:08 AM, Stuart Watret 
> wrote:
Have to agree, our deployments are based on collections based on ad group 
member ships.
It's great.

Stuart

On 18 Nov 2017, at 03:51, Nemec, Dale 
> wrote:

We use an Active Directory security group, and SCCM pulls the users from the 
security group.

This is the Collection query we use:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = 
"\\"

Of course, you need to also discover the OU that the security group is in under 
your site Discovery settings.

Then use powershell to populate the AD security group.

This gives us the flexibility to allow our help desk technicians to add/remove 
users from the AD security group without having to grant access to the SCCM 
Admin Console.

We have different AD security groups for each user deployment.

Good luck!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Friday, November 17, 2017 3:30 PM
To: 'mssms@lists.myitforum.com' 
>
Subject: [mssms] Adding a list of users to a user collection

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn't 
work.  So, I tried UPN, and that didn't work.  Then I tried putting the domain 
name in there with sam, and that didn't work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn't give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  

RE: [mssms] Adding a list of users to a user collection

[Heaton, Joseph@Wildlife]

I completely agree, and yet, it is happening.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Stuart Watret
Sent: Tuesday, November 21, 2017 9:30 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Adding a list of users to a user collection

Now that makes no sense!


On 21 Nov 2017, at 15:25, Heaton, Joseph@Wildlife 
> wrote:

Ok, so it worked…. To a point.  For some reason, the user collection does not 
have the same number of members that the AD security group has.  It’s over 100 
users short.  Any idea why that would happen?  User discovery is at the root of 
the domain, so should be getting all users, no matter where they are.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of John Marcum
Sent: Tuesday, November 21, 2017 6:36 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Adding a list of users to a user collection

Agreed… this is by far my preferred method for populating collections. You get 
the added flexibility of being able to reuse the groups  for other purposes too 
such as GPO’s that are related to the software being deployed. At the law firm 
I left recently we used 1E shopping to populate the groups in a self-service 
manner which was super easy



Sensitivity: Confidential between partners
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Monday, November 20, 2017 1:58 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Adding a list of users to a user collection

Awesome, thanks.  I’ll try that out.
Sent from my iPhone

On Nov 20, 2017, at 3:08 AM, Stuart Watret 
> wrote:
Have to agree, our deployments are based on collections based on ad group 
member ships.
It’s great.

Stuart

On 18 Nov 2017, at 03:51, Nemec, Dale 
> wrote:

We use an Active Directory security group, and SCCM pulls the users from the 
security group.

This is the Collection query we use:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = 
"\\"

Of course, you need to also discover the OU that the security group is in under 
your site Discovery settings.

Then use powershell to populate the AD security group.

This gives us the flexibility to allow our help desk technicians to add/remove 
users from the AD security group without having to grant access to the SCCM 
Admin Console.

We have different AD security groups for each user deployment.

Good luck!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: 
listsad...@lists.myitforum.com[mailto:listsad...@lists.myitforum.com]
 On Behalf Of Heaton, Joseph@Wildlife
Sent: Friday, November 17, 2017 3:30 PM
To: 'mssms@lists.myitforum.com' 
>
Subject: [mssms] Adding a list of users to a user collection

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn’t 
work.  So, I tried UPN, and that didn’t work.  Then I tried putting the domain 
name in there with sam, and that didn’t work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn’t give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284


Please be advised that this email may contain confidential information. If you 
are not the intended recipient, please notify us by email by replying to the 
sender and delete this message. The sender disclaims that the content of this 
email constitutes an offer to enter into, or the acceptance of, any agreement; 
provided that the foregoing does not invalidate the binding effect of any 
digital or other electronic reproduction of a manual signature that is included 
in any attachment.

Re: [mssms] Adding a list of users to a user collection

[Stuart Watret]

Now that makes no sense!

On 21 Nov 2017, at 15:25, Heaton, Joseph@Wildlife 
> wrote:

Ok, so it worked…. To a point.  For some reason, the user collection does not 
have the same number of members that the AD security group has.  It’s over 100 
users short.  Any idea why that would happen?  User discovery is at the root of 
the domain, so should be getting all users, no matter where they are.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of John Marcum
Sent: Tuesday, November 21, 2017 6:36 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Adding a list of users to a user collection

Agreed… this is by far my preferred method for populating collections. You get 
the added flexibility of being able to reuse the groups  for other purposes too 
such as GPO’s that are related to the software being deployed. At the law firm 
I left recently we used 1E shopping to populate the groups in a self-service 
manner which was super easy



Sensitivity: Confidential between partners

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Monday, November 20, 2017 1:58 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Adding a list of users to a user collection

Awesome, thanks.  I’ll try that out.
Sent from my iPhone

On Nov 20, 2017, at 3:08 AM, Stuart Watret 
> wrote:
Have to agree, our deployments are based on collections based on ad group 
member ships.
It’s great.

Stuart

On 18 Nov 2017, at 03:51, Nemec, Dale 
> wrote:

We use an Active Directory security group, and SCCM pulls the users from the 
security group.

This is the Collection query we use:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = 
"\\"

Of course, you need to also discover the OU that the security group is in under 
your site Discovery settings.

Then use powershell to populate the AD security group.

This gives us the flexibility to allow our help desk technicians to add/remove 
users from the AD security group without having to grant access to the SCCM 
Admin Console.

We have different AD security groups for each user deployment.

Good luck!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: 
listsad...@lists.myitforum.com[mailto:listsad...@lists.myitforum.com]
 On Behalf Of Heaton, Joseph@Wildlife
Sent: Friday, November 17, 2017 3:30 PM
To: 'mssms@lists.myitforum.com' 
>
Subject: [mssms] Adding a list of users to a user collection

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn’t 
work.  So, I tried UPN, and that didn’t work.  Then I tried putting the domain 
name in there with sam, and that didn’t work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn’t give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284


Please be advised that this email may contain confidential information. If you 
are not the intended recipient, please notify us by email by replying to the 
sender and delete this message. The sender disclaims that the content of this 
email constitutes an offer to enter into, or the acceptance of, any agreement; 
provided that the foregoing does not invalidate the binding effect of any 
digital or other electronic reproduction of a manual signature that is included 
in any attachment.

RE: [mssms] Adding a list of users to a user collection

[Heaton, Joseph@Wildlife]

Ok, so it worked To a point.  For some reason, the user collection does not 
have the same number of members that the AD security group has.  It's over 100 
users short.  Any idea why that would happen?  User discovery is at the root of 
the domain, so should be getting all users, no matter where they are.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of John Marcum
Sent: Tuesday, November 21, 2017 6:36 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Adding a list of users to a user collection

Agreed... this is by far my preferred method for populating collections. You 
get the added flexibility of being able to reuse the groups  for other purposes 
too such as GPO's that are related to the software being deployed. At the law 
firm I left recently we used 1E shopping to populate the groups in a 
self-service manner which was super easy



Sensitivity: Confidential between partners
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Monday, November 20, 2017 1:58 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Adding a list of users to a user collection

Awesome, thanks.  I'll try that out.
Sent from my iPhone

On Nov 20, 2017, at 3:08 AM, Stuart Watret 
> wrote:
Have to agree, our deployments are based on collections based on ad group 
member ships.
It's great.

Stuart

On 18 Nov 2017, at 03:51, Nemec, Dale 
> wrote:

We use an Active Directory security group, and SCCM pulls the users from the 
security group.

This is the Collection query we use:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = 
"\\"

Of course, you need to also discover the OU that the security group is in under 
your site Discovery settings.

Then use powershell to populate the AD security group.

This gives us the flexibility to allow our help desk technicians to add/remove 
users from the AD security group without having to grant access to the SCCM 
Admin Console.

We have different AD security groups for each user deployment.

Good luck!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Friday, November 17, 2017 3:30 PM
To: 'mssms@lists.myitforum.com' 
>
Subject: [mssms] Adding a list of users to a user collection

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn't 
work.  So, I tried UPN, and that didn't work.  Then I tried putting the domain 
name in there with sam, and that didn't work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn't give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284


Please be advised that this email may contain confidential information. If you 
are not the intended recipient, please notify us by email by replying to the 
sender and delete this message. The sender disclaims that the content of this 
email constitutes an offer to enter into, or the acceptance of, any agreement; 
provided that the foregoing does not invalidate the binding effect of any 
digital or other electronic reproduction of a manual signature that is included 
in any attachment.

RE: [mssms] Adding a list of users to a user collection

[John Marcum]

Agreed... this is by far my preferred method for populating collections. You 
get the added flexibility of being able to reuse the groups  for other purposes 
too such as GPO's that are related to the software being deployed. At the law 
firm I left recently we used 1E shopping to populate the groups in a 
self-service manner which was super easy



Sensitivity: Confidential between partners
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: Monday, November 20, 2017 1:58 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Adding a list of users to a user collection

Awesome, thanks.  I'll try that out.
Sent from my iPhone

On Nov 20, 2017, at 3:08 AM, Stuart Watret 
> wrote:
Have to agree, our deployments are based on collections based on ad group 
member ships.
It's great.

Stuart

On 18 Nov 2017, at 03:51, Nemec, Dale 
> wrote:

We use an Active Directory security group, and SCCM pulls the users from the 
security group.

This is the Collection query we use:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = 
"\\"

Of course, you need to also discover the OU that the security group is in under 
your site Discovery settings.

Then use powershell to populate the AD security group.

This gives us the flexibility to allow our help desk technicians to add/remove 
users from the AD security group without having to grant access to the SCCM 
Admin Console.

We have different AD security groups for each user deployment.

Good luck!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Friday, November 17, 2017 3:30 PM
To: 'mssms@lists.myitforum.com' 
>
Subject: [mssms] Adding a list of users to a user collection

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn't 
work.  So, I tried UPN, and that didn't work.  Then I tried putting the domain 
name in there with sam, and that didn't work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn't give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284


Please be advised that this email may contain confidential information. If you 
are not the intended recipient, please notify us by email by replying to the 
sender and delete this message. The sender disclaims that the content of this 
email constitutes an offer to enter into, or the acceptance of, any agreement; 
provided that the foregoing does not invalidate the binding effect of any 
digital or other electronic reproduction of a manual signature that is included 
in any attachment.

Re: [mssms] Adding a list of users to a user collection

[Heaton, Joseph@Wildlife]

Awesome, thanks.  I’ll try that out.

Sent from my iPhone

On Nov 20, 2017, at 3:08 AM, Stuart Watret 
> wrote:

Have to agree, our deployments are based on collections based on ad group 
member ships.
It’s great.

Stuart

On 18 Nov 2017, at 03:51, Nemec, Dale 
> wrote:

We use an Active Directory security group, and SCCM pulls the users from the 
security group.

This is the Collection query we use:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = 
"\\"

Of course, you need to also discover the OU that the security group is in under 
your site Discovery settings.

Then use powershell to populate the AD security group.

This gives us the flexibility to allow our help desk technicians to add/remove 
users from the AD security group without having to grant access to the SCCM 
Admin Console.

We have different AD security groups for each user deployment.

Good luck!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Friday, November 17, 2017 3:30 PM
To: 'mssms@lists.myitforum.com' 
>
Subject: [mssms] Adding a list of users to a user collection

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn’t 
work.  So, I tried UPN, and that didn’t work.  Then I tried putting the domain 
name in there with sam, and that didn’t work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn’t give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284



Please be advised that this email may contain confidential information. If you 
are not the intended recipient, please notify us by email by replying to the 
sender and delete this message. The sender disclaims that the content of this 
email constitutes an offer to enter into, or the acceptance of, any agreement; 
provided that the foregoing does not invalidate the binding effect of any 
digital or other electronic reproduction of a manual signature that is included 
in any attachment.

Re: [mssms] Adding a list of users to a user collection

[Stuart Watret]

Have to agree, our deployments are based on collections based on ad group 
member ships.
It’s great.

Stuart

On 18 Nov 2017, at 03:51, Nemec, Dale 
> wrote:

We use an Active Directory security group, and SCCM pulls the users from the 
security group.

This is the Collection query we use:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = 
"\\"

Of course, you need to also discover the OU that the security group is in under 
your site Discovery settings.

Then use powershell to populate the AD security group.

This gives us the flexibility to allow our help desk technicians to add/remove 
users from the AD security group without having to grant access to the SCCM 
Admin Console.

We have different AD security groups for each user deployment.

Good luck!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Friday, November 17, 2017 3:30 PM
To: 'mssms@lists.myitforum.com' 
>
Subject: [mssms] Adding a list of users to a user collection

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn’t 
work.  So, I tried UPN, and that didn’t work.  Then I tried putting the domain 
name in there with sam, and that didn’t work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn’t give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284



Please be advised that this email may contain confidential information. If you 
are not the intended recipient, please notify us by email by replying to the 
sender and delete this message. The sender disclaims that the content of this 
email constitutes an offer to enter into, or the acceptance of, any agreement; 
provided that the foregoing does not invalidate the binding effect of any 
digital or other electronic reproduction of a manual signature that is included 
in any attachment.

[mssms] Adding a list of users to a user collection

[Heaton, Joseph@Wildlife]

I have the Now Micro right-click tools installed, so I thought it was going to 
be as easy as dropping the list of samaccountnames in the box, but that didn't 
work.  So, I tried UPN, and that didn't work.  Then I tried putting the domain 
name in there with sam, and that didn't work.  How can I get a list of 1800 
users into a user collection without doing it manually? I was looking at the CM 
Powershell cmdlets, but the technet cmdlet reference doesn't give very good 
examples.  Is that the way I should be looking, though?  And if so, what format 
does the user name need to be in to work?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284