Delivery Assignment to Device group in standalone deployment?

Hi,
I am using the standalone deployment of SAP AII 2.1. I have the following two queries regarding assignment of deliveries to device groups.
1. I am able to assign the same delivery to multiple device groups with same business roles as well as different business roles at the same time.
For example, I am assigning the delivery to a device group that handles tag commissioning and I also assign the same delivery to a device group that handles the loading at the same time. Is this the correct behavior?
Or is it that once a delivery is assigned to a device group, it should be first processed by that device group or unassigned before the same delivery can be assigned to a different device group?
If this is the case, then is there any configuration setting in AII that can control the delivery assignment to device groups?
2. Logically I believe that only one delivery can be assigned to a device group.
I assign a delivery to a device group. Then I immediately assign another delivery to the same device group. I believe that the first delivery gets unassigned from the device group, but there is no message to this effect
Again is there any configuration setting for handling this situation?
Regards,
Dhananjay

What you are deploying is a Client Settings policy, not the client itself. This is akin to a Group Policy Object being linked to an OU. The machines in the collection which already have the ConfigMgr client will process those policies, but additional non-client
machines added to the collection will not automatically install the client.
As Torsten indicated, you can deploy the client to these machines using the manual client push method. Simply right click on the clients themselves (or the collection) and select Install Client. If doing it at the collection level, I recommend
against selecting "Always install the client software" in the wizard as it will force an unnecessary repair of the existing ConfigMgr clients. I would recommend testing this on one machine in the collection in question before attempting to do them in bulk.
Note that this requires that a Client Push Installation account be configured (Administration > Site Configuration > Sites > Client Installation Settings > Client Push Installation > Accounts tab) which has admin rights on the clients.
You *DO NOT need to enabled site-wide client push installation* to be able to use the Install Client method in the console. Enabling this will force the client to attempt installation on ALL systems that ConfigMgr sees.

Similar Messages

ISE - auto assign a device to group upon device registration

Hi,
Is it possible to auto assign a device to group upon device registration?
Typically in the registration portal, once "Register" button is clicked, the MAC address is put into "Registered Device" group, but let's say I want it to be put in different groups depending on the AD group? (Let's say when if Staff A register the device, the device automatically put into group A, Staff B to group B, and so forth)
Thanks

If you create a portal Specific for device registration, you can define to which ID groups will belong the registered endpoints.
I didn't tried this, but it might be possible to have a different portal for registration based on AD group, if you chain it after CWA or Dot1x. That would make an additional redirection though.

In Profile Manager, Can I assign users to ONLY a specific Device Group?

In profile Manager (Lion Server 10.7.3) I created DEVICE GROUPS per Lab, and each Lab has a manager. I want to give each manager permissions to see and manage ONLY their devices. Is this possible?

I'm not sure this was ever designed to be user friendly as typically only Admins or those with elevated permissions would see these groups. There isn't as far as I can see, any way to add this step within a Wokflow too, unless you're able to install
some third party steps.
Steven Andrews
SharePoint Business Analyst: LiveNation Entertainment
Blog: baron72.wordpress.com
Twitter: Follow @backpackerd00d
My Wiki Articles:
CodePlex Corner Series
Please remember to mark your question as "answered" if this solves (or helps) your problem.

How to deploy settings in Profile Manager through Device Groups

When I go to the Profile Manager web page and create a device group and configure the payload settings it doesn't seem to send the profile settings to the Mac devices that are in the group. How do I go about getting this to work so when I get a new device that is enrolled all I have to do is throw it in the group so it will automatically push out the correct payload settings that I configured?

What you're asking should work. You should be able to create a Device Group and adjust the setting for that group. Then when you add a device to that group, the settings will be pushed to the device automatically. So, it leaves me with a few questions for you:
Why don't you think it sends the payload? When you look under "Activity" do you see tasks in the "Active" area or in the "Completed" area... or something else?
What are you trying to change? Setting up email accounts on iPhones will appear right away, but there are other changes (especially on computers) that don't take affect until it restarts (or the user at least logs out and back in).
Are you sure you have devices in your device group? Sorry, probably a really silly question, but under your device group, do you see the devices under the "Members" section?
Are your devices "trusting" your server? Did you add the trust profile to the device when you enrolled it?
Sorry I can't be more help... but I can tell you that you can do what you are asking. We have it set up in our office, and it works really well. We just add the new device to the device group and it does the rest.

Multiple Network Device Groups when importing to ISE using template

I have a question about importing a group of network devices into ISE using the template provided. The template only has a single column for Network Device Groups - is there a way to import devices and include more than one NDG? For instance, the NDG's we use are "Device Type" and "Location". I'd like to include both when doing my import and I've tried multiple ways to seperate the two strings within the column (comma's colons, semi-colons, spaces, pipes, tabs, etc), but i always get an error message that "NDG group does not exist". I also tried adding a new column into the template, but that just plain failed to import.
If there is any way to do this, I would appreciate any advice on how - I have to add about 40 devices per week to our ISE deployment and I'd rather not have to go in and add any parameters manually if it can be helped. Thanks very much!
Ross
BTW, we are running ISE ver 1.1.2 in case it is relevant.

Yes, you can do it. You have to use the pipe "|" to separate the groups. But please notice you must create the network device groups in advance.
For example, I have the following groups in my csv file to import a lot of network devices
Device Type#All Device Types#SWITCHES#375O-X|Location#All Locations#PERU#LIMA
But as a pre-requisite I have to create the network device groups.
If you have lots of network device groups, you can mass import them instead of creating them one by one.
Please rate if it helps

How to add computer to Intune group during client deployment?

I'm deploying the Windows Intune client as a task sequence in MDT and using Intune to deploy Office 2010.
How can I automatically add the newly imaged computer to a Windows Intune group during the client deployment so that Intune will begin pushing the required software immediately?
Thanks.
Jeff Guillet, MVP, MCITP:Enterprise Messaging Administrator, MCSE, CISSP | http://www.expta.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Jeff,
You have 3 options.
1. Create a group that includes all computers as the parent
2. Create a group based on a specific domain the computers belong to
3. Create a group based on a specific OU the computers belong to.
Currently that's the only dynamic way to have computers automatically join a device group upon enrollment.
Thanks,
Jon L. - MSFT - This posting is provided "AS IS" with no warranties and confers no rights.

Printer device group and a label format in SAP AII

Hello @ all,
I try to configure a SAP OER System with SAP AII. Now I should configure the label printing with the transaktion /AIN/ASGN_PRF_FORMAT. I must take a profile name, a printer device group and a label format. The problem is now, that I can't chose a printer device group and also I don't know the label format. Where can I adjust the printer device group and which label format must be in that field?
Can anybody help me?
Thank you.
Peter

Hi Peter,
SAP AII sends the label format filename as part of the Command message xml to the printer during tag commissioning.
I assume you have configured the label format filename for SAP_PRINT_PROFILE using transaction /AIN/ASGN_PRF_FORMAT - Assign Format to Printer and Profile
Now you have to assign that profile to an ID type or GTIN, etc. using the menus under Profiles for Tag Commissioning and Label Printing.
Once this configuration is done, the xml command message containing the element WriteTagData is sent to the printer RFC destination configured against the Device controller as an HTTP message.
This command message will contain the label format and field names - value pairs as per the SAP_PRINT_PROFILE.

1) Device groups

First question:
Workstations (devices) are currently allocated under /Devices/Workstations to
folders that represent the office location of the workstation.
Is there a way to create device groups without removing the devices from their
primary location-related folder?
Is there a way to use AD device groups to assign bundles?
What's the latest thinking on to how to apply a constraint on a bundle to apply
both "user-membership-in-AD-group", and "device is approved for this app"?
e.g. I know I can add "specified devices" as a requirement, but that demands
adding individual workstations and I see no way to add device groups, which can
be very tedious if I want, for example, "this app can install for these users
on these 200 devices".
Thanks.
-- DE

Originally Posted by DE
thsundel wrote:
> Yes, create a workstation group and add the computers you want as
> members (they will not be removed from their "location-related" folder.
OK, so I want to be sure that I am understanding ...
Currently the workstations are in, say,
/Devices/Workstations/bigcity1/desktops
/Devices/Workstations/bigcity1/laptops
/Devices/Workstations/bigcity2/desktops
/Devices/Workstations/bigcity2/laptops
They need to stay in those folders, for obvious reasons. And unfortunately,
this will never match up to AD because it starts at the top level by
differentiating between workstations & servers, while AD identifies "computers"
that are placed into whatever AD structure you define.
In any case: So I can create device groups that won't result in them being
moved out of those folders?
IOW, I could define a device group that contained the systems that were allowed
to have a certain app installed, and that group membership won't disrupt the
above folders?
And are we talking about Dynamic device groups (which I've never used) or are
there other regular "device groups" that don't just represent the structure above?
Thanks again. I have a feeling that others before me have already requested an
enhancement that device groups be an option in Requirements, since I think I've
read discussions of these same issues here in the past.
-- DE
Yes, just create e "regular" Device Group where ever you want in the folder structure and add workstations as members.. You probably hava a test workstation that you can try with if your not confident.
Thomas

SSL Accelerated Service and device groups

I have a need to set up SSL accelerated services on a data center WAE and one edge WAE. In reading through the Cisco Wide Area Application Services SSL Application Optimiser Deployment Guide (2010), it states that best practice is to create an SSL device group and configure the SSL service and generate the keys through that group.
Simple question: Should only the data center WAE be placed in that group, or should also the edge WAE be in the group? The devices are running 4.3.3.

Only the data center wae's need to be placed in the SSL device group.
Regards
-Smita

AAA Device Groups

Hi,
I have configured a major networ device group under which have sub groups.
If i want to configure for R/O users to give access to certain sub network groups, can i make a device filter and call that device filter for allowing the access? or it has to be a seperate rule for each of the network device group.
Please let me know the best practice
Thanks

It seems you're running ACS 4.x. You're facing this issues because the key defined on the NDG level (XYZ network device group in your case) over-rides the key at the AAA client level. Please make sure that you don't have different secret key on the AAA client inside the NDG and on the NDG itself.
Not assigned is working because there is no key defined in that NDG.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/NetCfg.html#wp342738
"Each device that is assigned to the Network Device Group will use the shared key that you enter here. The key that was assigned to the device when it was added to the system is ignored. If the key entry is null, the AAA client key is used."
~BR
Jatin Katyal
**Do rate helpful posts**

WAAS Central Manager Policy Definitions across several device groups

Hi there,
I am trying to find a way to apply a custom application policy(s) to multiple device groups. ( not the AllDevicesGroup).
I have not found a way to export or import the policy.
Any help would be appreciated.
Todd

I have my "Core" WAE's in a separate device group to prevent them from recieving a policy or setting intended for Edge WAEs. For example, If someone sets the assignment method to hash, I certianly dont want that pushed to my Core, ( using Mask assignment)
However, a custom application definition WILL need to be applied to both Core and Edge WAE's. Therefore I need a way to create the policy for all devices group and copy out and apply selected custom policies to the Core device group as well.
Problem: I have QUALYS Vulnerability Scanners that wreak havoc on WAE's by opening 1000's of sessions and not propoerly closing them, causing TFO Overload conditions, throughout the network.
Solution: create a custom policy to set Scanner IP action to pass-through. there are 30+ scanners so the match condition is lenthy and woudl be painful to build manually for each device group.
new Problem: need to apply this to multiple device groups.

WSUS Client delayed update detection after assigned to new group

Hello, fellow forum dwellers,
I'm experiencing some issues with my WSUS Client Management and couldn't find any answer in the library or forums. Thus I decided to write here:
Issue
When registering a new computer with WSUS and assigning a group, the updates, that have been assigned to that group aren't released to the Computer (searching will only yield the list available to the default group). After some hours (I'm currently trying
to measure just how many) suddenly the updates will become available as intended.
Why does it bother me?
That wouldn't bother me all that much for permanent clients (Using the term "client" to refer to WSUS client, independently of the actual OS type), however much of our work is spent rolling out devices to customers (who ought to receive them fully
updated). Completely non-uniform, preinstalled but non-updated hardware and OS rule out preupdated installation images unfortunately. This is putting a significant delay in our time spent on each individual device (and is sometimes putting a serious bottleneck
in our operation).
Infrastructure:
WSUS OS: Windows Server 2003 R2
WSUS Version: 3.2.7600.226
Computer-Folder Assignment: Serverside
Client-Configuration: Registry Modification (Clients are not domain members, settings are applied via Powershell Script)
Client OS: Windows 7, 8, 8.1, 2008 R2, SBS 2011, 2012
Client OS Architecture: x64 & x86
Localization: All clients & WSUS have uniform timezone and language
Any insights and help welcome :)
Cheers and thanks in advance,
Fred
There's no place like 127.0.0.1

Hello, fellow forum dwellers,
I'm experiencing some issues with my WSUS Client Management and couldn't find any answer in the library or forums. Thus I decided to write here:
Issue
When registering a new computer with WSUS and assigning a group, the updates, that have been assigned to that group aren't released to the Computer (searching will only yield the list available to the default group). After some hours (I'm currently trying
to measure just how many) suddenly the updates will become available as intended.
Why does it bother me?
That wouldn't bother me all that much for permanent clients (Using the term "client" to refer to WSUS client, independently of the actual OS type), however much of our work is spent rolling out devices to customers (who ought to receive them fully updated).
Completely non-uniform, preinstalled but non-updated hardware and OS rule out preupdated installation images unfortunately. This is putting a significant delay in our time spent on each individual device (and is sometimes putting a serious bottleneck in our
operation).
Infrastructure:
WSUS OS: Windows Server 2003 R2
WSUS Version: 3.2.7600.226
Computer-Folder Assignment: Serverside
Client-Configuration: Registry Modification (Clients are not domain members, settings are applied via Powershell Script)
Client OS: Windows 7, 8, 8.1, 2008 R2, SBS 2011, 2012
Client OS Architecture: x64 & x86
Localization: All clients & WSUS have uniform timezone and language
Any insights and help welcome :)
Cheers and thanks in advance,
Fred
There's no place like 127.0.0.1
After adding the computers to the group to get WSUS to recognize the new group you need to run the command on the client
wuauclt.exe /detectnow /resetauthorization
The /resetauthorization part is the one that makes sure the client checks to see which group it belongs to in WSUS.
The delay you are experiencing is the amount to time the client takes to "check in" with WSUS.
Hope this helps.

Policy Assignment to AD Groups

Perhaps I'm going about this the wrong way, but can someone explain if this should work or not?
I have ZESM 4.1 IR 1 installed on a Windows 2003 server with a seperate SQL box - all installed and configured fine.
Created a user source pointing at AD, and have a single OU set up with 2 groups that I want to assign the policies to. When I open up a policy and click on the publish tab, I can expand down the AD tree to the OU and can see the relevant groups I've created.
If I then add a user to one of the groups then attempt to publish a policy to the group, the ZESM Management Console says "Policy Assignment Complete", however, if I then right click on the agent on the taskbar and "Check for Update", its saying there is "No Policy Update at this time"
If I assign the policy directly to the user, then it works correctly.
Am I missing something?
The reason I want to restrict it to a single OU and specific named groups is because we've had issues in the past with multiple admins in the system overwriting users policy assignments so I want to try and control policy assignments as much as possible.

Hum, I think you're out of luck.
At least with 3.5 it doesn't refreshes group memberships once they're added to the DB. So, group memberships are only "read" at directory configuration time. You can try this by deleting and re-creating the directory config once you update the group memberships and see if they publish to the correct users.
However, I haven't tried this with the current 4.1. Good news are, this issue is addressed in ZCM/ZESM 11, since we'll be using the LDAP configuration that comes with ZCM.
HTH,
Daniel
>>>
From: andystewartSL<[email protected]>
To:novell.support.zenworks.endpoint-security-management
Date: 8/3/2010 5:16 AM
Subject: Re: Policy Assignment to AD Groups
Forgot to mention, the plan is, if any users are added/removed from the
groups then the policy would be re-published to the group - I'm assuming
this will work also?
Andy Stewart - Somewhere In Scotland
zcm 10.2.2, 4 servers in esx vm environment, 2000 users so far...
(i'd still rather be snowboarding)
andystewartSL's Profile: http://forums.novell.com/member.php?userid=1054
View this thread: http://forums.novell.com/showthread.php?t=417317

I see "Enrollment Settings" under device groups but it doesn't seem to do anything. Is that normal?

Hello, first time poster.
I'm new to most things apple aside from basic use of ipads and iphones. I was put in charge of the ipads for my school district and after some research and effort, I've gotten a mac server (on mavericks) up and running.
I have setup an MDM, gotten the token, gotten the VPP, etc...
Everything is working as it seems to be working. But...
In Device groups, under settings for a device group I see "Enrollment Settings" with things like "prompt user to enroll device" and "Supervise (IOS only)". So I added a device to a new group, reset the device in question and nothing. The settings appeared to do nothing. Is that normal or am I missing something?

Which version of Server.app? 3.1.2?
Verifty local DNS services. Invalid DNS causes other OS X Server components to have issues. You'll need DNS on your local network somewhere, whether that's served by OS X Server, or another DNS server doesn't matter.
Launch Terminal.app from Applications > Utilities and issue the following harmless, diagnostic command:
sudo changeip -checkhostname
That'll require an administrative password for the sudo, might generate a one-time message about the use of sudo, and will then display some configuration information and then an indication that no changes are required, or that there are network or DNS issues. If you're not in .local or .arpa, that'll usually give you a good view of your local network configuration.
The device has to be enrolled with Profile Manager server. How you do that depends on how you want to manage your devices. There are various overviews of how this stuff works too, if you're getting started: here is one video.

Task Assignment to Ggroup - Group Members Not Getting Email

I have a process with an approval activity with initial user selection set to a group rather than a specific user. I want all selected users to receive an email notification that a new task awaits them. When I assign to a specific user, the custom email template is sent to the user. When I assign to a group, the group members don't get the task assignment email.
How do I change that so that group members will receive email notification of task assignment?
Thanks in advance!
Eric

One possible solution:
You can use our Group Lookup component to get a comma-separated list of the emails of the members of the group. Then, in the step before the User>assignTask step, send the group an email. The only problem is that you won't be able to embed a link directly to the task, because the task doesn't exist yet.
Doc: http://avoka.dnsalias.com/confluence/display/Public/Lookup+DSC
Download: http://www.avoka.com/avoka/escomponents.shtml
To work around this problem, you can use the technique outlined here:
http://blogs.avoka.com/2008/10/20/customize-user-task-escalation-after-assignment/
http://avoka.dnsalias.com/confluence/display/Public/Customize+User+Task+Escalation+After+A ssignment
If you need more assistance, contact info-at-avoka.com
Howard

Delivery Assignment to Device group in standalone deployment?

Similar Messages

Maybe you are looking for