Application Deployment Based on LDAP Group for Computer Account

[Austin]

hi All,

I was wondering if this is possible?

I know there is a option for Application deployment for users in a LDAP group. However I need the computer account which is a member of a particular LDAP group. all the macs are bound to the domain and working well.

Thanks a lot

[calumhunter]

if there is nothing built in, you could create an EA

dscl /Search -read /Computers/$computername

should get you the computer record, you could look through that and see if there is an attribute that contains the groups you are after.

If so you could refine that further with something like

dscl /Search -read /Computers/$computername $groupmembership_attribute

Then you could scope based on your EA results

Hope that helps