Network segments question

SeanA
Contributor III

If a policy's network limitations "allows it to execute from ANY IP
address", but the computer's IP address is one not in any range defined by
the JSS's network segments, will the policy run on that computer? I would
think not since the network segment defines the netboot server and
distribution server, but I would like confirmation.

Thanks,

Sean

3 REPLIES 3

talkingmoose
Moderator
Moderator

If a Mac is on a network range that's not defined in the JSS it will still
On 10/6/11 10:01 AM, "Alexander, Sean" <sean.alexander at lmco.com> wrote:
execute the policy. The network ranges allow you to limit/restrict where a
policy runs but you don't need to have any defined in order to simply run
a policy.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492

bentoms
Release Candidate Programs Tester

So you could say.. Set a script policy to run from any IP.. (incl VPN).. & one to cache adobe updates only when on your local LAN.

Regards,

Ben.

talkingmoose
Moderator
Moderator

Yeppers. Definitely.
On 10/6/11 3:22 PM, "Ben Toms" <bentoms at btopenworld.com> wrote:

I have one East coast user that rarely connects to our network because he
works from his home office. He visited our Saint Paul office and connected
his laptop to the network, which set his time zone to Central via a
Managed Preference. When he returned home he couldn't reset his time zone
since he's not an administrator and he's not connecting to an East coast
network.

By scoping our VPN network I was able to clear the time zone preference
and reset his machine to East coast time.

Moral of the story: scope for VPN clients too.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492