Scope Policy by Local User Account

[RKauffman]

Is there a way to scope a policy by a local user account?
I wanted to make a Policy to remove certain dock items from the local student account at each login but it does not seem to allow me to specify the local student account only.

[exno]

Not sure if this helps or not but what i have done in the past for guest accounts and local user accounts was Create a Smart group that finds machines with the Local User Accounts, For instance StuGuest.

Then i'd make a bash script to have dockutil add and remove items based on a default dock schema. with the [ plist location specification ] being the path to the home folder

Lastly, i'd set that script and smart group into a policy that runs on login if it has to always look a certain way.

[tobiaslinder · Accepted solution]

You can do this by scoping it to the computers and then set a limitation for the user.

[Look]

Pretty sure you need to have the policy set to a login trigger for this to work. Which in this particular case is probably what your after anyway.

[tobiaslinder]

Yes, @Look is correct.

[RKauffman]

@tobiaslinder I must be blind as a bat. Thank you.

[daniel_ross]

Love the JAMF Nation Resources! This is exactly what I was looking for @Look

[stwrz]

@Look What do you do if you want a Self Service item only show up for a particular user, but NOT have that policy execute at login?

[chriscollins]

@stwrz Probably would have to duplicate the policy and have it only set to run via Self Service.

[JustDeWon]

@stwrz .. following @chriscollins suggestion.. make sure you remember to exclude that particular user from the "Login" policy..