Smart Groups are driving me crazy!!!

[CapU]

I know I'm not the only now with this issue:

I have a Smart Group, well I had a S.G. (I deleted it) it showed 28 computers in the group. I created a Config Policy that scoped to that S.G. and much to my surprise the policy said that there were only 10 in the group. This discrepency bit me in the butt earlier in the week when I created a policy to delete user profiles on 3 S.G. I clicked the "Show in JSS Dashboard" and was surprised to see none of the machines that I had intended the policy to apply wherein the list. Instead my machine and another co-workers plus some other IT machines were in the list. I quickly stopped the policy. Not quick enough. My co-worker's profile had been toasted. Luckily enough he was the only one and he had a time machine back to fall back on. Which brings me back to Smart (dumb) Group. I had scoped a policy and could not figure out why only some of the machines in the lab were getting the change. I decided to manually add one of the machines onto the scope. The JSS responded by saying that "No matching records found" But if I go and looking the S.G. lo and behold there is the system Im attempting to add manually. In the first image Im showing that there are 28 computers in the SG.In the second the policy says that there are only 10 in the SG.

Any ideas would be appreciated. I considering blowing it all away and setting up from scratch.

I have "refreshed" the S.G. by clicking on Edit then save. I have rebuilt the policy. I have upgraded to the newest version of Casper.
Whats next

[jchurch]

can you post a screen shot of your smart group criteria?

[mm2270]

Uhm, you're not trying to rely on the JSS dashboard to determine the number of systems in your Smart Group are you? If so, that right there is your problem. OK, well, truthfully its the dashboard's problem. The dashboard items, from policies at least, never really reflect accurate information when talking about Smart Groups. The numbers will fluctuate up, down, left and right based on which machines have checked in, which have run the policy already and so on.
You need to go into the Smart Groups section and look at your Smart Group there. Forget using the Dashboard for that purpose, seriously, I'm not even kidding. You will make your head explode trying to figure out the wacky math logic that creates the numbers you see there. I think the math used there only works in some alternate dimension.

This issue with inaccurate numbers and even numbers that go down instead of up has been discussed on other threads. Its been a problem with policy dashboard items from the beginning.

[CapU]

Here is the Criteria @jchurch

[CapU]

@mm2270 I am not relying on the dashboard, but when I noticed that 1: My machines were not getting my policy settings and 2: Machines not in the scope were getting the policy made me click the "Show in Dashboard" so I could see what was happening thats when I discovered the discrepancy. I have sent my server logs and JSS summary so hopefully this will get resolved soon.

[mm2270]

@CapU Is the "Get Distinguished Name" criteria you posted from an Extension Attribute? If so, is it a new Extension Attribute that you recently set up, or has it been in your JSS for a while now? I assume from the name of it, its pulling some information from LDAP. Is that right?

[CapU]

@mm2270 The attribute was in my JSS since we had it set up. We've been using S.G. since October. A Jamf contractor set up and trained us.