User Rating: 5 / 5

Star ActiveStar ActiveStar ActiveStar ActiveStar Active
 

When a DLU policy is configured and associated to all workstations in an environment with multiple user sources but is not needed on Active Directory builds the policy can cause issues on login. A requirement can be applied to the policy to ensure that the policy is only applied to machines with the Novell Client installed and that are not Domain members.

Scenario:

  • ZENworks 11.x configured with an AD and an eDirectory user source.

  • Multiple ENGL projects configured (AD only, eDirectory only and AD + eDirectory)

  • DLU policy configured and associated to all workstations but is not needed on AD builds

Solution:

Apply a requirement to ensure that the DLU policy is active when required.

Note: ENGL recomends that policies are disabled during the build process. The filter being described here is in addition to this requirement.

Steps:

  • Login to ZENworks Control Center

  • Open the policy to be edited

  • Select "Requirements" tab

    There should be a filter defined already as defined in our documentation: https://www.engl.co.uk/documentation/imagingtoolkit/7.0/content/proc-prerequisites-config.html#Disable



  • Check the "Combine Filters" option is set to "and"

  • Click "Add Filter"

    Define the following parameters:

    • Filter type : Novell Client Installed

    • Operators : Yes

  • Click "Add Filter"

    Define the following parameters:

    • Filter type : Environment Variable Value

    • Value : USERDOMAIN

    • Operators : Not equal to

    • Value: e.g. ENGLLAB



  • Click Apply

  • Increment version of policy (ZCM10.3.x)

  • Publish new version of policy (ZCM11.x)

The policy will now no longer apply during the ENGL build process and will only apply post build if the Novell client is installed and the USERDOMAIN environment variable does not match the AD domain.