<

How to use User Attributes within Group Policy Preferences Item Level Filtering

Published on
8,142 Points
842 Views
3 Endorsements
Last Modified:
Shaun Vermaak
My name is Shaun Vermaak and I have always been fascinated with technology and how we use it to enhance our lives and business.
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.

1) Create an environmental variable to store the default value for the user attribute, Mobile (#1) in this case



2) Create an environmental variable to store the value for the user attribute, Mobile (#2) in this case



3) From the Common tab, enable Item-level targeting. Add LDAP query filter and enter the following values


Name Value
Filter
(&(objectCategory=person)(objectClass=user)(sAMAccountName=%LogonUser%))
Binding
LDAP:
Attribute
mobile
Environmental variable name
usermobile




4) Create an environmental variable to store the positive outcome, NeedsToRun (#3) in this case



5) From the Common tab, enable Item-level targeting. Add environment variable filter as below



6) Create an environmental variable to store the negative outcome, NeedsToRun (#4) in this case



7) From the Common tab, enable Item-level targeting. Add environment variable filter as below


The variable NeedsToRun can now be used as a trigger on any Group Policy


Please do not forget to press the "Thumb's Up" button if this article was helpful and valuable for EE members.
It also provides me with positive feedback. Thank you!

3
Comment
1 Comment
LVL 44

Author Comment

by:Shaun Vermaak
Hiya. Yes I tried it without but could not get a variable to use for getting the value
0

Featured Post

Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Join & Write a Comment

Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month