Using BigFix Actions

I need to query Active Directory for computers that Start with LAP as 3 first characters of computer name (for LAPTOPs) then if users have logged into them in the last 90 days then I can deploy Adobe reader (msi).

I wonder if Bigfix can be configured to do that ?
If so please show me how to do it

Thank you
jskfanAsked:
Who is Participating?
 
Chris DentPowerShell DeveloperCommented:
There is no way to query AD to find that information.

You can find Computers that have logged onto the domain in the last 90 days, but that's the computer itself authenticating. It doesn't mean someone is actually using it.

You can still query for computers using the name in an LDAP filter, but that's a bit simplistic:
(name=LAP*)

Open in new window

If you wish to try the LastLogon time anyway, you can do that too, but the value for the filter must be dynamically generated. Can BIgFix do that?

Chris
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
You can do this very easily using powershell, which I would recommend. Use the below code to accomplish this.

import-module activedirectory
$Date = get-date
Get-ADComputer -Filter * -Properties LastLogonDate | ? {$_.LastLogonDate -lt $date.AddDays(-90) | select name, LastLogonDate

Open in new window


Will.
0
 
jskfanAuthor Commented:
How do you integrate that powershell with BigFix.
Because the point is after Bigfix queries AD then it will deploy the Adobe Reader
0
Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

 
Will SzymkowskiSenior Solution ArchitectCommented:
Ahhh, sorry I am not familiar with Bigfix. So aside from the script portion I cannot provide any more insight regarding Bigfix.

Will.
0
 
jskfanAuthor Commented:
I do not Think EE has Bigfix section.
it is bought by IBM and it is called now Tivoli...it is a product, that deploys MS Updates, you can deploy software to users and computers, etc.... it is like GPO, but a lot faster, faster than SCCM .......
0
 
jskfanAuthor Commented:
Thank you
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.