I am still hashing out my global login script and one of the items that I plan on including is the SMS installation portion of the login script. I wanted to create a mechanism to exclude systems or users from installing SMS during the login process. One of the things that hit me is this:

Say we have 10 OUs - one for each site, each with their own policies, etc. I created a group called [OU]_SMS_EXCLUSION under each OU, as the admins for each site only have the ability to manipulate their own sites. I then created a Global Group called [Company]_SMS_EXCLUSION and added the other groups as members. I then added a test machine into it's local SMS exclusion group. In my script, I am using the ComputerInGroup UDF, and for some reason, if I search for the local group it works fine, but it does not work if I search against the global group, of which the local group is a member.

Can .KIX not see that far?

Any help would be appreciated.

Edited by oobnuker (2005-05-03 05:59 PM)
_________________________
-- oobnuker - .KIX hack - no really.