/build/static/layout/Breadcrumb_cap_w.png

Software Deployment Question


Is it possible to do MI's while only on-prem?

04/13/2020 354 views

Hello all, 


I'm currently working on a project involving Kace SMA, and I had a quick question. We are in a spot where some patches need to go out to client machines, but we don't want them to go out over VPN due to the worlds current situation. Is it possible to trigger managed installs only if a client PC is connected on-prem, or am I up the creek?


Thanks in advance.

0 Comments   [ + ] Show comments

Comments



Community Chosen Answer

1

if I understand you correctly, you only want to install software if the device is in the company office or any branch office and not remote when VPNing into it.
Correct?

So you need to create smart labels which check for the IP address and the machine is only in this label when it has a local IP or any other option to determine if the machine is locally or not.
Then bind the MI only to this label.
Or if you need multiple labels you can build labels with the label wizard which contain multiple linked labels (ie Label Name = local IP Label AND Label Name = Workstation label) and link them to the MI/Scripts.

Please be aware that with a check in the machines go into the label if they are onsite and fall off when they are VPNed

Answered 04/13/2020 by: Nico_K
Red Belt

  • Gotcha, so I essentially just need to figure out which subnets are our VPN, and which are local. Then make smart labels from there. That is going to be rough, since that's going to be a pretty constantly changing label, but that's a super creative method. I like it, thank you.

    I'm thinking I'd need to create a label that really just says IF NOT on the VPN subnet AND HAS software. Things get messy with hundreds of branches over multiple countries sadly :[

All Answers

0

Distribution -> Managed Installations (MI Feature) and the Security -> Patch Management (Patching feature),  like most of the other features of the SMA allow you to target devices by using labels.

Group your devices using a label and use this label in your deployments.


Answered 04/13/2020 by: KevinG
7th Degree Black Belt

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ