Non sysadmin, trying to solve a sysadmin problem and failing terribly.

[Guest /u/Low_Lengthiness_2389]

Hey there I have a problem that I've been trying to find a solution for but been failing so far.

 

I'm currently using 2 VM's one a DC and the other a client to attempt to find the solution before providing the solution to the person that is need of it.

 

I'm replicating their current setup in a much smaller scale.

 

They currently have 100+ devices and many more staff, and the devices are passed around randomly to each other throughout the working day, and they may even log into multiple devices throughout the day.

 

The current GPO the company have assigned is at a device level and works as intended, it forces all of the company devices to install a specific software, and the software itself is configured to run at start up automatically and cannot be disabled, service stopped or uninstalled meaning once it's installed it runs all the time when someone logs in.

 

The problem they have given me is they wish for the above GPO to remain as it is, enforcing the software is installed on all of the devices, but they want the software to be disabled if specific users logon to the device, otherwise the software is to run as normal.

 

So with this in mind I created another OU ' Users' and within this have then created two Groups 'Staff' and 'Management' and started sorting all the users into their specific groups.

 

I now have all the users that should be a member of the ' Management' group sorted and all of the users that should be part of the ' Staff ' group sorted.

 

But now I need to figure out the simplest way to have the software disabled if the user logging in is part of the ' Management' group, but run as normal if the user logging in is part of the ' Staff ' group. This would be something that runs in the background at log in and would be unattended, so the users wouldn't even be aware if the software had been enabled or disabled.

 

Thanks.

 

submitted by /u/Low_Lengthiness_2389

[link] [comments]

 

Continue reading...