Active Directory, Group Policy

How to use User Attributes within Group Policy Preferences Item Level Filtering

1) Create an environmental variable to store the default value for the user attribute, Mobile (#1) in this case

GPP environment variable for default Mobile attribute

2) Create an environmental variable to store the value for the user attribute, Mobile (#2) in this case

GPP environment variable with LDAP query for Mobile

3) From the Common tab, enable Item-level targeting. Add LDAP query filter and enter the following values

Name Value
Filter (&(objectCategory=person)(objectClass=user)(sAMAccountName=%LogonUser%))
Binding LDAP:
Attribute mobile
Environmental variable name usermobile

LDAP query item-level targeting configuration

4) Create an environmental variable to store the positive outcome, NeedsToRun (#3) in this case

GPP environment variable for positive outcome trigger

5) From the Common tab, enable Item-level targeting. Add environment variable filter as below

Environment variable item-level targeting filter

6) Create an environmental variable to store the negative outcome, NeedsToRun (#4) in this case

GPP environment variable for negative outcome trigger

7) From the Common tab, enable Item-level targeting. Add environment variable filter as below

Negative outcome environment variable targeting filter

The variable NeedsToRun can now be used as a trigger on any Group Policy

Leave a Reply