Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSP for different users

Hi All,

I've got the SMC setup and configured with 3 devices deployed via SSP.  However these are all on one profile and in one group.

How do I deploy a different task bundle to a different user.  For example I have an AD group called MDM with the users in, they sign into the SSP and go through works fine.

I want a different task bundle deployed but can't see where I can have multiple AD groups to acheive this.  I have one company user and couldn't work it out so had to deploy the standard BYOD task bundle/profile and then redeploy the company profile afterwards.

I have for example a group called IOS Devices, points to employee IOS and company IOS compliance rules, but then the SSP can only seem to use one task bundle.

Another issue is how does everyone deploy company devices, do you use the SSP or create device?  If so can you please explain as create device just seemed to be a lot of effort and didn't appear to work very well.

How does everyone work around this?

Thanks!

Ross

:54885


This thread was automatically locked due to age.
Parents
  • Hi Stefan,

    Thanks for your answer.  I have tried doing this however when I first setup the LDAP configuration I pointed it to a specific AD group.  Now when I try to point this to an OU instead of a group it says:

    "The directory configuration can not be modified because 4 devices are still linked to the directory."

    Ok I found adding manually a bit awkward as I tried to deploy/enroll the handset, I then had to manually install the Sophos App... then when I tried to deploy a task bundle it failed. How is it normally done?

    If I can get multiple AD groups to work through the SSP I can just create a company one and BYOD one and use the SSP to rollout both.

    Thanks

    Ross

    :54954
Reply
  • Hi Stefan,

    Thanks for your answer.  I have tried doing this however when I first setup the LDAP configuration I pointed it to a specific AD group.  Now when I try to point this to an OU instead of a group it says:

    "The directory configuration can not be modified because 4 devices are still linked to the directory."

    Ok I found adding manually a bit awkward as I tried to deploy/enroll the handset, I then had to manually install the Sophos App... then when I tried to deploy a task bundle it failed. How is it normally done?

    If I can get multiple AD groups to work through the SSP I can just create a company one and BYOD one and use the SSP to rollout both.

    Thanks

    Ross

    :54954
Children
No Data