Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 5 subscribers
  • Views 17838 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSP for different users

Ross86

Hi All,

I've got the SMC setup and configured with 3 devices deployed via SSP.  However these are all on one profile and in one group.

How do I deploy a different task bundle to a different user.  For example I have an AD group called MDM with the users in, they sign into the SSP and go through works fine.

I want a different task bundle deployed but can't see where I can have multiple AD groups to acheive this.  I have one company user and couldn't work it out so had to deploy the standard BYOD task bundle/profile and then redeploy the company profile afterwards.

I have for example a group called IOS Devices, points to employee IOS and company IOS compliance rules, but then the SSP can only seem to use one task bundle.

Another issue is how does everyone deploy company devices, do you use the SSP or create device?  If so can you please explain as create device just seemed to be a lot of effort and didn't appear to work very well.

How does everyone work around this?

Thanks!

Ross

:54885


This thread was automatically locked due to age.
Parents
  • 0

    Hi Ross,

    sorry for the late reply.

    So within the "Group settings" tab, you can now add additonal configurations for your specific groups.

    I did an example for a specific user group "Support" using the exact DN and used "Sales*" to cover all groups starting with "Sales".

    Example.jpg

    Please note: The "Default" config is still there but not part of the screenshot.

    Now, if a user logs in to the SSP it is verified of which group the user is a member. The SMC Server will then go through the configs from top to bottom and once a matching group is found, this configuration will be used in the SSP and all other configs are ignored. If a user is not part of any of the configured groups, the "Default" config will apply.

    Hope this helps.

    Best regards

    Stefan

    :55323
Reply
  • 0

    Hi Ross,

    sorry for the late reply.

    So within the "Group settings" tab, you can now add additonal configurations for your specific groups.

    I did an example for a specific user group "Support" using the exact DN and used "Sales*" to cover all groups starting with "Sales".

    Example.jpg

    Please note: The "Default" config is still there but not part of the screenshot.

    Now, if a user logs in to the SSP it is verified of which group the user is a member. The SMC Server will then go through the configs from top to bottom and once a matching group is found, this configuration will be used in the SSP and all other configs are ignored. If a user is not part of any of the configured groups, the "Default" config will apply.

    Hope this helps.

    Best regards

    Stefan

    :55323
Children
No Data
Unfiltered HTML