Deploy application based on User AD group membership

[baker999]

I've created user collections that lookup AD group membership. I now want to deploy software to the machines those users log into and install the software for the machine. Understandably this isn't a 'clean' way of managing the software deployments because users could log into multiple machines - but the software we're deploying is free/unlicensed so sprawl is irrelevant.

We're SCCM 1603 and I can see the deployment running, but it fails. Presumably because of the context the installer is running. If I install it against a device collection, it works. Presumably because the install is run in the SYSTEM context, and not user. How can I get around this? Is it possible to configure service accounts with admin rights to runas for a user deployment? Or is there a cleaner way?

 

Cheers!

[SMoRZ3]

Have your application install for the system, but deploy the app to the users. This way it installs in the system context, but your users are still the 'target' of the deployment.

[NaveenJoshi]

On 10/25/2018 at 5:17 PM, SMoRZ3 said:

Have your application install for the system, but deploy the app to the users. This way it installs in the system context, but your users are still the 'target' of the deployment.

Can It be done during OSD as well ?

[Om Joshi]

you could try this option - https://www.prajwaldesai.com/deploying-applications-to-users-using-sccm-2012-r2/