locked
Remove computers from AD Security group RRS feed

  • Question

  • I have 300+ clients using Office 2003 and with the update to Exchange 2010 and integration into sharepoint I have been asked to get the 300 clients moved to Office 2003. Problem I foresee having is this. I can install Office 2007/2010 just fine from the server, but Office 2003 was pushed to all these computers using AD. If I update the computer to 2007 or 2010 it will simply reinstall 2003 anyway. Is there a way SCCM can remove said computers from AD security groups?

    Thursday, December 29, 2011 2:11 PM

Answers

  • There is no built-in feature in COnfigMgr. that will remove objects from AD groups. You can either create a script that does the job, or maybe a WMI filter on your AD software GPO.
    Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund
    Thursday, December 29, 2011 3:43 PM
  • Hi RCCMG,

    You need to do it in two steps:

    1- remove office 2003 using the GPO or using script, since it was not installed using SCCM.

    2- Use SCCM to install 2007/2010

    Good Luck

    Saturday, December 31, 2011 8:03 AM

All replies

  • It won't reinstall 2003 just because 2003 is removed unless you send it a new advertisement. No, SCCM cannot remove computers from security groups.

    If you no longer need 2003 why not just delete the advertisement and collection of machines that are in the security group just as house cleaning?

     


    John Marcum | http://myitforum.com/cs2/blogs/jmarcum/|
    Thursday, December 29, 2011 2:30 PM
  • Office 2003 is not an SCCM advertisement. It was installed VIA Active Directory, cant just kill the advertisement.. since it isnt SCCM installing office 2003.
    Thursday, December 29, 2011 2:32 PM
  • There is no built-in feature in COnfigMgr. that will remove objects from AD groups. You can either create a script that does the job, or maybe a WMI filter on your AD software GPO.
    Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund
    Thursday, December 29, 2011 3:43 PM
  • Hi RCCMG,

    You need to do it in two steps:

    1- remove office 2003 using the GPO or using script, since it was not installed using SCCM.

    2- Use SCCM to install 2007/2010

    Good Luck

    Saturday, December 31, 2011 8:03 AM