Active Directory (Groups) settings lose settings when i add a new PC via Regestration and Web GUI
-
Hi,
i have a Problem with the Group Settings. I have one PC in the Group. When i add a new PC to the Group all AD Settings are lost. (via Regestration and over the Web GUI). Im on the Master branch. I found something with the “persistent groups” Plugin, but i cant install oder activate it.
i Testet it on the Dev-Branch and on the working-1.6 Version too. Same results.
I cant set the Default AD Settings. Becouse i have 3 SubDomains and i want to join the PCs in right Domain after the Deploy.
Can Someone can help me pls.
-
@Phips As you found already the group settings are not lost. Groups in FOG don’t work as persistent settings but instead they’re just a tool to apply settings to several hosts.
Have you checked the individual settings of hosts after applying AD settings to those hosts via group yet. That should work and I don’t see why you want to mess with the “persistent groups” plugin. It’s up to you but remember that those plugins are less well supported than FOG core features.
-
@sebastian-roth I just checked the Host when i set the AD settings, the Host dont have any AD Settings after the “Join” to the Group. Also the Group loses the AD Settings. I dont want to mess around with the “peristent Group” plugin. i just wondering if this will work. But i cant install the Plugin so i will leave this plugin.
Do you have a other Idea?Thanks in advanced.
-
@phips said in Active Directory (Groups) settings lose settings when i add a new PC via Regestration and Web GUI:
the Host dont have any AD Settings after the “Join” to the Group
Adding a host to a group does nothing to the host’s AD settings. You need to set the AD settings through the group to have it set for all the hosts within the group.
-
@sebastian-roth yes you right. But i have to add always the AD settings New, to the Group when i add a host per gui or registration per pxe. The Group loses the AD settings. And when i have about 10 PCs a week and not All in one day thats not Practicable. Do you have any ideas how the AD settings can be Set for the Group that they are always Set also when i add a new PC to the Group.
It wouldn’t be a Problem when i only had one Domain. But with 3 Domains i cant Set the default AD settings in the FOG Configuration. -
@phips said in Active Directory (Groups) settings lose settings when i add a new PC via Regestration and Web GUI:
It wouldn’t be a Problem when i only had one Domain. But with 3 Domains i cant Set the default AD settings in the FOG Configuration.
I can see why this is an issue in your case. Though I don’t have a quick solution for you at hand. Maybe this can be scripted using the API?!
-
@sebastian-roth When you guys could help me with this, that would be great.
I’m “just” a network engineer and i dont know mutch about the scripting stuff.
When that is working with the scripting, do i have to push the script always or only ones for ever?
Thanks a lot in advanced. -
@phips said in Active Directory (Groups) settings lose settings when i add a new PC via Regestration and Web GUI:
When that is working with the scripting, do i have to push the script always or only ones for ever?
This would be something you need to do every time you add a host to the group. So it’s probably not the solution you are after.
-
@sebastian-roth Yeah i agree, thats not the solution what im looking for.
do you guys planning something in the next Version? Then i have to wait for this Version. And join my PCs after the imaging without the FogClient. -
@phips One of the things that confused me when I first started with FOG and its groups is that they don’t work the way one would normally think about security or attribute groups (i.e. you apply a setting to a group and all existing and new systems will assume that setting). That isn’t how FOG Groups work. These are my words here, but think of FOG Groups as apply settings group, in that if you want to push a setting out to your current fleet of computers, you can do that. But once the setting is pushed that value isn’t saved anywhere (except on the devices the setting was applied).
I hacked together a solution to create persistent groups, then one of the developers converted it into a plugin. So FOG’s persistent groups is based on my hack job. There is a bug in it at the moment regarding applying snapins to hosts, but that isn’t what you are asking here. I’m going to get that bug worked out before FOG 1.5.10 is released later this spring. How the persistent groups plugin works is by the FOG admin creating a template host with all of the settings you want to apply to newly added computers. So when a new computer is added to FOG’s inventory the settings of the template host is applied directly to the newly added host. This new host can be added via the web ui or the ipxe menu’s registration process.
Here is the basis of how persistent groups plugin works from back in the day: https://forums.fogproject.org/topic/8836/basic-persistent-groups-and-1-3-0rc16
This plugin has been available in FOG since version 1.3.0. Understand this plugin will only apply the template settings to hosts not ones that are currently in inventory, this is by design. Use FOG’s traditional set groups for updating existing hosts in inventory.
-
@george1421 i checked the “persistent groups” plugin. That would be a Work around for me. Im fine with that.
The problem is i can’t insall any plugin.
I can see what for plugin i can activet. But when i click on “install plugin” or “installed plugins” there is nothing. I tried to install the FOG again with the installer but nothing changed. Maybe you can say me what for logs or Screenshots you need to help me with that. -
@phips Well that sounds like a different issue than your title. The general forum rules are new issue new thread. That why when people search the forums in the future they can find the solution to the problem in the title.
But generally (outside of the persistent group plugin), when you deploy a snapin, FOG places that deployment in the queue for the target computer. When the FOG Client (running on the target computer) checks in it checks its queue to see if there is something to deploy. So one of the requirements to be able to deploy a snapin is a functioning fog client on the target computer.
-
@george1421 yes you right, i also posted that problem with the group/groups in my first post.
It´s no problem, i can open a new thread for the groups problem if you want
i don´t want to deploy any sanpins. -
@phips Well this one was my fault, long day and quickly reading the post == misunderstanding. Plugin != Snapins.
For the plugins is actually a two step process. You pick them out of the big list. Then you go to the list of selected plugins. You pick each plugin and at the bottom of the list you pick the install button, then the plugins should show up on the installed plugins list. I just spun up a new FOG server and ran into this confusion. It seemed a little wonky to me how the plugin system worked vs how I thought it should work.
-
@george1421 I don’t have a selection list for the plugins. If I go to the Plugin tab, I get straight to the plugins to be activated. Here I can select the plugins but the page is reloading his self, when i click on a Plugin. When I click on “Install Plugin” in the menu, there is nothing. Same problem with “Installed Plugins”
-
@george1421 Okay, i can install Plugins now. I had to Clean Install FOG new. But when i install the “persistent groups” and make changes in the Group and i join a new Host to the Group. The new Host don´t get the Template settings from the Group.
-
@phips said in Active Directory (Groups) settings lose settings when i add a new PC via Regestration and Web GUI:
The new Host don´t get the Template settings from the Group.
Just quoting what George said earlier:
How the persistent groups plugin works is by the FOG admin creating a template host with all of the settings you want to apply to newly added computers. So when a new computer is added to FOG’s inventory the settings of the template host is applied directly to the newly added host.
-
@sebastian-roth I just checked. Also a new Host don´t get the Templates. No matter whether I take him into the group or not. When i add a new Host to the group then the group loses his Settings and the new Host has no Settings.
-
@sebastian-roth ok it works Was my mistake, I had a mistake in the name.
If I read George’s instructions correctly, only one template group is possible. Or am I misunderstanding this? -
@phips said in Active Directory (Groups) settings lose settings when i add a new PC via Regestration and Web GUI:
I had a mistake in the name.
The names need to match exactly.
Just to clarify, you can have more than one template group. The trigger is when you assign a host to a template group, that’s when the settings of the template host are applied. Its typically best to only assign a host to a single group, because the last group assignment will win the settings, this is because all of the settings in the template host are applied to the target host even if the settings are blank in the template host. There is not an option to set just one value. Its all or nothing from the template host.