This has been a ongoing random issue for about 1 1/2 now, these devices are not assigned to the filter nor any policies for the software yet the agent installs the software. We thought maybe it was dup GUID so we turned on the policy to correct GUID and that did find devices but the fact we have dup GUID is even odder, our imaging is doing sysprep and some of these dupe GUID on Mac devices that we don’t image, people have non-mac software beeing assigned to them If our devices didn’t not get sysprepred we would having a whole ton of other issues and it would be more then just the 50 or so devices that showed.
Open a ticket but I have run out of ideas of what is even causing this or where to start, use to blame it on someone adding devices to filters by mistake but audits show those filters are not even updating
We have seen over the past couple of months for no reason a device will all of a sudden be added to 10 different filters and start installing software they never requested. At first I blamed our techs for picking the wrong device but after digging into it more I cannot find that anyone even modified the filters that the device is now in, the only way to clear the issue up is to delete the device out of altiris and let it re added its self without all of the filter memberships and have someone uninstall all of the software.
The first started occering after the release of RU5 and we are now using ru7. Its not on a large scale either, out of 10k endpoints maybe seen it on 10 devices. I have tried to do audits on the devices but I get limited info on when or why this device got that added to that filter, anyone seen this before?
Any ideas/ recommendations?
I need to stop merge and split if the user belongs to a specific group. To acheive this, we are planning to use request filter. But it is not clear on what filter service do we need to use this?