In SCCM you can create a user or device collection that will be populated by an active directory organizational unit or ou.
This can be very handy to use as it means you don’t need to give anyone access to SCCM to update memberships in collections.
To create a device collection based on an active directory OU there are a few steps we need to perform.
Create A Device Collection Based on Active Directory OU
To create a device collection based on an active directory ou we are going to create a device collection that uses a query membership rule.
To do this follow these steps
- Open configuration manager console
- Go to \Assets and Compliance\Overview\Device Collections
- Click on create device collection in the toolbar
- Give the collection a good descriptive name
For advise on naming conventions for collections take a look at this guide I wrote.
- Set the limiting collection by clicking browse (I recommend not to use the All systems collection)
- Click next
- Click Add Rule > Query Rule
- On the query rules properties page give the query a name
- Click on Edit Query Statement
- Click the Criteria tab
- Click the sun icon to edit the criteria
- Click select
- For Attribute class select System Resource
- For Attribute select System OU Name
- Click Ok
- For the operator select is equal to
- Click the value button
- Highlight the required OU
- Click ok
- Click ok
- Click ok
- Click ok
- Click Next
- Click Next
- Click Close
- Right click on the device collection you just created and select refresh
- Now check the amount of members in the group are as expected