In this tutorial, we add a number of Management Groups for the ACME organization: one that uses the name of the devices and several that use the Organizational Unit (OU) the devices belong to. The following picture shows what we have in our example Active Directory and how this will appear as Management Groups in Tachyon. Here you can see there are two servers in the AD Computers group, an additional Domain Controller server and five workstations in the OU.
By the end of this example, you will have added six Management Groups in addition to the default All Devices Management Group:
- All Devices - this Management Group brings all devices into a single Management Group
- Servers, Workstations, Executive, Support, Sales and Finance - these Management Groups will use an OU rule to separate the devices according to the OU they belong to.
Without Management Groups
Before describing the process for creating the Management Groups, let's take a look at the Explorer application to see how things look without any Management Groups defined. The easiest way is to use the Devices table in Explorer:
- Navigate to the Explorer→Devices→Table page.
- On this page you will see all the devices with the Tachyon client installed. In our example, there are 7 connected devices.
- Clicking on the Management Group filter edit field, you can see that no Management Groups are present.
- Now switch to the Settings application using the Switch app menu.
- Navigate to the Settings→Configuration→Connectors page.
- Here you can check that a Tachyon connector has been added and tested.
If you have configured a connector, you can start adding Management Groups.
Adding example Management Groups
By default, in a new installation of Tachyon, all devices are members of the All Devices group. If you have upgraded from a previous version of Tachyon, your previously created Management Group will be preserved and will become a child Management Group of All Devices Management Group.
From Tachyon 8.0 you can create Child Management Groups and nest them into a Hierarchy Structure where child Management Groups inherit rules from their parent groups.
Using child Management Groups you could create by hand a Management Group structure which mirrors your Configuration Manager collections, or divide your Management Groups by device type, for example into servers and workstations. You can use the delegation feature to create Management Groups that mirror your organizational structure with associated delegated roles.
To find out how to use scripts to import a Management Group structure from a file or from Configuration Manager collection, refer to Creating direct-based Management Groups.
Refer to the Delegation in Tachyon section for details about how you can use the delegation feature.
Having defined all the Management Groups we now need to evaluate all the rules.
- Click on the Evaluate All button in the top right corner of the page, if you have more than one inventory in your Tachyon configuration you will be prompted to choose which repository you wish run evaluate your Management Groups against. Then click Yes, proceed to Evaluate.
- To check the progress of the Management Group Evaluation action, navigate to the Settings→Monitoring→Process log page.
- After a few seconds the Status column for the Management Group Evaluation action changes to display a green tick.
Checking the Management Groups in Explorer
The Management Group rules have now been evaluated and populated the Management Groups, it's now time to check how this has affected the Devices page in Explorer.
- Navigate to Explorer using the Switch app menu.
- Tachyon remembers that we were on the Devices page the last time we were in the Explorer application.
- Click on the Management Group filter. A menu pops up displaying all 6 of the new Management Groups.
- Selecting a Management Group from the menu filters the devices to show just the ones that belong to that Management Group.
- Clicking on the Sales Management Group shows that it contains just 1 device.
- Clicking on the Workstations Management Group shows that it contains 5 devices.
- Clicking on Executive shows that it contains 2 devices.
The example is now complete. We've created 6 new Management Groups, one of those with a rule that uses the OS type name and the other 5 using the OU the device belongs to. We've then evaluated the rules to populate the Management Groups with matching devices. At the same time, this has synchronized the information with the Explorer application, so we can now filter the devices displayed on the Devices table.