Is there a reason that UEM does not have a Condition based on a user's Active Directory Logon?
We currently deploy certain network drive mappings, access permissions and printers to AD security groups. Several times a week, we need to make a temporary change to these assignments. Because we cannot add a user as a condition to the UEM config, we can only add the user to the proper security group. This is less than ideal and kills any benefit of the UEM-Refresh user function. UEM-refresh keys off the AD user tokens on the local machine, it does not do an LDAP lookup. To my knowledge the only way to refresh the user's AD information is to process a new logon.
If anyone has a workaround to reference an individual AD user in UEM Conditions or a way to make UEM-refresh look at AD instead of the local machine, I would be eternally grateful.
-Bob