Block agent deployment - single system

[jwoodmls]

My systems sync with AD, and we have a vendor wanting us to remove everything off of a server for testing, including the agent.  Unfortunately, on re-sync, the agent came back.

I see the possibility of setting up a task so it does not go to certain labels, which is fine, but that appears to mean that I also have to specifically label the ones I DO want it to go to.  Is there another way to do this that is more straightforward for this one system?

Thanks

[cdinet]

The easiest way to control that is to set up a different ou in active directory, move the excluded server in there and exclude that ou from syncing.  Otherwise, don't deploy agent when the sync runs and control the deploy agent based on a query for unmanaged agents with a filter that system name does not = excluded system.

[jwoodmls · Accepted solution]

Looks like for AD sync, I can just exclude an individual computer rather than an OU, looks like that may be my simplest option.

[cdinet]

True, I didn't look into the granularity of it, so yea, that is best option.

[jwoodmls]

Thanks @cdinet , you got my brain turning a bit better to figure that out - I had just forgotten that as an option!