I have three different deployment tasks in ePO 22.214.171.1241 that are all restricted based on tags.
Task1 deploys to all except Tag1 and Tag2
Task2 deploys to only Tag1
Task3 deploys to only Tag2
However, I am seeing this behaviour:
Systems without either Tag1 or Tag2 receive only Task1 (as expected).
Systems with Tag1 receive both Task2 and Task1.
Systems with Tag2 receive both Task3 and Task1.
I have verified which tasks are being received by each system by checking the local folder <C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Task>. I have also verififed that the tags are being applied correctly to the systems.
So it appears to me that when I limit a task using tags, the option "Has any of these tags:" is working, but the option "And has none of these tags:" is not being handled correctly.
Has anyone else seen this sort of behaviour? Or perhaps I'm missing something in my understanding of how this is supposed to work.
Any help is appreciated.
I just experienced the same issue, and found another thread discussing this:
It appears it only checks for the "none of these" tags if there's something in the "any of these" list.
I'm about to enter a ticket with McAfee for this, but I think eobiont's work-around is the best for now: take/make a tag that all systems are a member of, and put that in the "has any of these tags" field.
The current release date that I know of (subject to change, of course) is early January. I haven't seen anything relating to this in 4.6 as yet - I'll try and test it when I get a sec.