My goal is to advertise a OSD task sequence to all workstations in such a way that standard users do not see it in Run Advertised Programs, but someone with elevated rights could do a Run-As on Run Advertised Programs and have the task available to them. Is this possible and if so, how? The ultimate objective is to make OSD available from Run Advertised programs, but prevent users from accidently wiping their machines. If the above will not work, what are my other options? Thanks! xtiyu32n

Hi, That's not possible if you advertise the deployment to computers. You could install a PXE service Point and assign a password.Kent Agerlund | http://scug.dk/ | The Danish community for System Center products

Or why not create advertisment and collection link to AD user accounts?

I have PXE service points and passwords assigned, but this only works for PXE -- not in the OS. How do most people make OSD (or other programs) availabe from Run Advertised Programs, but prevent users from running them accidently? xtiyu32n

task sequences can only be advertised to computers, not users, if you dont want the users to see it, then simply change the Task Sequences Advanced properties (right click on ts, choose advanced) to support an OS that you are NOT USING in your organisation (eg: vista), that way if the users are running XP they won't see the advertisement in RAP and cannot access it unless they PXE boot if you are trying to do something else please explain cheers niall My step by step SCCM Guides I'm on Twitter > ncbrady

I am trying to allow only certain (IT) people to run task sequences and packages from Run Advertised Programs. If this is not possible, what are my other options for restricting advertisements in the OS? xtiyu32n

well you can password protect them and get creative with a HTA frontend. My step by step SCCM Guides I'm on Twitter > ncbrady

But password protecting only works in WinPE right?? I am trying to password protect a task sequence or program in the OS (Run Advertised Programs).xtiyu32n

works in winpe yes, but you can get the ts to reboot into winpe, and then if the password fails it boots back into windows My step by step SCCM Guides I'm on Twitter > ncbrady

But password protecting only works in WinPE right?? I am trying to password protect a task sequence or program in the OS (Run Advertised Programs). xtiyu32n You could add a "Password" step to the start of the Task Sequence, that would ask for a password. Just add a filter to this step, so it only runs in a full OS and not in Windows PE. That wont prevent users from executing the task sequence, but if they don't have the password, it will end (or fail if you prefer that)...Ronni Pedersen | Configuration Manager MVP | Blog: http://ronnipedersen.com/ | Twitter @ronnipedersen

That might work. Have you done this before? What is the best way to do this? VB script task?xtiyu32n

That might work. Have you done this before? What is the best way to do this? VB script task? Yep. I've created similar tasks, that’s prompt the user for all kinds of odd questions... :) This could be made very simple using a static password, but I'd rather go for a HTA that prompts for the AD username and password. Then I'd check for the user to be a member of an AD Group that are allowed to deploy computers. But you can use whatever method you prefer...Ronni Pedersen | Configuration Manager MVP | Blog: http://ronnipedersen.com/ | Twitter @ronnipedersen