1. PDQ Deploy & Inventory Help Center
  2. Community
  3. PDQ Deploy
 

Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Abandoning deployment if machine is using 4G/5G carrier data plan

Avatar
David Hendy
Updated

Can anyone think of a way to have PDQ *not* deploy to a device if it's using a 4G/5G SIM/dongle or is tethered to a mobile? To make this even harder, to know outside of a VPN to the corporate network when on a mobile network?

1

Comments

3 comments
Date Votes
  • Avatar
    Lambert, Chris
    (Edited )

    While you may be able to check if the active connection is cellular (if direct on the laptop itself), tethered to a mobile device via hotspot methods would present as a WiFi connection to Windows. 

    What do you do in the case of multiple active connections (i.e. cellular and WiFi)?  Will you have to check all, see what is active and confirm the binding order to proceed?  Maybe this is not a PDQ issue.  Maybe it is a VPN issue.  What VPN are you using for these 4G/5G users?  Can/should you disallow access to certain internal resources based on the network adapter connected to the VPN?

    1
  • Avatar
    lnichols

    David,

    You could theoretically create a dynamic collection to check if they are on a cellular dongle with something like this. Of course this relies on your scans being pretty recent so you may want to include a scan age condition as well:

    Once you have this collection created and populated you could simply add a condition to your PDQ Deploy packages for collection is not member of.

    1
  • Avatar
    David Hendy

    both excellent posts, thanks. I think I'll explore the VPN-origin option more actually as this seems a more surefire way of disallowing PDQ traffic over cellular

     

     

    1