Welcome to KORG!
Our login script supports "ComputerOUs(OUName...)" with mandatory controls. By placing the VDI computers in a specific OU, you could control resource processing for VDI servers with ComputerOUs=!Workstations,VDIwkstns and for regular workstations with ComputerOUs=Workstations,!VDIwkstns.
The leading "!" means NOT members of that OU. Unlike our user group memberships, which can require membership in multiple groups, only one OU match is possible. Thus, you can map one set of resources for all systems, one set for regular workstations, and one for VDI workstations.
The script also can process resource authorization by subnet membership. In this method, you could use a lookup table to map a different resource based on the subnet with a single resource definition.
You can download the user manual and get more information on this web page. The script is free for small organizations (1-4 domain controllers). Reviewing the manual might provide some ideas for your own script, too.
Glenn
_________________________
Actually I
am a Rocket Scientist!
