Skip to Main Content
Status Already exists
Categories Other
Created by Rico Roodenburg
Created on Jul 27, 2025

Support for "NOT IN" Operator (Exclude AD Group Membership)

We would like to request the addition of support for a "NOT IN" condition (exclude AD group membership) within Recast Application Workspace targeting logic.

Use Case:
In our environment, we manage multiple Adobe packages:

  • Adobe Acrobat DC – assigned via AD Group Adobe-Acrobat-DC

  • Adobe Acrobat Reader – assigned via AD Group Adobe-Reader

The requirement is to ensure that users who are part of the Adobe-Acrobat-DC group do not receive the Adobe-Reader package. Currently, we can target based on group membership (IN), but cannot explicitly exclude users who are members of another group (NOT IN), leading to potential conflicts and unnecessary deployments.

Requested Enhancement:
Add support for "NOT IN" or "Exclude group membership" logic within the Application Workspace targeting filters, so that we can define rules such as:

Deploy Adobe Reader if user is in group Adobe-Reader AND NOT IN group Adobe-Acrobat-DC

Benefits:

  • Avoid software conflicts or unnecessary overwrites.

  • More precise application targeting.

  • Better alignment with real-world enterprise deployment scenarios.

Product Application Workspace
  • Attach files
  • Rico Roodenburg
    Jul 30, 2025

    Please contact me. This is not possible yet by assignments.

    Sent from Outlook for iOS

  • Admin
    Prudvee Raj
    Jul 30, 2025

    Thank you for you request. This is already possible using context filters or dynamic user collections. Kindly refer the documentation https://docs.liquit.com/docs/user-membership