It seems as though if I use a static Custom Group made of of OUs, when any member of an OU changes the changes are not reflected in the static group.  That's why they are called "static."  But when I try and use a Dynamic Group I cannot select its members based upon OU.  does it not make sens that I would want to do this?

i can see why some would want to deploy based on OS, Service Pack, etc. but I can make a good case for deploying patches based on a Business unit (OU in active directory-speak) and there doesn't seem to be a way to do that.

Am I missing something here?

is there a way to do this?

 

BTW-you should really fix the typo in the Sub Forum dropdown...