Symantec Developer Group

 View Only

  • 1.  Create an Altiris custom security rol

    Posted Oct 21, 2013 07:31 PM

    What are the settings that I have to configure to fix that issue?

    I am trying to create an altiris custom security rol to install the altiris agent from the next altiris console path :

    Settings -> Agents/Plug-ins -> Symantec Management Agent -> Settings -> Symantec Management Agent Install

    Nevertheless I always obtain the next error:

    Log File Name: C:\ProgramData\Symantec\SMP\Logs\a.log
    Priority: 1
    Help and Support:
    Date: 10/21/2013 5:55:11 PM
    Tick Count: 445394554
    Host Name: SMPserver
    Process: w3wp (10896)
    Thread ID: 665
    Module: w3wp.exe
    Source: Altiris.Agent.Unix.Console.InstallUnixClientTab.Page_Load
    Description: The current user does not have required permission 'read' to load item 'Scheduled agent push to discovered machines item (for UNIX). (b1238e4d-f821-4a77-94b5-7a3b4b312e9f)'.

    Best Regards.



  • 2.  RE: Create an Altiris custom security rol
    Best Answer

    Posted Oct 21, 2013 08:19 PM

    I followed the instructions in the next link to fix the issue:

    http://www.symantec.com/business/support/index?page=content&id=TECH185996&actp=search&viewlocale=en_US&searchid=1382392508933

    Everything is working very well.

    Best Regards.

    1.The first step is to export two items that are needed for that page to load, using the following commands.  The path’s may need to be adjusted depending on customer environments.


    •C:\Program Files\Altiris\Notification Server\Bin\Tools>ImportExportUtil.exe /export 124d0571-4725-466c-8f43-998160d3cff2 c:\Temp
    •C:\Program Files\Altiris\Notification Server\Bin\Tools>ImportExportUtil.exe /export B1238E4D-F821-4A77-94B5-7A3B4B312E9F c:\Temp
    •C:\Program Files\Altiris\Notification Server\Bin\Tools>ImportExportUtil.exe /export F1A08C61-4F14-4C0F-9E57-EB79D43F1334 c:\Temp


    2.Next import the policies into a visible folder so that we can modify the permissions.


    •Go to Settings> Agents/Plug-ins> Symantec Management Agent.
    •Right click on the 'Settings' folder and select Import.  Import the files that were exported in the previous step one at a time.


    3.Open security and add the desired role to the needed folder.


    •Go to Settings> Security> Permissions.
    ◦Select ‘Symantec Level 2 Workers’ or the desired role in the Role: drop down.
    ◦Select ‘Settings’ from the View: drop down
    ◦Expand the tree Settings> Agents/Plug-ins> Symantec Management Agent.
    ◦Select the ‘Settings’ folder
    ◦Click the ‘Advanced’ button
    ■Within this section add the ‘Symantec Level 2 Workers’ or desired role, using the plus button unless it already exists with a status of Not Inheritted.
    ■Give the role full control
    ■Check the box ‘Replace permissions on all child objects’
    ■Save changes and close the window
    ◦Save changes and close the window


    4.Verify that the role can now access the page, you may need to close the console and open it again.