Video Screencast Help

Create an Altiris custom security rol

Created: 21 Oct 2013 • Updated: 21 Oct 2013 | 1 comment
CesarTecnoXXI's picture
This issue has been solved. See solution.

What are the settings that I have to configure to fix that issue?

I am trying to create an altiris custom security rol to install the altiris agent from the next altiris console path :

Settings -> Agents/Plug-ins -> Symantec Management Agent -> Settings -> Symantec Management Agent Install

Nevertheless I always obtain the next error:

Log File Name: C:\ProgramData\Symantec\SMP\Logs\a.log
Priority: 1
Help and Support:
Date: 10/21/2013 5:55:11 PM
Tick Count: 445394554
Host Name: SMPserver
Process: w3wp (10896)
Thread ID: 665
Module: w3wp.exe
Source: Altiris.Agent.Unix.Console.InstallUnixClientTab.Page_Load
Description: The current user does not have required permission 'read' to load item 'Scheduled agent push to discovered machines item (for UNIX). (b1238e4d-f821-4a77-94b5-7a3b4b312e9f)'.

Best Regards.

Operating Systems:

Comments 1 CommentJump to latest comment

CesarTecnoXXI's picture

I followed the instructions in the next link to fix the issue:

Everything is working very well.

Best Regards.

1.The first step is to export two items that are needed for that page to load, using the following commands.  The path’s may need to be adjusted depending on customer environments.

•C:\Program Files\Altiris\Notification Server\Bin\Tools>ImportExportUtil.exe /export 124d0571-4725-466c-8f43-998160d3cff2 c:\Temp
•C:\Program Files\Altiris\Notification Server\Bin\Tools>ImportExportUtil.exe /export B1238E4D-F821-4A77-94B5-7A3B4B312E9F c:\Temp
•C:\Program Files\Altiris\Notification Server\Bin\Tools>ImportExportUtil.exe /export F1A08C61-4F14-4C0F-9E57-EB79D43F1334 c:\Temp

2.Next import the policies into a visible folder so that we can modify the permissions.

•Go to Settings> Agents/Plug-ins> Symantec Management Agent.
•Right click on the 'Settings' folder and select Import.  Import the files that were exported in the previous step one at a time.

3.Open security and add the desired role to the needed folder.

•Go to Settings> Security> Permissions.
◦Select ‘Symantec Level 2 Workers’ or the desired role in the Role: drop down.
◦Select ‘Settings’ from the View: drop down
◦Expand the tree Settings> Agents/Plug-ins> Symantec Management Agent.
◦Select the ‘Settings’ folder
◦Click the ‘Advanced’ button
■Within this section add the ‘Symantec Level 2 Workers’ or desired role, using the plus button unless it already exists with a status of Not Inheritted.
■Give the role full control
■Check the box ‘Replace permissions on all child objects’
■Save changes and close the window
◦Save changes and close the window

4.Verify that the role can now access the page, you may need to close the console and open it again.