Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Custom security roles - access to resource manager

Created: 24 Jan 2013 | 1 comment

I've found it hard to say if building up a role from nothing or stripping one down from a cloned policy is easier to do.

My end goal is to give a specific role access to only one group of filters, allow them to push the agent (http://www.symantec.com/docs/TECH185996), and view resource information by double clicking or right click --> resource manager.  

The problem I'm having is viewing the resource information.  I've got the setting stripped down for a user in this role to see just the grouping of filters I want.  I have to revisit the agent push known issue, but when I try to open a resource, I get the following...

"Symantec Management Server Error

An error has occurred that prevents the Symantec Management Console displaying correctly.

If this page is shown in place of a page or web part in the Symantec Management Console, navigate back to the page using the menu or tree and continue working. If the problem persists, see your local network administrator.

If this page is shown in place of the Symantec Management Console, one of the following could be the cause:

  • The "Altiris Service" service is not running. Start this service on the server and reload the console.
  • The account used for either the "Altiris Service" or the Notification Server webs is incorrect, disabled or the password for the account has expired. On the Notification Server computer, run "C:\Program Files\Altiris\Notification Server\bin\AeXConfig.exe /svcid user:(user name) password:(password)]", substituting the correct installation path if a non-default location was used, to provide a new account.
  • The name of the Notification Server computer has been renamed. The following steps will need to be taken to correct this:
    • If SQL Server is installed on the same machine as the Notification Server:
    • Open the file [NS INSTALL DIRECTORY]\Notification Server\Config\CoreSettings.config, search for the word 'key=DBServer'. Replace the 'value' attribute of the found XML element from the previous server name to the new server name.
    • If account used for either the "Altiris Service" or the Notification Server webs is a local user (i.e. Not a domain user), you will need to update the account to the new name. You can do so by following the 2nd bullet points on this page.
    • Open Registry Editor, browse to the registry key "HKLM\SOFTWARE\Altiris\express\Notification Server\". Find and replace any value that contains the old server name with the new name.
    • Re-push the agent out to all previously managed machines. (#)
    • Run the Windows schedule named "NS.Package Refresh" to re-validate site/package server packages. To get to the Windows schedules, go to 'Start' > 'Control Panel' > 'Scheduled Tasks'.
    • If you have hierarchy set up, you will need to remove and re-add the renamed server to the hierarchy. To do so, go to the "Hierarchy Management" page under the menu "Settings" > "Notification Server" > "Hierarchy".

In both cases, the Symantec Management Server log and the Windows Event log may contain useful information. The Symantec Management Server log can be accessed on the server by running "Start" menu > "All Programs" > "Altiris" > "Diagnostics" > "Altiris Log Viewer".

(#) If the NS hosted computer has yet been renamed, a better alternative would be to point all NS clients to the new server name first. You can do this by going to the menu "Settings" > "Agents/Plug-ins" > "Targeted Agent Settings". For each policy in the list, select the "Advanced" tab and specifies the new server name under the "Alternative URL for accessing NS" section. By doing this, all the clients will work automatically once the NS server has been renamed."

Comments 1 CommentJump to latest comment

mclemson's picture

What do you see in the Altiris Log Viewer for the date/time when you perform this action?  This is where the useful information is going to be.  What sort of rights did you provide this role to the Default organizational view for resources in the Computers Organizational Group?

Mike Clemson, Senior Systems Engineer, ASC
Intuitive Technology Group -- Symantec Platinum Partner
intuitivetech.com