Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Installing Agents not on the Same Domain

Updated: 21 May 2010 | 2 comments
DanUS's picture
0 0 Votes
Login to vote

Sorry if this is a simple solution, but it eludes me at the moment.
I'm trying to manage an agent (which I've manually installed) on a server that is not on the same domain as NS.
Furthermore, I don't see any way to change the ports used by the agent. 

Any help is appreciated!

Btw, we're using NS7 with CMS7 and SMS7

Comments

ricodjs's picture
08
Sep
2009
0 Votes 0
Login to vote

Different Domain Installations

DanUS,
have you tried using the FQDN in the targetting window to force the NS to recognise the foreign computers?
Else, can you import the foreign domain computers using AD import?
R

R

KSchroeder's picture
07
Oct
2009
0 Votes 0
Login to vote

How-to do custom port assignments and agent config

As Rico suggested, you may need to use the FQDN of the NS, and of course the NS IP must be resolvable on the remote server.  On the managed server, run AeXAgentUtil.exe /server:yourns.subdomain.company.com (this .exe should be in the Altiris Agent install directory).

As far as changing the communication ports, you can do this too.  By default the NS and the NS Agent use port 80.  In our environment (still on NS6), we set the default IIS port for the NS to a custom port < 1024 (be sure to pick one not already reserved by some other application), but add port 80 as an alternate port (handy for managing the NS through the browser in case you forget to append the :port to the URL).  In the Agent Settings (again I don't know the exact location, I think Manage > Agents ?) there should be an advanced tab that lets you specify a different NS host name; in this page just put the http://yourns.subdomain.company.com:###/Altiris.  The next time the agents update configuration, they'll get the new port added to their configuration.  This works quite well, especially for managing servers in a DMZ where you can't open port 80, but you can get away with a custom port with firewall permissions to a specific internal host.

Thanks,
Kyle
Symantec Trusted Advisor

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.