Client Management Suite

Hi,

We currently have a NS version 6.0.6074 + Deployment Console version 6.9 byukd 179. Now we're going to migrate to a new 7.1 system.
I've setup a new server (Windows 2008 R2 SP1 with Client Management Suite 7.1).

Installation went smooth. I've created a test OU with a few test-PCs (who currently have the old agent). In the 7.1 console I've setup the agent settings to point to the new server and to push the agent to all computers in that OU.

It does start the installation, on the client the AeXInstall-process is visible for a few moments and that's it. Nohting more happens and the client does not get installed. In the logviewer there's only an entry for starting the installation process, nothing more: no errors, no warnings, ... nothing.

When I download the client to the workstation, run it with /uninstall to remove the current client and install it again with parameter /ns=newserver.domain.com it does install itself, but it doesn't get a ComputerID nor does it send an inventory or gets listed in the new console.

What am I missing here? Any help is hugely appreciated.

kind regards

Walter

You will want to install 7.1 SP1 if you want Windows 2008 R2 SP1 to be supported.  It is not supported in 7.1 RTM.

This is worth trying before any additional troubleshooting.

Hi,

sorry for the late response but I had some other issues to attend to with higher priority.

To answer: yes it's the latest version (Client Management Suite 7.1 SP1 version 7.1.1). When I push the agent via the console it remains on status "Starting 'Symantec Management Agent install service'"

When I go to settings > agents > Symantec Management Agent > Settings > Symantec Management Agent Install and I select the computer and choose "install" nothing much happens (the AeXInstall.exe process flashes on the target system a few seconds and the status in the console remains "Starting 'Symantec Management Agent install service'"

However, when I go to Home > First Time Setup > Rollout Agent and select the computer + choose install I do find a few records in the Log Viewer:

Source:Altiris.Agent.Unix.PushInstall.PushAgent.PushAgentToComputer

Description: Log of the Remote Connection Session to Computer: S00129(10.0.1.129):
Failed to connect (SSH) - ConnectionRefused
Computer S00129(10.0.1.129) might be switched off.
You may also need to check the credentials supplied, the firewall rules on the computer and its SSH or telnet configuration.

The source states Altiris.Agent.Unix.PushInstall but the target is a Windows Server 2008 R2 SP1 system (although I've also tried on Windows XP SP3 and Windows 7 SP1, both with the exact same result). I also did NOT choose the "Install Agent for UNIX, Linux and Mac" option but the default "Install Agent" option.

I've also tried disabling the Firewall and virus scanner, both without success.

Check the registry entry for Altirs: HKLM\Software\Altiris\

See if you get an error when you try to expand Altiris Agents, if you do then rename the Altiris registry entry to OLDALTIRIS and run

AEXagentutil /Clean command and try to reinstall the agents.

this was a new system with no prior agent installation. In the meantime I did a manual install ("AeXInstall.exe /ns=nsserver.ourdomain.com")

that installed the agent, but it doesn't seem to register itself with the NS. It doens't get a Computer ID and in the console it also remains listed as "no agent installed".

I have the feeling I forgot something, but I can't seem to find it. I've also read through the manual and followed all steps, without avail.

You shouldn't need to, but try disabling the firewall on your NS, then recheck agent communication.

Do you happen to have any unique permissions setup on folders for your image or do you have any domain policies preventing certain folder level access?

If it wasn't for the XP SP3 attmept I would say it was based upon a rights issue when installing. I would attempt to run the install on the W2K8 R2 and Win7 machine under the admin context just to see if you get any addtional success.

@mclemson: FW Domain Profile is already turned off

@cnpalmer75: nope, no special permissions or GPO's

basicly I've done the following:

* we already hava an 6.x notification and deployment server.

* in stead of upgrading we decided to start anew (and NOT migrate the current settings & database)

* I've setup a new NS 7.1 SP1 server

* made some basic settings (AD import of a test OU with computers, AD import of sites, AD import of our AD "Altiris Administrators" group, mail & proxy settings, ... very basic

* tried to push the agent to 3 different test systems: one XP SP3, one Win7 SP1 and one Server 2008 R2 SP1

* installed manually when pushing failed with results as described above.

one note: the XP and Win7 had the old 6.x agent (but when I manually uninstalled them or manually installed the client with the /ns=newserver.ourdomain.com parameter that didn't make a difference), the server had no agent and was freshly installed a few days ago.

(partially) FOUND IT!!! I turned of SSL and now the agents install successfully.

During installation I selected "SSL required" and made the server issue a self-signed certificate. Could that be the cause for my problems? And how can I make it work with the self-signed certificate?

Install the certificate manually or using GPO.