Endpoint Protection

 View Only
Expand all | Collapse all

Need to reboot all system through host Integrity policy

  • 1.  Need to reboot all system through host Integrity policy

    Posted Dec 20, 2013 11:43 PM

    Hi

    I want my all client where we have SEP installed must get Reboot every after 4 hours.

    Can anyone having this policy or created this policy through HI?

    Client OS: Window xp and window 7

    SEPM version:-11.7 MP1 and 12.1 RU4



  • 2.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 12:10 AM

    Try the below step first on testing group

    You can go to the client tab from Console and select policies Tab then General setting from (Location-independent Policies and Settings)

    I General setting you can find Restart Setting.

    Choose the custom restart and set the time and apply

     

     

    Location-independent Policies and Settings
    Policies
      Custom Intrusion Prevention Off
      System Lockdown Off
      Network Application Monitoring Off
    Settings
      LiveUpdate Content Policy Settings
      Client Log Settings
      Communications Settings
      External Communications Settings
      General Settings

    tab.png



  • 3.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 01:02 AM

    Hi Raju,

    We are unable to find this options in 11.7 MP1 SEPM console?

     



  • 4.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 01:14 AM

    This option is for 12.x, i am currently using 12.x so only able to provide the screenshot for same.



  • 5.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 02:26 AM

    Hi Nagesh,

    Any reason do you want to reboot all system every 4 hours ?If you will reboot your system every 4 hours that impact your company business.production.

     


  • 6.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 06:25 AM

    Hi James,

    Current we are currently deploying MS-Patched which required Reboot.



  • 7.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 07:17 AM

    This is not possible in 11.x. You would need to use another product such as SCCM or Altiris.



  • 8.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 09:41 AM

    What product do you have use for deploy MS -Patched ?

     



  • 9.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 21, 2013 12:36 PM

    If you use SCCM, it can do the reboots for you.



  • 10.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 22, 2013 12:33 AM

    In SEPM 11.x this setting available but you can run manually in one by one every each group

    SEPM->Client Group

    Restart Computer.JPG



  • 11.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 24, 2013 05:17 AM

    HI Ashish,

     

    Thanks but is it possible to created policy and do it automatically through HI? 



  • 12.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 24, 2013 05:29 AM

    Nagesh,

    I am not familiar SNAC it’s better you can done manually, System restart activity once in month when Microsoft release new MS patched.



  • 13.  RE: Need to reboot all system through host Integrity policy

    Posted Dec 24, 2013 05:59 AM

    I agree with the others in that I would not consider this the best way of managing restarts on your endpoints for the purposes of updates.

    If you do really want to create repeating scheduled reboots, then perhaps you could just push out a script (via GPO?) to create a scheduled task instead?

    http://technet.microsoft.com/en-us/library/cc755618(v=ws.10).aspx

    Finally, if you really really want to do this via a HI policy, it should be as simple as creating a poicy with a custom requirement (and no others), and adding the Function -> Utility: Run a program and setting this to perform a shutdown /r /t 0.  Then just set this policy to check HI status every 4 hours and you should be away.

    Again though, I'd personally go for a managed solution like Altiris instead.