Altiris Notification Server
ludovic_ferre
|
November 6th, 2009
So after we reviewed the inventory rules in the last post, today we are going to look at the registry entries on the client that drive the various PMS inventory components and policies.
So let's look at an extract of some interesting registry keys (from my test systems):
[HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Altiris Agent\InventoryRuleAgent\InventoryRule\Policies\{06D80F00-9D63-4714-ACD7-CE980E8C139A}]
"Interval"=dword:000000f0
"OnlyReportInventoryIfChanged"=dword:00000001
"SendInventorySummary"=dword:00000000
"DoNotRunInventory"=dword:00000000
"ImpersonateInteractiveUser"=dword:00000000
"GS"="VBOX-ATRS1"
"SG"="{06D80F00-9D63-4714-ACD7-CE980E8C139A}"
"Name"="Default Microsoft Vulnerability Analysis Policy"
"Hash"="MdcquTeunMeC4zX/VirSgQ=="
"LastWakeup"=hex:e7,d5,c4,b3,6e,97,e3,40,00,00,00,00
"LastInventoryHash"="pRUooqcCkp8ZRj...
Altiris Client Management Suite, Altiris Notification Server, Endpoint Management and Virtualization, Documentation
0 comments
ludovic_ferre
|
November 6th, 2009
The Altiris Agent comminucates to its managing Notification Server through a set of interfaces available via http/https on the NS. But given the number of computers that a NS can manage at any given time the concurrency aspects of this communication stack are not always easy to understand.
Here is a diagram I created whilst troubleshooting some IIS communication error, with details of the software components and configuration items that are part of the communication stack on the server [click on the image to enlarge]:
0 comments
dregourd
|
November 6th, 2009
Hello,
I am importing large amount of datas via the Data Connector 7.
Each time I click on the "test rule" button, the server actually "runs" the rule for real.
Has anybody encountered this behaviour?
Best regards,
David
2 comments
aspen
|
November 5th, 2009
The following code can be used to create connections based on which computers have IE 6.
Basics, Altiris Notification Server, Best Practice, Endpoint Management and Virtualization, Configuring, Installing, Windows, Upgrade, General Symantec
1 comments
IAVchick
|
November 5th, 2009
The FileSystemObject may have been disabled and/or restricted. Now when attempting to run reports, it times out and returns a 'result is nulll.' What do you think the issue is?
3 comments
cnimmer
|
November 5th, 2009
First, import the attached .xml file into your NS report console.
When run, you can choose how many days worth of tickets you want to query. Then you to pick one of the categories, and all tickets assigned to that category will display.
0 comments
Mbordelon
|
November 5th, 2009
I am in the process of building a new notification server to replace our current server. The plan is to give the new server the same name and IP address as the current server and remove the current server from the network. I know that we would have to export custom reports and notifications. Anything else I should be aware of with this plan? Any suggestions or advice?
6 comments
lah
|
November 5th, 2009
We manage HP Thin Clients (t5000 series) using Altiris Deployment Solution 6.9 SP3. I am looking to import them into CMDB on NS6 using the eXpress-database as data source. Is there a simpler or better built-in way of doing this?
I have created "Thin Client" as a new asset type in CMDB and used "Network Resource" as "Base Resource Type". I would like to add the Data Classes "AeX HW BIOS" and "OS Operating System Common" to my custom Thin Client asset type. I cloned both data classes and moved them to User Defined, but when I open the asset type Thin Client and click Add Data Classes, the User Defined folder appears to be empty.
I exported the cloned Data Classes to XML and changed <userEditable>false</userEditable> to <userEditable>true</userEditable>. After import the User Defined folder still appears empty. What am I doing wrong?
Database, Altiris Notification Server, Best Practice, Endpoint Management and Virtualization, Tip/How to
3 comments
dclaxton
|
November 4th, 2009
How do you add a drilldown to resource manager in a report? So far, I've created the drilldown to go to Resource Tools. However, when I enter a hint, it doesn't stay. So, I tried a different approach, maybe set it as a different web site. I'm not sure what I need to put for the URL or query string. Any ideas? The ultimate goal is to drilldown to the Resource Manager.
Thanks.
DC
1 comments
mgonzales323
|
November 4th, 2009
I am looking to see if anyone has figured out a way to pull user logins from the Notification server database. I would like to be able to pull the number of logins we had for a particular month. We use Altiris in our computer labs and Upper Management is looking for usage statistics.
Thanks in advance!
Matthew Gonzales
1 comments
aspen
|
November 4th, 2009
When creating software deployment jobs within NS it would be great if there was a software prerequisite toolset of some sort. This toolset would allow you to specify OS and application requirements that must be present before software installations can continue.
Altiris Deployment Solution, Altiris Notification Server, Endpoint Management and Virtualization, Symantec Connect, Wise Application Packaging, Wise Installation Development
1 comments
ianatkin
|
November 4th, 2009
Two days ago, Symantec posted security advisory SM09-015 -Symantec Altiris Deployment Solution and Notification Server Management Web Console Browse and Save File ActiveX Overflow.
This vulnerability announcement refers to activeX controls downloaded when accessing the web consoles for Notification Server and Deployment Server. These activeX controls have buffer overflow vulnerabilities which can be exploited should any Altiris Administrator/Worker (who uses the web consoles) visit a malicious website, or possibly open a maliciously crafted HTML email which calls the control. The vulnerability potentially allows unauthorised code execution within the security context of the user's browser.
Although the number of machines hosting these vulnerable DLLs is reserved to computers Altiris Administrators and Workers use for web administration of Deployment and Notification Server, please note that Symantec have posted this with a HIGH severity rating. Although Symantec are not aware of any...
Altiris Deployment Solution, Altiris Notification Server, Best Practice, Endpoint Management and Virtualization, Installing
0 comments
gtingen
|
November 3rd, 2009
Can someone please point me to a step-by-step on how to change a computer GUID on client pc in my environment? I am not having much luck getting the GUID to change on a pc that I am working on. I have run the aexagentutil.exe /resetguid command and the NS keeps giving it the same GUID back. I want the GUID to change to a different one. How do I accomplish this? Thanks.
10 comments
KSchroeder
|
November 2nd, 2009
One of the challenges that you may face as you scale up your Recovery Solution environment is keeping track of how much free space is left on your Recovery clusters. It was easy enough to generate a simple report to sum up all the SpaceUsed, SpaceFree, and MaxSize columns in the RawVolume table (which tracks the storage space for each storage location you define in your RS Cluster configuration). I converted that simple report into a iterative query using a cursor that checks free space for each RS cluster, adds that to a temp table, then exports all the results and emails them to a defined list of users via email. Quite a time-saver when you have ~16 Recovery Clusters to keep an eye on!
To use it, just import it into your NS console with Recovery Solution installed, edit the Email Automated Actions, enable the Policy, then click "Test Notification Policy". Just like that, you'll get a daily snapshot of Recovery space utilization...
Altiris Notification Server, Altiris Recovery Solution, Best Practice, Endpoint Management and Virtualization, Performance, Reporting
0 comments
ludovic_ferre
|
November 2nd, 2009
Since the original release of Notification Server 7 (and even a little before that during the beta cycle) I download the symantec.pl.xml file daily to review if the content has changed. In fact I do not do this, I create a shell file to do it in my stead - it's so much more efficient than I could ever be ;).
In all cases, after running this for a few month now I have the following data structure on my server (note that the files are named after the md5 hash value of the symantec.pl.xlm):
ludovic@ub-x64:~/ns7pl$ ls -lArth
total 364M
-rw-r--r-- 1 ludovic ludovic 8.3M 2009-03-16 18:23 3f29324957727373e54f2fa70c23d055
-rw-r--r-- 1 ludovic ludovic 9.0M 2009-03-24 19:39 5149d004db29ec53bec0e4ffc8db711c
-rw-r--r-- 1 ludovic ludovic 9.2M 2009-04-02 14:24 899225afdfd68ed4da113e18e77e350f
-rw-r--r-- 1 ludovic ludovic 10M 2009-04-09 11:33 bc4e1a9ed5312059d72b07bcd4e019ae
-rw-r--r-- 1 ludovic ludovic 13M 2009-04-28 12:42 83a827d8150a2e7bf93d0e033f2db982
-rw-r--r-- 1 ludovic ludovic 13M...
0 comments
sp1897
|
November 2nd, 2009
Want to use NS 7 to push out SEP client and server install. Already have install packages built on SEP server, looking for best way to push out to PCs and servers. Any feed back would be great
1 comments
Mustafa Abdel-Aziz
|
October 31st, 2009
When I decided to upgrade to NS7, I could not find a separate downloadable item on Symantec Download page for NS7.
To upgrade from HD6 to SD7, I had first to download and install NS7, then install SD solution to it. And since, there is no NS7-only download available, I had to download CMS 7, which downloads NS7, then add SD7solution to it.
It would be really nice if Symantec adds NS7 as a download item to it's Download page, so that we do not get confused when we need to download/install solutions other that CMS.
3 comments
G Ross
|
October 30th, 2009
When working with Asset management there are occassions where there is incorrect or missing data within some of the asset summary fields such as the system manufacturer or model. This becomes especially problematic depending on the reports your asset management team uses to keep track of hardware in your environment.
It may be that your manufacturer is missing from some of your assets. In this case you can use the built in Dell hardware collections or create your own Dell collection to update the manufacturer to Dell for all your Dell workstations. Using the bsaic inventory you should be able to create collections for IBM, Lenovo, HP, etc to update the manufacturer information for all of your systems. In order to do this from the 6.5 console go to View > Configuration > Solution Settings > Connectors > CMDB Rules and create a new CMDB rule from scratch or clone one of the sample CMDB rules already there. Step 1, determine what resources you are going to focus on.
In...
Altiris IT Asset Management, Altiris Notification Server, Endpoint Management and Virtualization, Configuring, Tip/How to
0 comments
dll
|
October 29th, 2009
When I try to add a data class to a resource type ( I click the Add Data Classes button), I get an Internet Explorer Script error "GetPicture failed Unknown error." I am asked if I want to continue running scripts on this page. (see attachment) I click Yes. Then I get a second Internet Explorer Script error "Object doesn't support this property or method." (see attachment) I click yes but the Items Selector window is blank and does not display the data classes. It just says Loading.... No items ever appear.
Server is NS6.0.6074 SP3 R10. I have deleted internet temp files and ran a repair of SP3 and NS6.0 but get the same errors.
4 comments
ccarroll@adsrm.org
|
October 28th, 2009
I have an older NS6 server with a 12 GB partion on C and with NS6 on the C drive I am out of space. My SQL 200 server is installed on D along with my DS 6.9. If I uninstall NS6 then run the NS6 installer that is current and redirect that to D will it be OK I use DS much more than I use NS but I don't want to break DS since my dept relies so heavy on it. I am preparing to buy a new server next year for the Altiris, but that is next summer and I need to get thins one to there until then.
4 comments
chiefshb
|
October 28th, 2009
Ok...I'm trying to get a handle on 7 before we migrate to it and having some difficulties. I'll try to give as much detail as possible.
Created an OU in Active Directory name Altiris Test. Built 1 Vista machine and 1 XP machine on an ESXi 3.5 Server. Moved those 2 computers into the Altiris Test OU.
Created Altiris Server on same ESXi server. I'll give info on all hardware if needed, but I don't think that has anything to do with my issue.
Installed full Suite through Installation Manager.
Went into Active Directory Import and setup following rule: Import Computer resources from <actual domain name input on server> starting from ALTIRIS TEST and using the default column mappings. Import all computers on the specified schedules
Added schedule as needed and chose to manually run the rule (full update).
If I go to Manage - Organizational Views and Group, I can see the 2 computers that were brought in and the AD structure to get to them.
In Altiris Agent Install, I made sure the...
3 comments
ludovic_ferre
|
October 28th, 2009
File list
nscript.nrf
pms62auto.cs
pms62auto_howto.html
The nscript.nrf file list the assemblies that should be loaded by nscripts (PMS 6.2 assemblies), while the pms62auto.cs was written to provide a one-stop shop for most automation tasks. So it takes certain command line arguments (which are case sensitive) as described below.
Command line arguments
/task:EnableAll
/task:DisableAll
/task:CreateAllTasks
Note: The following command line examples assume that the Notification Server install directory is under the system folder %programfiles%. If you have installed the Notification Server on a different drive change the path accordingly.
Command line usage examples
So to enable all bulletins in a Patch Management Solution copy the nscript.nrf and pms62auto.cs onto '%programfiles%\Altiris\Notification Server\bin' and run the following command line:
"%programfiles%\Altiris\Notification Server\bin\nscript.exe" pms62auto.cs /task:EnableAll
To disable all bulletins use the...
Altiris Client Management Suite, Altiris Notification Server, Endpoint Management and Virtualization, Configuring
4 comments
AlastairN
|
October 28th, 2009
Has anyone created any reports or custom SQL queries to report workstation compliance on Windows 7 minimum system requirements?
If anyone has any help available would be greatly appreciated. We are looking at upgrading to Win7 and would like to better understand what hardware upgrades are required.
Am running NS6 SP3
Windows 7 Minimum System Requirements:
· 1 gigahertz (GHz) or faster 32-bit (x86)
· 1 gigabyte (GB) RAM (32-bit)
· 16 GB available hard disk space (32-bit)
· DirectX 9 graphics device with WDDM 1.0 or higher driver
3 comments
ianatkin
|
October 27th, 2009
A little while ago I wrote an article "Don't Let USB Creator Eat Your Thumb Drive", and this got me thinking about using my thumb drives a little more. So, when Windows 7 was released my first thought was "Hey, can this be installed from my trusty USB key?". I had imagined this to be a day project, but within an hour I had not only managed to configure my USB drive for a Windows 7 install, but I'd also used it to install a Windows 7 PC too -installing Windows actually appears to have gotten easier!
The process is really simple;
Copy over the Windows 7 source files onto your USB Drive
Run BOOTSECT to give the USB drive a bootsector suitable for booting Windows 7.
Although I did all this from an XP computer, I see no reason why this process can't be driven from a Vista or Windows 7 computer. And many of you may notice the process I document today does not involve DISKPART. For disk partitioning and formatting this tool is a tad over-zealous and only serves to...
Altiris Client Management Suite, Altiris Deployment Solution, Basics, Altiris Notification Server, Endpoint Management and Virtualization, Installing, Windows, Tip/How to
8 comments
mcrookston
|
October 27th, 2009
I am trying to manually push the Altiris Agent for UNIX, Linux and Mac. Basically I click on Settings| Agent/Plug-ins|Altiris Agent|Settings|Altiris Agent install and select the Install Altiris Agent for Unix, Linux and Mac tab. Then I type in the name of the machine I want to push the agent too and click the add button. The machine does appear in the window below but I am unable to Click on the installation Settings button. Please note that on Install Altiris Agent For Unix... tab, both the Install the Altiris Agent and Installation settings buttons are grayed out, but the Installation report button is available. TOn the Install Altiris Agent tab all the buttons available.
I was wondering if anyone has seen this before?
Any input would be great.
Thanks in advance.
Matt
3 comments