Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Endpoint Management Community Blog
Showing posts tagged with Client Management Suite
Showing posts in English
Terry Cutler | 19 Sep 2008 | 1 comment

How much time and how many touchpoints are needed to remediate a client with security updates? Did you know Altiris Out-of-band management has a network filtering option which used the System Defense capabilities built into Intel vPro? Essentially - you can isolate a computer at the client's network interface. Even better, you can keep certain ports\communication open to ONLY the designated Altiris Notification Server - thus allowing delivery of critical software updates!!

What traditionally might involve network teams (to place a system onto a remediation network), client support teams (to deploy the software), and support operation teams (to handle the helpdesk calls) - could automated and resolved much quicker.

We'll be stepping through this at ManageFusion 08 in The Hague (Oct 7-9) and Orlando (Oct 14-16). The hands-on lab is "AP LO2 - Intel: Eliminate Network Attacks During Remote Software Deployment" - two sessions of the same lab scheduled!

If you...

Terry Cutler | 19 Sep 2008 | 0 comments

Are you looking for training on Intel vPro in an Altiris environment?

Take a look here -

BRING | 17 Sep 2008 | 0 comments

Why do I see the same installer listed 3 times when I created the Software Update Tasks for MS08-053? See the graphic below.

They are not actually the same. In creating the task, unfortunately Microsoft did not label the tasks differently for each operating system as they have with other bulletins. You can confirm this by selecting the installer under the "Update Name" column on the screen. It will show you a different guid for each one, and the description listed is unique.

nac | 15 Sep 2008 | 6 comments

Many times we have to customize the installation of vendor MSI, by selecting complete, typical or customize installation of the package. This will install particular features when selected. If we add another feature, it may not install, and we cannot see the files and registries added by the component present in this feature.

Using Custom Action:

Check for the custom action which is installing selected features and edit to add the feature.

Edit the custom Acton to add New Feature

kevinparedes | 12 Sep 2008 | 0 comments

If you ever have a problem trying to download a package using the IIS codebase, when it just fails partway through every time, you might want to check the package to make sure that there are no folders named "BIN" in the package.

Apparently starting in Windows Server 2003 IIS and ASP.NET blocks URLs with a folder named BIN in them. Some shrink wrapped apps, like WSFTP2007 for example, have a folder named BIN in them and so can't be downloaded from the NS to a client or from the NS to a package server using the IIS codebase.

To get around this you can add the below registry entry and restart IIS.


This does not seem to cause any problems for Altiris, but keep in mind that if you are running other ASP.NET apps on the same server you could...

robertser | 10 Sep 2008 | 6 comments

Need to get files other than the standard .exe files into your inventories. Perhaps the programs you need to inventory do not have .exe files such as ActiveX Controls.

These can easily be added in by using the Audit Plus Configuration Editor that is part of Inventory Solution. By default it is found in this folder on your Notification Server: Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86. Run AexAPedit.exe and click on the File Masks tab.

The instructions there show that you can only enter in file types such as *.DLL or *.OCX. You can also enter in full filenames. A good example is "flash*.ocx". This inventories the different Flash Player files that will let you know what versions of Flash Player you have installed.

We use this quite extensively and can then build Software Delivery jobs and other tasks...

Terry Cutler | 10 Sep 2008 | 0 comments

How are other organizations using and benefitting from Intel vPro?

If you're unsure how companies are using Intel vPro or need a little more reference and support to convince internal teams, take a look at the following.

A series of return-on-investment (ROI) and case studies are being posted at The latest one posted (Cleveland Clinic) is an Altiris environment with targeted savings in energy ($442k over 4 years) and man-hours (29k hours also over 4 years).

The other reports listed refer to non-Altiris environments, yet point to similar savings and benefits.

More ROI analysis and case studies are coming.

Do you have a story to tell?

Please comment here, send me a message, post a note on Intel vPro Expert Center... let us know!

robertser | 09 Sep 2008 | 1 comment

It is nice to be able to see who the primary user is in a report. Since the Primary User table is based on a given month you have to add that as a parameter to every report you want to see Primary User on.

With this SQL view you can easily join it to your custom reports and always have the Primary User for the current month without having to create parameters.

Copy the below code into a new view in your Altiris database. Name it something easy like vw_PC_to_PrimaryUser.

SELECT DISTINCT _ResourceGuid AS 'Guid', Month, [User], Domain
FROM     dbo.Inv_AeX_AC_Primary_User
WHERE   (Month = DATENAME(Month, GETDATE())) AND ([User] <> '')
SELECT DISTINCT _ResourceGuid AS 'Guid', Month, [User], Domain
FROM     dbo.Inv_AeX_AC_Primary_User AS Inv_AeX_AC_Primary_User_2
WHERE   (Month = DATENAME(Month, DATEADD(Month, -...
Screenbert | 05 Sep 2008 | 2 comments

I recently had someone ask the following after watching this Patch Management Video:

I have my environment ready to go I believe. But I'm wondering about the current Automatic Updates that they currently have. Does PM turn off the native MS auto updates that come down?

Altiris Patch Management does not turn off the Microsoft Automatic Updates. Both can run at the same time and whichever schedule is more agressive is the one that will patch first. If you want to turn this off, then you can use Group Policy to change this setting. You can also change the registry manually using a package through software delivery.

The key that will need modified is:


For the various...

MFINN | 04 Sep 2008 | 0 comments

One of the problems with the canned compliance reports is the lack of easily isolated Service Pack information, so I created a report that allows you to select Windows 2000, XP, or Vista and then filter out the most recent SP for that OS.

  1. Create a new report
  2. Give your report a meaningful name
  3. Enter SQL directly
  4. Copy and paste this SQL into the text box
  5. Click finish (testing won't work here, because we need to create a few parameters first)

*Continued below*

SELECT T0.[Name] AS 'Name', 
T0.[Domain] AS 'Domain', 
T0.[Last Logon User] AS 'Last Logon User', 
T1.[OS Name] AS 'OS Name', 
T1.[Service Pack] AS 'Service Pack' 

FROM [Inv_AeX_OS_Operating_System] T1 
RIGHT OUTER JOIN [Inv_AeX_AC_Identification] T0 
ON T1.[_ResourceGuid] = T0.[_ResourceGuid] 

WHERE T1.[OS Name] LIKE %...