Endpoint Management Community Blog

ianatkin | 20 Sep 2012 | 0 comments

It's just been brought to my attention that Brian Madden yesterday posted this very interesting blog,

http://www.brianmadden.com/blogs/brianmadden/archive/2012/09/19/here-s-how-symantec-can-dominate-the-quot-new-quot-desktop-fingers-crossed-they-don-t-screw-it-up-again.aspx

Interesting to see how others on the outside see the Symantec's plays in desktop management space.

Zero Day Vulnerability Protection with Privilege Management

stebro | 19 Sep 2012 | 0 comments

Have you used Internet Explorer to visit a malicious website recently? Have you used Internet Explorer to visit any website lately? How do you know for sure that you are not infected? Yesterday, a new zero-day vulnerability for Internet Explorer versions 6-9 was reported affecting everything from Windows XP to Windows 7 and Windows Servers. Zero-day vulnerabilities are a common fact of life, but the same old approaches to protection continue to be insufficient. Let’s discuss this vulnerability and how privilege management can mitigate the impact.

In the case of this zero-day vulnerability, a malicious website can be crafted then unsuspecting victims can visit it with Internet Explorer only to be exploited. Once exploited, security software can be disabled, files are downloaded or malicious software is installed so that system can be reused as a zombie or SPAM relay.

Traditional endpoint...

Symantec Endpoint Intergrated Install Fails

Darrell Elmore | 24 Aug 2012 | 0 comments

Problem

It seems that the Install Endpoint Protection task fails for some but not all computers.

Solution

Go to the installation package located under D:\Program Files\Altiris\Notification Server\NSCap\bin\Win32\x86\Symantec Endpoint Protection\Install Package or D:\Program Files\Altiris\Notification Server\NSCap\bin\Win64\x64\Symantec Endpoint Protection\Install Package
Open the InstallSEP_<Package Name>.vbs file
Make the following changes

Change: WshShell.Run <Package Name>.exe, HIDE_WINDOW, WAIT_ON_RETURN

To: sCurrPath = CreateObject("Scripting.FileSystemObject").GetAbsolutePathName(".")

WshShell.Run chr(34) + sCurrPath + "\<Package Name>.exe" + chr(34), HIDE_WINDOW,...

Automating Windows 7 Application Compatibility

mmurphy7 | 21 Aug 2012 | 0 comments

With support for Windows XP ending in less than 2 years, companies are beginning to feel the pressure to complete their migrations to Windows 7 or 8. This is proving to be a bigger headache than most companies planned on as they begin to find more and more of their applications won’t natively run in Windows 7 or 8.

This leaves many companies in a bind. They either have to devote several IT personnel to test many third-party and internal applications used in their company to figure out what is compatible or they have to rely on research done by others and figure out a game plan for their migration. If a company could devote more than a handful of people to figure out their application migration, they would complete it a lot sooner, but that’s a little unrealistic as most organizations have fixed resource constraints. There needs to be a method to automate application compatibility analysis.

With...

Application Adminstrator Rights Analysis

stebro | 21 Aug 2012 | 0 comments

One of the first challenges an organization faces when deciding to remove end-user administrator rights is determining what applications require such rights. Many times the approach is to remove administrator rights, see who complains and add those users back to the administrators group. Over time, large chunks of an organization still have administrator rights due to applications that are not compatible when run as a standard user. Let’s look at how this can be addressed.

There are four application types that typically require administrator rights:

System Utilities: Some of these utilities make sense to restrict from standard users including computer management, turning Windows features on or off, or allowing remote access. Others such as the Disk Defragmenter, changing the system time, or adding language packs may be appropriate
Installers: Most installers will not run by a standard user. There are some installer exceptions that will still...

Adobe Vulnerabilities and Privilege Exploitation for 1st Half 2012

mmurphy7 | 20 Aug 2012 | 0 comments

With 2012 almost at the midpoint, it is a good time to take a look at the state of security. Arellia research has analyzed Adobe Security Bulletins and how removal of administrator rights could mitigate their vulnerabilities. As mentioned in the Introduction on Privilege Exploitation, privilege exploitation is where the malicious software takes advantage of the rights of the logged in user to change the configuration of the local computer. Adobe is a common target and Arellia has found a high risk of operating with an administrator user when using many Adobe products.

Here is a summary of privilege exploitation for Adobe Products in 2012 to date:

...

Microsoft Privilege Exploitation for 1st Half of 2012

mmurphy7 | 20 Aug 2012 | 0 comments

With the first half of 2012 now over, here is Arellia’s analysis of Microsoft vulnerabilities and those with privilege exploitation:

...

Bulletins	42
Vulnerabilities	97
Bulletins with Privilege Exploitations	19
Vulnerabilities with Privilege Exploitations	46

Mobile Management Report Examples

mds1974 | 03 Jul 2012 | 1 comment

---------------------------------------------------------------------------------------------------------------------------------------------

***Update 27/06/2012

In the upcoming SMM 7.2 release there have been some changes to the underlying database schema. For this reason, if you import the 'Custom Mobile Reports' it is likely some will be missing data. I have therefore created a new set of reports for the SMM 7.2 version. This bundle has been provided in the attachments section and includes the following reports:

Applications Report - All Devices

Applications Report - Android

Applications Report - iOS

Device Management Status

Device Network Details

Last check in time

Manage Devices

Phone Inventory Details

...

May 23rd meeting CANCELLED

tbenson | 21 May 2012 | 0 comments

The May 23rd Twin Cities User Group meeting is cancelled for this week.

Sorry for the late notice!

We hope to have an event in June. Please check back for further info.

Linux and UNIX Management with Server Management Suite

MicaPete | 09 Oct 2012 | 0 comments

This newly published guide is for network administrators who want to use Server Management Suite (SMS) 7.1 SP2 to manage Linux and UNIX servers.

Follow this link to download the guide: http://www.symantec.com/docs/DOC5583

The guide presents UNIX/Linux-specific information about:

Provisioning
- Imaging
- Scripted OS installation
- OEM Hardware integration toolkits
- Server configuration
Configuration Management
- Symantec Management Agent for UNIX, Linux, and Mac
- Discovery and Inventory
- Patch Management for Linux
- Software Management
- Managed Software Delivery
- Virtualization Management
Server Health
- Monitor Solution and Monitor Packs
- Event Console
- Historical and Real-Time Monitoring
Process Automation - Built-in...

Endpoint Management Community Blog

Problem

Solution

Links

About Endpoint Management Community Blog

Filter by:

Blog Tags