Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.
Endpoint Management Community Blog
Showing posts tagged with Symantec Management Platform (Notification Server)
Showing posts in English
ianatkin | 21 Mar 2013 | 0 comments

Good news from Symantec CEO Steve Bennett has arrived in the form of a Customer and Partner letter.

The important bit for us is that Endpoint Management is explictly listed as being a critical part of the Symantec portolio moving forward. This is something which was not clear in the previous company strategy annoucement.

He closes by saying,

"Despite any rumors to the contrary, all of these technologies remain a critical part of our product development and overall portfolio. We believe that through greater alignment of these technologies, Symantec will improve our product integration to help you improve and simplify your end users’ IT experiences"

I'm blogging this out as I know there are many Altiris Administrators out there who will let out a huge sigh of relief on this one.

Kind Regards,
Ian./...

stebro | 06 Mar 2013 | 0 comments

In previous articles, we discussed why users want administrator rights and why they need them. Now let’s explore why they shouldn’t have them. In today’s increasingly dangerous threat landscape, every organization’s security strategy should include the goal to remove administrator rights. Here are the reasons.

  1. Zero-Day Threat Protection: Arellia research has proven that running with reduced privileges can mitigate a majority of software vulnerabilities in Microsoft, Adobe, and Mozilla products. Any vulnerability has the potential to be a zero-day: meaning it is exploited before the vendor or security vendors know about it and have a chance to stop exploits with patches or antivirus \ intrusion prevention signatures. Running software with reduced privileges protects commonly software when exploited by vulnerabilities that...
mmurphy7 | 22 Feb 2013 | 0 comments

In the last blog article we discussed the top 5 reasons why users want administrator privileges. In this article we will discuss the top 5 reasons why a user actually NEEDS administrator rights. Here are the top 5 reasons:

  1. System Utilities: many of the control panel applications require administrator rights including driver installation, disk defragmenter, and backing up the.
  2. System Settings: changing system settings such as the date\time or network configuration settings require administrator privileges.
  3. Software Installation: software that tries to install into the Program Files or Windows directory needs administrator rights to do so.
  4. Software Updates: application updaters require administrator rights in order to make changes to the applications in the Program Files directory. This includes updaters for Adobe, Java, and iTunes...
mmurphy7 | 22 Feb 2013 | 0 comments

Nobody likes to be restricted in their use of a computer, or think they are being limited because they don’t have administrator rights. Most users do not NEED administrator privileges, they just WANT them. So why do users want administrator privileges? Here are the top 5 reasons:

  1. Freedom: Users want administrator privileges so they can install or modify anything and everything on their computer. They may or may not view themselves as computer experts, but believe they know enough about computers to be able to make changes to their system without any negative repercussions. Unfortunately they are usually wrong, causing the IT department to spend countless hours fixing the issues.
  2. Control: Users also want more privileges on a computer because of the control associated with being able to call your own shots. Control leads to even more headaches for the IT department as they clean up the mess left by users who make changes without understanding implications...
Ludovic Ferre | 19 Feb 2013 | 0 comments

One of my customer reported a problem that caused one of their child nothing server to run at 100% CPU and consume almost all memory (out of 32GiB available).

I first looked at the timing (it was reported last Friday) and I thought this was possibly linked to the PMImport release as last week we had Patch Tuesday (so we released the PMImport Wednesday and replicated it to the child server Thursday evening.

But this was not it. First the memory ballooning problem happened on 3 different processes: the w3wp pools for the Altiris-NS-Agent and TaskManagement as well as the AeXSvc itself.

With all three processes running we would see large chunks of memory being released in a clean drop and go right back up in after nice curve. This was because the 3 processes were fighting for the scarce memory resources and causing each other to have to be scavenged every now and then.

Stopping on of the application pool pegged the memory to ~12 GiB for each of the other...

Ludovic Ferre | 18 Feb 2013 | 0 comments

Based on demand I have updated both the PatchAutomation [1] and ZeroDayPatch [2]downloads with a few additional features that allow the user to better control which bulletins are handle and how to invoke the tools.

Here are the new feature command line details:

/config=<file path>
    Reads the file at the provided path and parses each line for com-
    -mand line options. Here is a sample config file content:
      /severity=critical
      /custom-sp=CWoC_GetAllBulletins
      /vendor=google
      /dryrun
      /debug

/custom-sp=<sp_name>
    This option allows the user to specify a custom stored procedure to
    be called during the execution. The stored procedure may be present
    on the database (if not the automate will return with no errors) and
    must contains the following columns that are used and needed:
      * _resourceguid [Software bulletin guid]
      * released [Software bulletin release date]
      * bulletin [Bulletin...
ohzone - CherylPeterson | 15 Feb 2013 | 1 comment

The Endpoint Management team is gearing up to celebrate another successful event at Symantec Vision. Filled with new sessions and the same 1:1 access to Product Management and Development, it’s time to register and start customizing your Vision Experience.

This year, Vision is all about the extras—including new types of breakout sessions and hands-on labs, expanded networking opportunities, and even more flexibility to customize your Vision experience. You might even win the chance to choose your own Grand Prize. So register now, and then visit the Vision website to:

  • Explore the Vision Session Catalog. Then choose sessions that will help you embrace BYOD and support all the different devices across your organization or...
Sumit G | 15 Feb 2013 | 0 comments

Best Practices articles of Symantec Software Management 7.1

 

Symantec Software Management 7.1 Best Practices, Part 1
 
https://www-secure.symantec.com/connect/articles/symantec-software-management-71-best-practices-part-1
 

Symantec Software Management 7.1 Best Practices, Part 2
 
https://www-secure.symantec.com/connect/articles/symantec-software-management-71-best-practices-part-2
 

 
Symantec Software Management 7.1 Best Practices, Part 3
 
https://www-secure.symantec.com/connect/articles/symantec-software-...

Ludovic Ferre | 05 Feb 2013 | 0 comments

A new symantec.pl.xml file was released today and added to the ns7pl tree.

Here are the addition to the Solution tree and links to the revision:

Revision: 8737de84ed8c
Author:   Ludovic FERRE <ludovic@15-cloud.fr>
Date:     Mon Feb  4 15:51:07 2013
Log:      Symantec.pl.xml md5 = 8e278fd63cf1492e12a0237e184d9dcf

http://code.google.com/p/ns7pl/source/detail?r=8737de84ed8c

Added:
 /solutions/7_1/ita/ita_sd/altiris_itanalyticsdocumentation_x64.msi_info
 /solutions/7_5/ita/sd/altiris_itanalyticsservicedesk_7_5_x64.msi_info
 /solutions/7_5/ita/sd/altiris_itanalyticsservicedesklanguages_7_5_x64.msi_info
Modified:
 /symantec.pl.xml

...
Ludovic Ferre | 05 Feb 2013 | 0 comments

I have a customer that has some problems with one of three child servers, with some serious memory consumption there going from 2 GiB for TaskManagement, ~2.5GiB for AeXSvc and anything above that (sometimes 5GiB+) for the Altiris-NS-Agent.

This is causing some serious troubles obviously, as the CPU are all clogged up (95~100% on 24 real cores). So first we reduced the overall impact by limiting the number of CPU's the process is allowed to on (using advanced setting and processor affinity mask).

And then we took a few dumps to see how the memory gets up to 4GiB or more...

I'll detail the WinDbg commands (and how to load mscorewks via sos.dll) but here's the over view running DumpHeap -stat at various stages.

Note! Here are the field names used below in order, Memory address, object count, total size, object type. The listing is sorted by size ascending. So the interesting data is at the end.

...