Video Screencast Help
Endpoint Management Community Blog
Showing posts tagged with Server Management Suite
Showing posts in English
dfnkt_ | 24 Oct 2008 | 3 comments

Microsoft has released a bulletin to certain partners dated October 23, 2008 regarding a patch MS08-067 that patches a vulnerability in the server service that could allow remote code execution from an unauthenticated user. You can view more about it here:

Altiris has worked through the night and released the update and if your download has run for today, then you should see MS08-067 in Tasks> Software Management> Patch Management> Manage Software Updates.

If your has not updated then you should manually kick off this job by going to Configuration> Software Management> Patch Management> Server Settings> Microsoft Settings and right click on Microsoft Patch Management Import and select Start download...

Eshwar | 20 Oct 2008 | 7 comments

I have created the following report when I was asked to write an altiris report, to find a list of software installed on the given user’s PCs.

I was given a list of users as input to the report. Now I have to find out the list of software in each user’s PC. There are actually two reports in this.

  1. Finding primary user of the computer
  2. Display list of software on the computer

1. Finding primary user of the computer:

SELECT DISTINCT (PU.[User]), vComputer.[Name] AS 'Machine Name',
ACI.[Domain] AS 'Domain'      
FROM vComputer        
INNER JOIN [inv_aex_ac_primary_user] PU  
ON PU._ResourceGuid = vComputer.Guid        
JOIN [Inv_AeX_AC_Identification] ACI  
ON ACI.[_ResourceGuid] = vComputer.Guid   
WHERE PU.[Month] = datename(month, getdate())   
IN (...
dnorris | 07 Oct 2008 | 0 comments

When packaging an application requiring an exception within the XP firewall, you can automate the exception using netsh.

The XP firewall can be configured using the firewall command of the netsh utility. For full usage options, type the following:

netsh firewall ?

To add a program exception to the firewall, you will need to specify a descriptive name for the exception and the path to the executable. For this example, we'll use a description of SomeAppException and an executable path of C:\Program Files\SomeApp\App.exe.

The following script performs a check to ensure that XP is running, then calls the netsh command.

REM Allow exception in XP Firewall

REM Only perform this for XP
ver | find "XP" > nul
if %ERRORLEVEL% == 0 goto Is_XP
goto exit

:Run Windows XP...
BRING | 17 Sep 2008 | 0 comments

Why do I see the same installer listed 3 times when I created the Software Update Tasks for MS08-053? See the graphic below.

They are not actually the same. In creating the task, unfortunately Microsoft did not label the tasks differently for each operating system as they have with other bulletins. You can confirm this by selecting the installer under the "Update Name" column on the screen. It will show you a different guid for each one, and the description listed is unique.

nac | 15 Sep 2008 | 6 comments

Many times we have to customize the installation of vendor MSI, by selecting complete, typical or customize installation of the package. This will install particular features when selected. If we add another feature, it may not install, and we cannot see the files and registries added by the component present in this feature.

Using Custom Action:

Check for the custom action which is installing selected features and edit to add the feature.

Edit the custom Acton to add New Feature

kevinparedes | 12 Sep 2008 | 0 comments

If you ever have a problem trying to download a package using the IIS codebase, when it just fails partway through every time, you might want to check the package to make sure that there are no folders named "BIN" in the package.

Apparently starting in Windows Server 2003 IIS and ASP.NET blocks URLs with a folder named BIN in them. Some shrink wrapped apps, like WSFTP2007 for example, have a folder named BIN in them and so can't be downloaded from the NS to a client or from the NS to a package server using the IIS codebase.

To get around this you can add the below registry entry and restart IIS.


This does not seem to cause any problems for Altiris, but keep in mind that if you are running other ASP.NET apps on the same server you could...

robertser | 10 Sep 2008 | 6 comments

Need to get files other than the standard .exe files into your inventories. Perhaps the programs you need to inventory do not have .exe files such as ActiveX Controls.

These can easily be added in by using the Audit Plus Configuration Editor that is part of Inventory Solution. By default it is found in this folder on your Notification Server: Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86. Run AexAPedit.exe and click on the File Masks tab.

The instructions there show that you can only enter in file types such as *.DLL or *.OCX. You can also enter in full filenames. A good example is "flash*.ocx". This inventories the different Flash Player files that will let you know what versions of Flash Player you have installed.

We use this quite extensively and can then build Software Delivery jobs and other tasks...

robertser | 09 Sep 2008 | 1 comment

It is nice to be able to see who the primary user is in a report. Since the Primary User table is based on a given month you have to add that as a parameter to every report you want to see Primary User on.

With this SQL view you can easily join it to your custom reports and always have the Primary User for the current month without having to create parameters.

Copy the below code into a new view in your Altiris database. Name it something easy like vw_PC_to_PrimaryUser.

SELECT DISTINCT _ResourceGuid AS 'Guid', Month, [User], Domain
FROM     dbo.Inv_AeX_AC_Primary_User
WHERE   (Month = DATENAME(Month, GETDATE())) AND ([User] <> '')
SELECT DISTINCT _ResourceGuid AS 'Guid', Month, [User], Domain
FROM     dbo.Inv_AeX_AC_Primary_User AS Inv_AeX_AC_Primary_User_2
WHERE   (Month = DATENAME(Month, DATEADD(Month, -...
Screenbert | 05 Sep 2008 | 2 comments

I recently had someone ask the following after watching this Patch Management Video:

I have my environment ready to go I believe. But I'm wondering about the current Automatic Updates that they currently have. Does PM turn off the native MS auto updates that come down?

Altiris Patch Management does not turn off the Microsoft Automatic Updates. Both can run at the same time and whichever schedule is more agressive is the one that will patch first. If you want to turn this off, then you can use Group Policy to change this setting. You can also change the registry manually using a package through software delivery.

The key that will need modified is:


For the various...

MFINN | 04 Sep 2008 | 0 comments

One of the problems with the canned compliance reports is the lack of easily isolated Service Pack information, so I created a report that allows you to select Windows 2000, XP, or Vista and then filter out the most recent SP for that OS.

  1. Create a new report
  2. Give your report a meaningful name
  3. Enter SQL directly
  4. Copy and paste this SQL into the text box
  5. Click finish (testing won't work here, because we need to create a few parameters first)

*Continued below*

SELECT T0.[Name] AS 'Name', 
T0.[Domain] AS 'Domain', 
T0.[Last Logon User] AS 'Last Logon User', 
T1.[OS Name] AS 'OS Name', 
T1.[Service Pack] AS 'Service Pack' 

FROM [Inv_AeX_OS_Operating_System] T1 
RIGHT OUTER JOIN [Inv_AeX_AC_Identification] T0 
ON T1.[_ResourceGuid] = T0.[_ResourceGuid] 

WHERE T1.[OS Name] LIKE %...