need information related to gather histrorical data landesk 11.0.164
Move to 'Do not scan' or Delete from Baseline Group
Hello Team,
I'm new to Landesk and would like to get few clarification before I cleanup our Baseline. We have BaslineFolder which contains around 1400+ patches grouped. we are using this as our baseline and using for our weekly patching activity.
390 updates the status is "Required is 0". As a best practice, should we Delete the updates from Baseline or set to scope to' Do not scan'
I'm trying to minimize the vulscan time during our patch deployment.
Thanks for your time.
Regards,
Rafeeq
Using Windows Authentication for database connection
We are attempting a new install of IEM 2017.3, but can't get past the screen where we set the database connection (server, DB, credentials...). On that screen, when we test the connection if fails. We are using Windows authentication for the DB connection, rather than SQL. My DBA says the logs on the SQL server indicate that the installer is trying to connect with SQL creds, even though we specified a domain account on that screen in the installer. There is no place in the install process to select Windows authentication vs. SQL authentication.
Is there a way around this? It's hard to believe that it is unable to use Windows authentication.
Unable to connect to the remote server
I have checked Policysync.exe.log file contain "Unable to connect to the remote server" error on multiple client systems. Those systems are not able to download and install MS patches where we are facing this error. I have attached the screenshot of error.
Any resolution for this issue?
Thanks
Release date for Ivanti Endpoint Manager 2018.3?
I spoke with a rep a month ago, that claimed 2018.3 would be available in October. Can anyone confirm this, or is it available already and I overlooked it? I've been looking all over, and can't seem to find anything in writing to confirm this. This release is supposed to contain Apple P&C functionality that we desperately need.
Where is the 2018.1 SU1 download link?
I saw EPM2018.1-SU1 readme page https://community.ivanti.com/downloads/Readme/Pages/EPM2018.1-SU1.html but I can't find a link to download.
Is it available yet?
Capture UEFI W10 GPT very big size !
Hello,
We are trying to capture our first UEFI W10 GPT PC.
We use a "Capture template"
"Command-line parameters" below:
/ b / d: 0 / rb: 0 /f:\\landeskcore\ldlogon\MasterW10 \ temporary \ CAPTUREMASTERUEFIW101803DELL5590PILOTES.tbi
XML below:
<template id = "3b446d57-cba4-4266-a397-b658b0daf5c6" name = "MASTER CAPTURE - UEFI - W10 1803 - DELL5590 - DRIVERS" version = "4">
<description> MASTER CAPTURE - UEFI - W10 1803 - DELL5590 - DRIVERS </ description>
<Preboot-os> WindowsPE </ preboot-os>
<Final-os>
<Name> Windows </ name>
<Type-id> All </ type-id>
<Family-id> Windows </ family-id>
<Vendor-id> All </ vendor-id>
<Major worm> -1 </ Major worm>
<Minor-ver> -1 </ minor-ver>
<Architecture> All </ architecture>
</ Final-os>
<Variable>
<variable name = "_ ShowClientUI" transform = "none"> True </ variable>
<variable name = "_ CloseClientUI" transform = "none"> wait30 </ variable>
<variable name = "_ RemoveClientFolder" transform = "none"> True </ variable>
</ Variable>
<section id = "SystemMigration" name = "System migration">
<description> Back up personal or custom files before the system is modified. </ description>
</ Section>
<section id = "PreOsInstall" name = "Pre-OS installation">
<description> Configure the hardware and get the system ready for the OS. </ description>
<action name = "Ensure the OS partition is mounted as C:" version = "4">
<description />
<Action-type> Score </ action-type>
<variables />
<Options>
<option name = "StopProcessingTemplateIfActionFails"> false </ option>
</ Option>
<Parameters>
<Action> autoassign </ Action>
</ Parameters>
</ Action>
</ Section>
<section id = "OsInstall" name = "OS installation">
<description> Install the target operating system with the specified options. </ description>
<action name = "Capture image" version = "4">
<description />
<Action-type> Capture_image </ action-type>
<variables />
<Options>
<option name = "StopProcessingTemplateIfActionFails"> true </ option>
</ Option>
<Parameters>
<Application> c: \ ldprovision \ imagew.exe </ application>
<arguments> / b / d: 0 / rb: 0 / f: \\ landeskcore \ ldlogon \ MasterW10 \ temporary \ CAPTUREMASTERUEFIW101803DELL5590PILOTES.tbi </ arguments>
<Imagetype> LANDeskWinV2 </ imagetype>
<Imagepath> landeskcore \\ \ ldlogon \ MasterW10 \ temporary \ CAPTUREMASTERUEFIW101803DELL5590PILOTES.tbi </ imagepath>
<OSType> 1 </ OSType>
</ Parameters>
</ Action>
</ Section>
<section id = "PostOsInstall" name = "Post-OS installation">
<description> Add additional items after OS installation, before rebooting into the target OS. For example, you might add service pack updates. </ Description>
</ Section>
<section id = "SystemConfiguration" name = "System configuration">
<description> Automate system configuration that must happen after booting into the target OS such as installing drivers and applications and updating scan files. </ description>
</ Section>
</ Template>
The problem is that the "capture" takes more than 4 hours and generates a TBI image of more than 50GB.
On our other "capture" BIOS Legacy we had images of 10GB Maximum and in 1 hour maximum ..
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Bonjour,
Nous essayons de faire la capture de notre premier PC UEFI W10 GPT.
Nous utilisons une "Capture template"
"Command-line parameters" ci-dessous :
/b /d:0 /rb:0 /f:\\landeskcore\ldlogon\MasterW10\temporaire\CAPTUREMASTERUEFIW101803DELL5590PILOTES.tbi
XML ci-dessous :
<template id="3b446d57-cba4-4266-a397-b658b0daf5c6" name="CAPTURE MASTER - UEFI - W10 1803 - DELL5590 - PILOTES" version="4">
<description>CAPTURE MASTER - UEFI - W10 1803 - DELL5590 - PILOTES</description>
<preboot-os>WindowsPE</preboot-os>
<final-os>
<name>Windows</name>
<type-id>All</type-id>
<family-id>Windows</family-id>
<vendor-id>All</vendor-id>
<major-ver>-1</major-ver>
<minor-ver>-1</minor-ver>
<architecture>All</architecture>
</final-os>
<variables>
<variable name="_ShowClientUI" transform="none">True</variable>
<variable name="_CloseClientUI" transform="none">wait30</variable>
<variable name="_RemoveClientFolder" transform="none">True</variable>
</variables>
<section id="SystemMigration" name="System migration">
<description>Back up personal or custom files before the system is modified.</description>
</section>
<section id="PreOsInstall" name="Pre-OS installation">
<description>Configure the hardware and get the system ready for installing the target OS.</description>
<action name="Ensure the OS partition is mounted as C:" version="4">
<description />
<action-type>Partition</action-type>
<variables />
<options>
<option name="StopProcessingTemplateIfActionFails">false</option>
</options>
<parameters>
<action>autoassign</action>
</parameters>
</action>
</section>
<section id="OsInstall" name="OS installation">
<description>Install the target operating system with the specified options.</description>
<action name="Capture image" version="4">
<description />
<action-type>Capture_image</action-type>
<variables />
<options>
<option name="StopProcessingTemplateIfActionFails">true</option>
</options>
<parameters>
<application>c:\ldprovision\imagew.exe</application>
<arguments> /b /d:0 /rb:0 /f:\\landeskcore\ldlogon\MasterW10\temporaire\CAPTUREMASTERUEFIW101803DELL5590PILOTES.tbi</arguments>
<imagetype>LANDeskWinV2</imagetype>
<imagepath>\\landeskcore\ldlogon\MasterW10\temporaire\CAPTUREMASTERUEFIW101803DELL5590PILOTES.tbi</imagepath>
<OSType>1</OSType>
</parameters>
</action>
</section>
<section id="PostOsInstall" name="Post-OS installation">
<description>Add additional items after OS installation, before rebooting into the target OS. For example, you might add service pack updates.</description>
</section>
<section id="SystemConfiguration" name="System configuration">
<description>Automate system configuration that must happen after booting into the target OS such as installing drivers and applications and updating scan files.</description>
</section>
</template>
Le problème c'est que la "capture" prend plus de 4h et génère une image TBI de plus de 50Go.
Sur nos autres "captures" BIOS Legacy nous avions des images de 10Go Maximum et en 1 heure maximum..
Provisionning Scripts Windows package Batch File : Download KO
Hello,
I created in distribution package - Provisioning - Scripts - Windows package - Batch File.
But I have a download error during execution:
Log below:
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Bonjour,
J'ai créer dans distribution package - Provisionning - Sripts - Windows package - Batch File.
Mais j'ai une erreur de download lors de l'éxecution :
voiçi le log :
Wed, 17 Oct 2018 10:27:02 ******* sdclient starting to process task *******
Wed, 17 Oct 2018 10:27:02 Task id to process: 2760
Wed, 17 Oct 2018 10:27:02 Command line: /policyfile="C:\ProgramData\LANDesk\Policies\CP.2760.RunNow._BsFuGabgGnrGn5mH6as2tCl95QU=.xml"
Wed, 17 Oct 2018 10:27:02 The nostatus flag has NOT been set.
Wed, 17 Oct 2018 10:27:02 Core name 'LANDESKCORE' obtained from the registry
Wed, 17 Oct 2018 10:27:02 Sending task status, cmd line -coreandip=LANDESKCORE -taskid=2760 -retcode=229392442 -pkgid=845
Wed, 17 Oct 2018 10:27:03 IsFileInCache: Cache2.GetFilePrevCountEx failed - path=http://LANDESKCORE/installsi/MASTERW10/1-PREPARE/PrepareAvSysprep.bat
Wed, 17 Oct 2018 10:27:03 File (http://LANDESKCORE/installsi/MASTERW10/1-PREPARE/PrepareAvSysprep.bat) is not in cache
Wed, 17 Oct 2018 10:27:03 The nostatus flag has NOT been set.
Wed, 17 Oct 2018 10:27:03 Core name 'LANDESKCORE' obtained from the registry
Wed, 17 Oct 2018 10:27:03 Sending task status, cmd line -coreandip=LANDESKCORE -taskid=2760 -retcode=229392444 -pkgid=845
Wed, 17 Oct 2018 10:27:04 About to call DownloadFiles (1 files) with these settings:
Wed, 17 Oct 2018 10:27:04 m_allowedBandwidthWAN: 50
Wed, 17 Oct 2018 10:27:04 m_allowedBandwidthLAN: 75
Wed, 17 Oct 2018 10:27:04 m_discardPeriodSeconds: 604800
Wed, 17 Oct 2018 10:27:04 m_preserveDirectoryStructure: 1
Wed, 17 Oct 2018 10:27:04 m_bUseWanBWForPush: 0
Wed, 17 Oct 2018 10:27:04 m_bSynchronize: 0
Wed, 17 Oct 2018 10:27:04 Allowed download methods(m_downloadControl):
Wed, 17 Oct 2018 10:27:04 PeerOneSource
Wed, 17 Oct 2018 10:27:04 Peer
Wed, 17 Oct 2018 10:27:04 Source
Wed, 17 Oct 2018 10:27:04 m_preferredServerControl: AttemptPreferredServer
Wed, 17 Oct 2018 10:27:17 Updating system environment variable LDMS_PREFERRED_SERVER: landeskcore
Wed, 17 Oct 2018 10:27:17 The nostatus flag has NOT been set.
Wed, 17 Oct 2018 10:27:17 Core name 'LANDESKCORE' obtained from the registry
Wed, 17 Oct 2018 10:27:17 Sending task status, cmd line -coreandip=LANDESKCORE -taskid=2760 -retcode=229392444 "-message=92%" -pkgid=845
Wed, 17 Oct 2018 10:27:18 DoDownloadFromSourceSteps: DOWNLOAD_ERROR_GENERAL_FAILURE
Wed, 17 Oct 2018 10:27:18 Download Error: err=1, path=http://LANDESKCORE/installsi/MASTERW10/1-PREPARE/PrepareAvSysprep.bat
Wed, 17 Oct 2018 10:27:18 processing of package is complete, result -1918107543 (0x8dac0069 - code 105)
Some custom attributes in inventory not replicating/disappearing
I am creating custom attributes in the Inventory for EPM 2017.3, some have replicated to the other assets, others have disappeared entirely.
Here is a side by side of the Core (which I created the attributes on) and an example of correct replication:
Here is a side by side of the same machines, with the attributes NOT replicated:
I have performed multiple full syncs, my core reports back "lost contact" after about ~5 minutes
Any attributes I create in 'Software' disappear entirely.
I have ran DBRepair with the Inventory Service stopped, and recreated the attributes.
Interestingly enough, after running DBrepair, it is only showing some of the attribute trees:
Is my DB hosed? Any suggestions?
New Computers - CSVImport - MAC Address
Note: We don't want to manually create baremetal devices nor PXE and manually authenticate/select the template etc.
So I have thoroughly read over the CSV Import process here:
https://community.ivanti.com/docs/DOC-23532#jive_content_id_Step_1__Create_a_template_file
From my understanding it should work like this:
Create template > csv file > use CSVImport > move mini-scan files to "ldscan" directory > Endpoint scans them in into inventory
However, this article says the NIC-Address is mandatory and the examples show this as an IP which I will not have when unboxing PCs.
I should be able to get a list of MAC addresses from my Vendor though. So my question is - will I be able to use the MAC in place of the "NIC - Address" (IP) ? My goal is to pull a new PC out of the box > PXE boot > and walk away.
Default Column Set for Scheduled Tasks?
Hello!
I accidentally changed the column set scheduled tasks, so now I don't have the default view that includes key task information like task status and return code...
I can't seem to find the components to create the same column set and there doesn't seem to be a saved column set for the default scheduled task view.
Can someone list the components to recreate the default column set for scheduled tasks?
Thanks so much!
How is Device Type determined?
I have desktop PCs that show up with Type= Workstation, and others are Type= Machine. How does the system determine this, and why would similar computers show up differently?
Client findet Core nicht
Hallo in die Runde,
folgendes Problem tritt bei einem Teil unserer Clients auf:
Der Sicherheitsscan findet den Core Server nicht.
Darauf hin haben wir den Kaspersky Antivirus- und den Ivanti Client komplett entfernt und neu installiert.
Die Installation läuft ohne Probleme beim anschließenden Sicherheitsscan passiert wiederum nichts.
So sieht das dann aus.
Hat Jemand ne Idee was wir hier machen können?
Software Audit
Hope I am in the right place, I have been tasked with coming up with a Software Audit process where I can quickly determine if any of our machines have unapproved software installed. My first thought was iVanti should be able to help me complete this task. We have a lot of "In-House" applications so I am thinking that a Query in iVanti might just be the ticket but can't seem to get there. I was thinking of querying the Computer|Software|Add or Remove Programs|Programs and compare that to a list of "approved" software and return any machine that has something installed that wasn't on the list. The problem with this approach is first the Computer|Software|Add or Remove Programs|Programs in inventory includes every update and I don't need that information. Second I cannot seem to find a spot to have a built in list of approved software. Since we have a lot of "In-House" applications I don't think Software monitoring would help with my task.
Has anyone out there come up with a solution similar to what I am trying to accomplish?
Thanks
Will
Security and Compliance Analyst
Warning - Do not install 2017-3_SU5
If you do not wan't to blow up alle your agents, do not install the update!
Problem 1:
rainstall.exe uninstall CBA8 and is not able to reinstall it.
Mon, 22 Oct 2018 15:13:45 Unable to register "C:\Program Files (x86)\LANDesk\Shared Files\residentagent.exe", the service is currently marked for deletion the registration will be attempted again. ERRORSUMMARY_BEGIN Fatal error during installation. Commonclient.inf: (0x00000643) Rainstall.exe,9000 ERRORSUMMARY_END
Problem 2:
Detection is not working (if you are on Rev2 - not updated automatically to Rev3) :
HOW TO STOP THE DISTRIBUTION PATCH ON A MACHINE THAT IS DOWNLOADING UPDATES
HI THERE ,
Is there any way to stop downloading the updates from the console on a machine that already downloading the patches ???
Thank youu
Preferred server is not taken on 2017.3 during provisioning
We are runnig on 2017.3 and facing some problems with the provisioning of Windows 10 UEFI(PXE64BiT) we do have several Preferred servers in your locations.
The Problem is, hat they will not be taken e.g. I want to install a client in china but it do not take the preferred server in china, it takes the one in germany. I already checked the preferred server configuration and this one ok, installations with Windows 7(PXE32BIT) are working fine. Do you have any idea ?
Than you
EPM 2017.1 SU2 - Patch and Reboot Maintance Window
Hello All!
I got a question in regard of the maintenance window of the Reboot Settings and DaP Settings.
Is the Reboot Window Local Time or a general time Zone? I can´t information about this detail in the community or the manual.
I guess i missed it, because i can´t imangine that nobody asked this question before...
Thank you for you Help!
Best Regards
Carsten
v9 unmanaged device scan: System.OutofMemoryException
Shortly after starting an unmanaged device discovery in v9.0, I was greeted by the error below. I just built this system last week... Windows 2008 R2, 10GB RAM. Anyone seen this or have ideas on the resolution?
Help with list of scheduled tasks on workstation
Hi,
I'm in the process of cleaning up our current LD 8.8 installation and I've run into a problem with one of our old scheduled tasks. The original task was created to find PST files that existed on workstations. Unfortunately the original task has been deleted but it's still running weekly on our workstations. This was a simple vbs script that runs on the workstation and I believe that it was grabbed off of droppedpackets.org.
Problem is I need to delete the task - I've found this article: http://community.landesk.com/support/docs/DOC-6623
And I've followed the intial query steps, my confusion is with the number of tasks that I'm seeing on the workstation and I can't tell which one I need to delete. I know 555 and 777 are the defaults but considering I only have one other scheduled task which is updating the AV policy I'm at a loss.
Any assistance would be great.