12 December 2013

NSE queue fills up with orphaned power on jobs.

Fix orphaned RTCI tasks using the following SQL: insert into ItemToDelete select distinct i.Guid, GETDATE () from Item i join ItemClass ic on ic.Guid = i.Guid join Class c on c.Guid = ic.ClassGuid left join ItemReference ir on ir.ChildItemGuid = i.Guid and ir.Hint = 'taskschedulehint' where ic.ClassGuid = 'A03EFF6B-B41B-4BD5-8D48-3980B23AE8D7E' and Attributes & 1 = 1 and ir.ParentItemGuid is null group by i.Name, ir.Hint order by i.Name Ref : http://www.symantec.com/business/support/index?page=content&id=TECH212717

03 December 2013

Altiris 7.5 KNOWN ISSUE: Running aexagentutil.exe /clean on client machine uninstalls agent AND Windows system32 files

Ref :

http://www.symantec.com/business/support/index?page=content&id=TECH212946

 

Issue


The customer reported that during an upgrade from ITMS 7.1 to ITMS 7.5, when trying to uninstall the Symantec Managenent Agent he noted that most files under Windows\System32 directory were missing.

In this case the customer was using AexNSAgent.exe /uninstall or AexAgentUtil.exe /clean to uninstall the Symantec Management Agent.

Steps:
1. Install SMA and receive configuration
2. Open registry and browse to HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Altiris Agent\Event Logging\LogFile
3. Set Windows folder as SMA logs location folder
4. Uninstall SMA (AexNSAgent.exe /uninstall or AexAgentUtil.exe /clean

Actual result: Uninstall process would attempt to erase the complete file tree including windows system files. in my case more than 2000 files were erased from c:\windows tree

Expected result: Only log folder should be erased or/and Agent*.log files.

Environment


ITMS 7.5

Cause


Please note that this is NOT a regresssion in ITMS 7.5 - the problem was also applicable to earlier releases and happens only with custom changes for log file path location.

In this particular instance, the customer had the incorrect SMA agent log file path in the registry (check “FilePath”under HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Altiris Agent\Event Logging\LogFile). Removal process uses the entries "FileName" and "FilePath" from "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Altiris Agent\Event Logging\LogFile"

Another option when this could happen is when there is no logging folder specified in the registry, in this case uninstall will try removing files from the process's current folder, which can be anything in the general case.

Solution


Symantec has acknowledged that the above-mentioned issue is present in the current version of the product mentioned earlier on this article. Symantec is committed to product quality and satisfied customers.

Symantec currently plans to address this issue by including a fix in the next ITMS 7.5 Hotfix: Hotfix 2. Please be sure to refer back to this document periodically as any changes to the status of the issue will be reflected here. A link to the Release Notes will be added to this document when it becomes available. Please note that Symantec reserves the right to remove any fix from the targeted release if it does not pass quality assurance tests. Symantec’s plans are subject to change and any action taken by you based on the above information or your reliance upon the above information is made at your own risk.

Development changed the Agent behavior where it should not remove all the files from this folder, only agent*.log files, then it should remove the folder only if it’s empty. Currently agent tries removing the complete file tree.


02 December 2013

ITMS Admin iPad app 1.0

Ref : http://www.symantec.com/docs/DOC5614

 

Description

ITMS Admin app is a mobile extension of the Symantec Management Console. It lets you monitor client computers, check Patch, Inventory and Software data. It also lets you start the tasks on client computers, check status of policies and tasks, and more. The app supports Symantec IT Management Suite 7.5 or higher.
The ITMS Admin is a two-part solution that includes:
- An app that you download and install on your iPad.
- The server part, which is installed directly on your Notification Server.

Installation

If you have upgraded to or installed ITMS 7.5 after the 2nd of December 2013, you do not have to install anything manually, the server part of the app is included with your original installation. To start using ITMS Admin iPad app, on your iPad, go to AppStore and install the ITMS Admin iPad app.
However, if you have upgraded to or installed ITMS 7.5 before the 2nd of December 2013, in order to obtain the server part of the ITMS Admin iPad app, you need to upgrade the Enhanced Console Views component to version ECV 7.5 MP1. This upgrade lets the app connect to the Notification Server.
To install, do the following:
  1. In the Symantec Management (SIM), click Upgrade installed products.
  2. In the installation wizard, on the Upgrade Installed Products page, click Enhanced Console Views 7.5. MP1, and then click Next.
  3. On the End User License Agreement, read the agreement, and then, at the bottom of the page check I accept the terms in the license agreements, then click Next.
  4. On the Contact Information page, type the required information, and click Next.
  5. On the Install Readiness Check page, wait for the results of the check, make sure that all recommended components are up to date, and then click Next.
  6. On the Review Installation Details page, review the information, and then click Begin install.
  7. After the upgrade is completed, on the Installation Complete page, click Finish.
 After you install the server part of the app, on your iPad, go to AppStore and install the ITMS Admin iPad app.
 

Signing in

 
  • On the iPad, on the sign-in page of the app, type the user name and the password.
    You can use either a domain or a local user login name. To be able to sign into the ITMS Admin app you have to use an account that has Symantec Administrator security role privileges and permissions.
  • You can type a server name or an IP address of the Notification Server that you installed the server end of the app on. The names of the previously used servers are saved. Tap Server Name or IP address text box, to view a scrollable list of saved server names.
  • The app supports different protocols and custom ports. You can specify both manually, using the following format: protocol://server:PORT, where protocol can be either HTTPS or HTTP, and server address can be either a server name or an IP.
    By default, the app uses HTTPS protocol.  HTTP is used as an alternative, if the HTTPS connection failed. 
 

Navigation and Search

  • Org.View / Group list of computers is generated and refreshed as you scroll down. Computers are listed in alphabetic order. You can type letters or full names of computers in the Search text box to locate computers faster.
  • The Saved Searches folders must be previously created on the Notification Server. All of the Saved Searches folders that you create in the Symantec Management Console are visible from the app and can be used to find specific client computers.
    For more information on how to create Saved Searches folders, please see: http://www.symantec.com/connect/videos/creating-saved-searches-enhanced-console-views-video
    Before you start to use the list of computers in a Saved Searches folder you must wait for the list to generate fully.
  • To refresh current list swipe the left pane down. 
  • To sign out, at the bottom of the screen, slide the Org.View / Group to the right, and tap Log out
  • To go back directly to one of the previous steps of your current path, use the breadcrumb view at the bottom of the page.
  • To update the view, tap the Refresh icon in the top right corner.
  • To navigate between the pages swipe left or right. The dots in the top right corner of the information view, display how many pages the current tab contains.

Main features

For each individual computer (server or client) the following tabs are available.
Tab Available Features
Summary
  • Software page
    Lets you view information provided by the Patch Management solution. It also lets you monitor managed software delivery status via the Software Management solution.
  • Device Details page
    Lets you view OS, hardware, Location and Warranty information for the client computer.
Actions For any client computer under the Notification Server that you are currently viewing, it:
  • Lets you refresh the current configuration data.
  • Lets you request basic inventory.
  • Lets you run any preexisting Job or Task on a client computer.
  • Lets you connect to the client computer directly using Remote Desktop.
    The Remote Control feature automatically populates the host name and IP of the device that you are viewing.
    Note:This feature requires third-party remote control apps.
    Currently 3 applications are supported:
    - iTap
    - RealVNC
    - PocketCLoud
  • Lets you restart the computer.
  • Lets you shutdown the computer.
Jobs/Tasks Lets you view the history data of the Jobs or Tasks for the last 14 days.
Policies Let you view the list of targeted policies and their activation status.
Software Lets you see the following lists:
  • Software Updates and statuses (provided by Patch Management).
  • Installed Software Products (provided by Inventory solution).

Devices and operation systems that are currently supported by the ITMS Admin app


iPad1 iPad2 iPad3 iPad4 iPad Mini iPhone iPod Touch
iOS5 Yes Yes       No No
iOS6   Yes Yes Yes Yes No No
iOS7     Yes Yes Yes No No

Limitations

  • The current version of the ITMS Admin app only supports horizontal view.
  • When using this app within a hierarchy, you can either connect to a parent or to a child Notification Server. The app lists the client computers under the Notification Server that you are currently connected to (either a parent or a child NS).
  • Currently, ITMS Admin iPad app is only available in English. However, since the app is an extension of your Console, if you have computer names, tasks, policies and etc. in a language other than English, your custom names are displayed. You can also use languages other than English to search for computers in the Org.View / Group.
  • The app does not let you create new Saved Searches folders, tasks, policies, etc. since there is no text input option. All of the information available in the app is a mirror image of your original Symantec Management Console.

Bandwidth throttling and speed tests, how does it work?

An updated KB Article can be found here