25 October 2007

What is AltirisNSCabInstaller.exe?

Question
What is the purpose of the AltirisNSCabInstaller.exe file found in C:\Program Files\Altiris\Notification Server\nscap\bin\win32\x86\NS CAB Installer Package?

Answer
AltirisNSCabInstaller.exe is installed in C:\Program Files\Altiris\Notification Server\nscap\bin\win32\x86\NS CAB Installer Package. The .EXE contains all of the ActiveX controls required to run the console, and is designed to be distributed to locked down computers. Best practice would be to create a collection of Administrators computers or anyone who would access the console (especially helpdesk) and push the .EXE to them via SWD. You could also make this available via URL or Software Portal.

24 October 2007

Software delivery and Data Purging

For those who uses the status event on Software delivery for reporting purposes be aware that the default purging is set to 7 days. Meaning that is a deployment of software oversapns more than a week your reporting information will NOT be correct due to purging.

So, if you want to use the Software delivery status reports change the default data purging settings on the Software Delivery configuration tab to more the 7 days

23 October 2007

Retired computers don't automatically change back to active

Problem/Symptoms

Retired computers do not become active again after sending Inventory to the Notification Server. This causes problems for scenarios in which the server is automatically retiring computers that have not reported inventory in a specified time period (specified under Purging Maintenance) while some of the computers are still managed computers that have been offline for the specified time period.

Cause

The cause of the problem is that the Notification Server discards almost all event data from retired computers. It was not designed to reactivate retired computers when inventory is received but instead discards the inventory event. On a retired computer, when opening up the client UI, go to About > Altiris Agent Details, and click the Send Basic Inventory button. Notice that the Basic Inventory Last Sent time will never change. This is because the client never received any acknowledgement from the server that the inventory was received (because it was discarded).

Resolution

The only events sent by the Altiris Agent that are received by the server are the AeX Client LogOn events. These are sent to the server whenever a user logs on or off the computer.

To aid in identifying these computers download the report that will show retired computers that have sent event data for the specified data class (default to AeX Client LogOn) within the last n time units (for example, 30 days, 45 minutes, 6 hours, etc.). Select multiple computers from the report results, right-click on them and change their status back to Active.

This process can be automated by creating a Notification Policy. See article
16909. You can use the query shown below. It reports any retired computer that has sent a client logon event in the past 24 hours.


select distinct _resourceguid from evt_aex_client_logon ac  

join resourceassociation ra on ac._resourceguid = ra.parentresourceguid

where ra.resourceassociationtypeguid like '%3028166f%'

and ra.childresourceguid like '%492c463b%'

and datediff(hh, ac._eventtime, getdate())< 24

NS Agent - nominated Package Server maximum download retry time

Question

How long will the Altiris Agent continue to try to download from a nominated Package Server before bypassing the site maintenance settings (Package Server) and download directly from the Notification Server?

Answer

This is really a question about Notification Server site maintenance behavior rather than Agent behavior. See KB2397 for more information on site maintenance. The Altiris Agent always downloads from the codebases that are given out by the Notification Server.

New in Notification Server 6.0 SP2 is that the NS no longer hands out its own codebases to agents that are members of a site; this change was due to a very common customer request. To compensate for this change in behavior a new CoreSettings.config item was created and is disabled by default (meaning agents will strictly adhere to the site maintenance configuration):

MaxAgentDownloadTryingTimeMins

The agent now will send a running time value to the server when it makes its calls to GetPackageInfo.aspx on the Notification Server. When this time value exceeds the MaxAgentDownloadTryingTimeMins value the NS will hand out its own codebases in place of the codebases of any Package Server within the given site. Please note that this is a global setting, and cannot be configured for indiviual sites.

The preferred method to implement MaxAgentDownloadTryingTimeMins on the Notification Server is to use the NSConfigurator. The NS 6.0 SP3 release notes, section 3.1.25, provides information on how to install and use the NSConfigurator (KB19106).

Manually installing the Altiris Diagnostics Pack

Question

Where can I manually download the latest public version of the Altiris Diagnostics pack?


Answer

As of 1 November 2006, the most recent public version of the Altiris Diagnostics Pack was 6.1.7631.

The diagnostic pack includes the following:

  • Altiris Log Viewer
    • This utility can be used remotely from the NS to review NS log files, but won't be able to resolve GUIDs to object names.
  • Altiris Profiler
  • NS Diagnostic tool (NSDiag.exe)
  • Import Export Utility
  • The set application identity utility (setid.exe)
  • NScript runner
  • NS Configurator installation file (NSConfigurator.msi)

Some customers may have firewalls that block access to the self-update functionality. It may also be beneficial to install the diagnostics pack on administrators computers and as part of an upgrade readiness health check on pre–Notification Server 6.0 SP3 servers (diagnostics pack was included with SP3).

If you are going to install the diagnostic tools, make sure the Microsoft .Net 1.1 is installed on the computer or some of the diagnostics tools, specifically the Logviewer (logviewer.exe) will not work. When the diagnostic tools are installed they are located (by default) at C:\Program Files\Altiris\Diagnostics. You may want to create a shortcut to the logviewere.exe and place it on your desktop for easy access.

22 October 2007

Folder with GUID does not exist

Problem/Symptoms
An error similar to the following continues to be logged into the Altiris Notification Server a.log:
Process: aexsvc.exe (1756)
Thread ID: 652
Module: AltirisNativeHelper.dll
Source: Altiris.NS.ItemManagement.Item.MoveToFolder
Description: Folder with guid 5e2a1ce8-0af7-40f8-9b81-1539c61f829e does not exist.


Cause
These messages often occur when the user has done the following:
1. Enabled a Software Delivery Task for a collection.
2. The computers in the collection execute the Software Delivery Task.
3. The administrator deletes the Software Delivery Task.
What the administrator forgot to do was to Disable the Software Delivery Task and then allow all of the computers in the environment to update their polices so that each agent knows not to request this specific package.

Resolution
The long term solution to this problem is to ensure the following steps are followed prior to removing Software Delivery tasks:
1. Enabled a Software Delivery Task for a collection.
2. The computers in the collection execute the Software Delivery Task.
3. When the administartor decides the Task Should no longer be available, Disable the Task.
4. Wait at least 1 week to ensure most (if not all) of the machines in the environment have received updated configuration settings to stop requesting this package.
5. Delete the Software Delivery Task.
The short-term solution is to run the following SQL query by doing the following:
1. Each instance of the error message logged in the a.log will contain a unique GUID. Make a note of this GUID so you can use it later in this process.
2. Open Microsoft SQL Query Analzyer.
3. Create a New Query using the following SQL:

use Altiris
-- Temporary table to hold Table and Column names that are related to GUID
create table #TablesWithGuid
(
Tablename varchar(255),
ColName varchar(255),
Rows int
)

-- Declare the variables
declare @TableName varchar(255),
@ColName varchar(255),
@GUID varchar(40),
@xtype int,
@strSql nvarchar(4000),
@SqlResult int

-- GUID that is being searched for.
set @GUID = rtrim(ltrim('XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX' ))

-- Drop outside characters if longer than 36. (Eg. { and } characters)
if len(@GUID) = 38 and charindex('{',@GUID,1) = 1 and charindex('}',@GUID,1) = 38
begin
set @GUID = substring(@GUID, 2, 36)
end
else if len(@GUID) <> 36
begin
select 'Invalid Guid Specified' as [Error]
return
end

-- Tables with a 'Guid'in the column name or having a Uniqueidentifier column. Full column name as well.
declare GuidTableCol cursor for
select distinct
cast(so.name as varchar(255)) as 'Table Name',
cast(co.name as varchar(255)) as 'Guid Column',
co.xtype
from sysobjects so
inner join (
select name, id, xtype
from syscolumns
where name like '%Guid%'
or xtype = 36
) co on co.id = so.id
where so.xtype = 'U' --Only User Tables

open GuidTableCol
fetch next from GuidTableCol into @TableName, @ColName, @xtype

while @@FETCH_STATUS = 0
begin
--Find which tables and columns have a matching Guid to the one we are searching for.
set @SqlResult = 0

--Set guid string to have brackets if the column is a varchar
if @xtype = 167
begin
set @GUID = '{' + @GUID + '}'
end

-- Build the SQL Query string
set @strSql = '
select @Result = count(CAST([' + @ColName + '] as varchar(40)))
from [' + @TableName + ']
where cast([' + @ColName + '] as varchar(40)) = ''' + @GUID + ''''

-- Execute the SQL Query string
execute sp_executesql @strSql, N'@Result int out', @SqlResult out

--If the result count is > 0 then add table, column, and count to #TablesWithGuid
if @SqlResult > 0
begin
insert into #TablesWithGuid values (@TableName, @ColName, @SqlResult)
end

--Reset guid string
if @xtype = 167
begin
set @GUID = substring(@GUID, 2, 36)
end
fetch next from GuidTableCol into @TableName, @ColName, @xtype
end

-- Close cursor and deallocate
close GuidTableCol
deallocate GuidTableCol

-- Display results
--select * from #TablesWithGuid

-- Delete script
select ' declare @GUID uniqueidentifier'
union
select ' set @GUID = ' + Char(39) + cast(@GUID as nvarchar(36)) + Char(39)
union
select ''
union
select 'delete from ' + [Tablename] + ' where ' + [ColName] + ' like ' + '@GUID'
FROM #TablesWithGuid

-- Drop temp table
drop table #TablesWithGuid
4. Replace the Red Xs in the query above with the GUID from the error message.
5. Run the query in SQL Query Analyzer by pressing F5.
6. If necessary, repeat this procedure for each instance of the error in the log files, remembering to substitute the GUID each time.

17 October 2007

MaxConcurrentConfigRequests value changed after Notification Server 6.0 SP3 upgrade

After upgrading to Notification Server 6.0 SP3, the MaxConcurrentConfigRequests settings were reduced from 50 to 10 in the CoreSettings.Config file.

This is by design. The default value of MaxConcurrentConfigRequests was lowered from 50 to 10 in Notification Server 6.0 SP3, and that modification is made during the SP3 upgrade.

________________________________

Resolution


After significant evaluation of this setting both internally at Altiris and at customer sites, it was concluded that the default setting of 50 for the MaxConcurrentConfigRequests value was too high for normal operations of Notification Server and could actually be detrimental to performance in particular circumstances.

Notification Server 6.0 SP3 also added MaxConcurrentPackageInfoRequests as a separate value for limiting GetPackageInfo requests, also with a default value of 10. Prior to SP3, GetClientPolicy requests and GetPackageInfo requests were both limited under the same MaxConcurrentConfigRequests setting which could cause contention for connections between these two separate operations when the MaxConcurrentConfigRequests value was lowered.

These default values for MaxConcurrentConfigRequests and MaxConcurrentPackageInfoRequest should only be increased when specific monitoring shows doing so will provide improved performance. Setting these values too high can be detrimental to performance and lead to database deadlocks and database connection failures.

14 October 2007

Altiris Helpdesk Solution 6.0 SP5

Answer

What's New in this Release

Improvements for this release include the following new features:

Service Catalog

Using Helpdesk tasks, you can build a Service Catalog for your organization. Service Catalog tasks appear in a Service Catalog list on the End User Console, the Worker Console, and the Helpdesk Console.

Support for Microsoft Office 2007

Helpdesk supports Microsoft Office 2007. The Customer Satisfaction Survey is functional with Outlook 2007.

Support for Microsoft Internet Explorer 7.0

Helpdesk is fully functional when accessed with Microsoft Internet Explorer 7.0. Issues with dialog boxes, flyout menus, printing, and view magnification have been resolved.

Support for IMAP4 E-mail Interface

Helpdesk supports the IMAP4 e-mail interface.











20 September 2007

HP Rapid Deployment Pack version 3.70

Changes in this version
Deployment support for new ProLiant hardware platforms - ProLiant BL680c G5, ProLiant DL580 G5
Windows deployment support for HP Integrity BL860c with QLogic HBA for SAN deployments
Deployment support for Red Hat Enterprise Linux 5 for Intel Itanium (IA64)
Deployment support for new operating system updates such as SUSE Linux Enterprise Server 10 Service Pack 1 for (x86, AMD and Intel EMT64T (x86-64), and Intel Itanium (IA64)) platforms.
Includes Altiris Deployment Solution 6.8 Service Pack 2

19 September 2007

What are the SWDAgent and Task Synch Agent for?

You do not need any of the agents that come with SWD Solution in order to deploy SWD Packages, as this is taken care of by the NSAgent's SWD DLL file.

The SWDAgent is used by the Portal. The Task Synch Agent is used for Sequential SWD Tasks.

SWD Solution also comes with an Application Inventory Agent, but I would not bother using it as you already have Inventory Solution deployed and this agent is more than likely going to b e phased out with the advent of SWD 7.

07 September 2007

Notification Server 6.0 SP3 R6

Installation and ConfigurationRollup 6 (R6) for Notification Server 6.0 is a rollup of fixes to the core product since the release of Service Pack 3. It includes R1 (KB22690), R2 (KB23784), R3 (KB25133), R4 (KB27859), and R5 (KB31946).

This update contains some minor changes

For more info please read the Release Notes here

05 September 2007

What is disabled when turning off verbose events for Software Delivery Tasks and Packages?

Question

What is disabled when unchecking the checkboxes for verbose logging on tasks and events? The events are found under the Advanced tab of the Package or Task respectively, as shown:
[_] Enable verbose reporting of task status events
[_] Enable verbose reporting of package status events

Answer

Package Status Events - When disabling the verbose events under a Package, it disables all Package delivery events (package downloaded, etc) for that package. In other words no events are sent to the Evt_AeX_SWD_Package data-class table.
Task Status Events - When disabling the verbose events under a Task, it disables all Status events for that task. In other words no events are sent to the Evt_AeX_SWD_Status data-class table.

NOTE: An Execution event will still be sent on the execution status of that task. One NSE will be sent to the NS that will insert a row into the Evt_AeX_SWD_Execution table.

Patch Management licenses exceeded

What queries can I use to determine how many licenses are in use by managed and unmanaged computers in Patch Management?

Answer
This will give a grid listing of different resource states and their count of Patch Licenses:

SELECT (CASE IsManaged WHEN 1 THEN 'Managed' ELSE 'Unmanaged' END) as State, Status, count(*) FROM LicenseInUse liu
LEFT OUTER JOIN vFixedAssetResourceStatus ars ON liu.ResourceGuid = ars.Guid
WHERE ProductGuid = 'B1338338-5575-4A27-9808-23BEC40D79FA'
GROUP BY Status, IsManaged

This will give a count of all Patch licenses consumed by unmanaged resources:

SELECT count(*) as 'Number of stale licenses' FROM LicenseInUse liu
LEFT OUTER JOIN vComputerResource cr on liu.ResourceGuid = cr.Guid
AND IsManaged = 1
WHERE ProductGuid = 'B1338338-5575-4A27-9808-23BEC40D79FA'
AND cr.Guid IS NULL

Find licenses most recently issued:

select i.Name, i2.Name, ir.Guid, ir.IsManaged, ir.Deleted, liu.ModifiedDate, liu.CreatedDate from LicenseInUse liu
left join ItemResource ir on liu.ResourceGuid = ir.Guid
join Item i on ir.Guid = i.Guid
join Item i2 on ir.ResourceTypeGuid = i2.Guid where liu.ProductGuid = 'B1338338-5575-4A27-9808-23BEC40D79FA'
order by liu.ModifiedDate desc

Find Deleted Resources still holding a license:

select count(*) 'Deleted resources with a license'
from LicenseInUse liu
join ItemResource ir on liu.ResourceGuid = ir.Guid where liu.ProductGuid = 'B1338338-5575-4A27-9808-23BEC40D79FA'
and ir.Deleted = 1

Unmanaged (Retired) Resources still holding a license:

select count(*) 'Unmanaged resources with a license'
from LicenseInUse liu
join ItemResource ir on liu.ResourceGuid = ir.Guid where liu.ProductGuid = 'B1338338-5575-4A27-9808-23BEC40D79FA'
and ir.IsManaged = 0

03 September 2007

Error "AeXCustInv encountered a problem and needed to close" on Windows 2003 Servers

The following pop-up application error is being sporadically displayed on Windows* 2003 Servers:
AeXCustInv encountered a problem and needed to close.

Resolution
Currently, there is no resolution to the root cause.
Option 1: Completely disable custom inventory in your environment
One workaround is to configure the Inventory Solution tasks so that AeXCustInv.exe will not execute. The only data class that is populated by this custom inventory is AeX OS Quick Fix Engineering. The only reports using the AeX OS Quick Fix Engineering data class are legacy reports.
AeXCustInv.exe can be disabled by editing three files in the \Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86\Inventory Solution folder.
AeXInvSolnAdm1.ini
AeXInvSolnAdm2.ini
AeXInvSolnUsr1.ini
In each of these three files, comment out the AeXCustInv.exe line by adding "#" to the beginning of the line. =Example:
#aexcustinv.exe /in .\AeXCustInvStd.cit /out AeXCustInvStd.nsi
If a custom ini file has been created that calls AeXCustInv.exe, ensure that these lines are also commented out.
Option 2: Assist with identifying the cause of this error
Update:We have tentative confirmation that build 6.1.1075.42 resolves this issue. If you have tried or would like to try this build, please inform Symantec Technical Support of the outcome. Your assistance and feedback is much appreciated.
If you are experiencing this error and wish to assist by collecting data, follow the instructions in the "Custom Inventory Runtime Error Logging Instructions.doc" file located at
ftp://ftp2.altiris.com/files/dougj/custinv_log_build_6.1.1075.42/
Option 3: Continue running Inventory Solution for Windows as configured and ignore the errors
At this time, we are not aware of any adverse effects of this error on any systems. It appears to be just an annoyance. If you notice any adverse effects, notify Altiris Support Services. We would appreciate being apprised of any adverse effects.

Desktop Virtualization: No Easy Answer

By Charles Babcock InformationWeek September 1, 2007 12:00 AM (From the September 3, 2007 issue)

Smartronix, an IT consultant to the government, has implemented virtualization in its data center, using VMware's ESX
Server to achieve a 5-1 reduction in its server population. When it wanted to virtualize its desktops, though, it turned to a 2-year-old venture-capital-funded startup named Kidaro.
Smartronix CTO Robert Groat says his firm does a lot of work with the U.S. Marine Corps, and security was a top priority in virtualizing 50 remote users. "I didn't want to open up our corporate systems to home PCs," he says. "I wanted to reduce the surface area of our exposure."
The way he did it was to implement Kidaro Managed Workspace, which sits on top of the virtual machines generated by VMware's ESX server and applies a set of IT-defined policies and resources to them. The visual displays of the VMs are piped over the network to the users; the data and applications remain on the central server.
Kidaro also offers Smartronix the option of putting a user's workspace on a USB device in the form of Kidaro-To-Go. A mobile memory device might seem the epitome of a loose cannon when it comes to security, but the virtual machine included on it is encrypted and password protected and incorporates a locked-in VPN for accessing the corporate server. That means no user-access information floating around on a mobile worker's laptop. Managed Workspace runs in VMware's Player 2.0 on the user machine.
BRAWNY BIG BROTHERS
Groat's experience is likely to become more common as IT administrators recover from their dizzying gains in server consolidation and lowered power consumption and start applying
virtualization to clients. When they do so, they'll come upon mostly unknown startups--the likes of Pano Logic, Thinstall, XDS--that are joining their brawny big brothers, VMware and Citrix Systems(CTXS), in bringing virtual machines to the desktop.
Problem is, there's no one good way to do it.
Kidaro offers end-user management and security advantages but doesn't guarantee overnight scalability to 10,000 users, the way Citrix's user application virtualization product, Presentation Server, does.
Pano Logic invites its customers to leave PC hardware behind altogether and adopt its 3.5-inch square chrome box. The Pano offers the advantage of relaying the user interface from a central server to a desktop display with minimal hardware expense, but you won't necessarily find a shiny Pano box in every hotel room.
XDS offers the hardest-to-explain option, which consists of authenticating end users on a remote server at an XDS data center, then equipping their desktops with virtual machines from a server inside the user's data center. The approach offers advantages in security and provisioning large numbers of users. But the company's explanation has left many scratching their heads on how to adopt it.
A larger potential player is Symantec, which acquired Altiris and its Software Virtualization Solution desktop virtualization system in April. Altiris brings strengths in identifying incompatibilities between applications and Windows Vista or other operating systems. It can package an application into a virtual machine with its dependent dynamic link libraries so that it runs on Vista without revision.
And don't forget Microsoft(
MSFT), the 800-pound gorilla that's yet to make a peep. With its acquisition of Softricity last year, Microsoft gained the ability to virtualize applications; it already had the capability to virtualize the operating system with its Virtual Server. It's unlikely to remain silent for long once it sees newcomers stealing users out of its desktop domain. But for now, it has its hands full getting its server-side Viridian virtualization technology ready for Windows Longhorn Server after Longhorn's launch next year.

31 August 2007

NEW !!!! AltirisT IT Analytics 6.0

Altiris IT Analytics Solution software complements and expands upon the traditional reporting offered in most Altiris solutions. It brings exciting new features and capabilities to the Altiris platform by incorporating multi-dimensional analysis and robust graphical reporting and distribution features. This allows users to explore data on their own, without advanced knowledge of databases or third-party reporting tools, empowering them to ask and answer their own questions quickly, easily, and effectively.

The release Notes can be found
here

27 August 2007

Software Virtualization Solution 2.1 Hotfix 36647 Download

If you are experiencing any of the below problems, upgrade to Software Virtualization Solution 2.1 Hotfix 36647 (or above):

Inserting a new USB device causes system crash
When a layer is active and Print Spooler is restarted printers are removed
Installing Software Virtualization Solution on Vista causes IIS to become inoperable
Software Virtualization Solution exposes a registry bug in Windows, causing a blue screen crash
Memory leaks

More can be found found here

23 August 2007

16 August 2007

Altiris Deployment Solution 6.8 SP2 Release Notes

Upgrade Installations
Upgrading from Deployment Solution 6.8 SP1
Upgrading from Deployment Solution 6.8 (Disable AutoUpgrade due to KB 33129)
Upgrading from Deployment Solution 6.5 SP1
Upgrading from Deployment Solution 6.5
Upgrading from Deployment Solution 6.1

Silent Installation
Deployment Solution allows you to walk through the Deployment Solution installation wizard to create an answer file (install.ini) which automatically sets options when running a silent install. For details on this process see:
Can Deployment Server be installed silently?

What's New in this Release
Improvements for this release include the following new features:

Support for Symantec® Ghost® Imaging
Important: Deployment Solution does not include the Ghost executable or a license to use Symantec Ghost. You must provide a copy of the ghost.exe and/or ghost32.exe imaging executable to enable this support.
Customers currently using the Ghost imaging solution have the option of copying the Ghost executable to the Deployment Server to enable Ghost imaging from the Create Disk Image and Distribute Disk Image tasks.
To add support for Symantec Ghost, on the Deployment Share, create a folder called ghost. Copy ghost.exe (for DOS support) and/or ghost32.exe (for WinPE support) to this folder.
Symantec Ghost is now available for selection in the Create Disk Image and Distribute Disk Image tasks. A configuration file called ImageTools.ini, located in the root of your Deployment Share, contains settings you can change to customize the behavior of Ghost. For example, the default command-line in DOS is:
CreateImageCommandLine=-clone,MODE=create,SRC=1,DST=%IMAGE_FILENAME% -sure
This setting and others can be customized by modifying ImageTools.ini.

Deployment Agent UI on Vista
When installing the Deployment Agent on Vista computers, you now have the option of installing a client-side agent configuration utility. This interface is similar to the configuration interface for the Deployment Agent on other Windows operating systems. To install, select the Control panel applet & UI component option during the DAgent installation.

The configuration utility is launched by selecting Start; Altiris; Deployment Solution; DAgent Configuration.

Wait in Automation Task
To avoid circumstances when a computer might boot into an unmanaged state, a new task, called wait, is provided to cause a computer to remain in automation and wait for instructions.

Thin Client View Enhancements

The Thin Client view has been enhanced with a new get inventory task and a software packages pane.

Remote Desktop Connection for Windows
A new Remote Desktop option has been added to the contextual menu when you right-click a Windows XP* or Vista* computer in the console. This option launches the Windows Remote Desktop utility to enable you to remote control a computer.
Windows XP computers still have the option of using the integrated Remote Control feature of the Deployment Console.

08 August 2007

Client Agent Version Report Discrepancy

Problem:
Client Agent Version Report displays different client counts on the Level 0 and Level 1 sections of the report
Cause:
Level 0 SQL query uses vItem view and Level 1 SQL query uses vComputer view. vComputer filters out retired assets.
Resolution:
Change the Level 0 SQL query to query the vComputer view. Replace all instances of vItem in the level 0 query with vComputer.

07 August 2007

Categories and Queues Spreadsheet

On the juice site ther is this noce article that will make your live easier when creating categories and queus in Altiris Helpdesk

27 July 2007

Asset Management 6.5 Released

Due to the major changes in ASM 6.5 we advice no to update yet.
So don't click those Update Buttons....

Release Notes can be found here
CMDB 6.5
ASM 6.5
Connector Solution 6.5

Console 6.5

If you realy want to find out about the changes, please setup a Test Environment

20 July 2007

SVS 2.1 Hotfix 35879 Download

Problem/Symptoms


This hotfix addresses some driver crashes found in SVS 2.1.2069 and an integration issue with the third party product Scence.


Environment


This upgrade is Software Virtualization Solution 2.1.2081


Cause


This hotfix addresses some driver crashes found in SVS 2.1.2069 and an integration issue with the third party product Scence.


Resolution


To upgrade to SVS 2.1 Hotfix 35879 (2.1.2081), download the attached file on the right side of the screen. Extract the zip file contents. Use the .exe for installing or upgrading a stand-alone installation. The msi file is provided for use with the Notification Server solution or any other process requiring this file.

KB Article

04 July 2007

Changing the status of non-active computer resources to Active when Inventory Solution data is received

Retired computer resources will have their status automatically changed to Active by the Notification Server if Inventory Solution data is received. Computer resources with statuses other than Active or Retired do not. This functionality is desired.


Cause
The automatic changing of the status to Active is dependent on the current status of the computer resource.


Investigation using Notification Server 6.0 SP3 R5 and Inventory Solution 6.1 SP2 (6.1.1075) returned the following results:




In summary, statuses of Disposed, Retired, and Returned to Lessor will revert to Active once Inventory Solution data is received. This Inventory Solution data will only be sent if the configuration policy received by the client computer while in the Active status contained the Inventory Solution tasks. That is, while a new configuration policy will not be sent if the status is anything other than Active, the client will continue to use the old policy that is currently in place.
Statuses of In Stock, Missing, On Order, RMA, and any custom statuses are static. They must be manually changed or changed via the method outlined in the resolution below.


Resolution
Create a notification policy that will set the status to Active on any computer resource whose status is other than Active, Retired, Disposed, or Returned to Lessor and has recently sent Inventory Solution data to the Notification Server.
The following query can be used in the notification policy to select computers who have sent Inventory Solution data within the last 7 days:
SELECT vfars.Guid, i.Name, vfars.Status, acir.[Collection Time]FROM vFixedAssetResourceStatus vfars JOIN Item i ON vfars.Guid = i.Guid LEFT JOIN Inv_Aex_AC_Inventory_Results acir ON vfars.Guid = acir._ResourceGuidWHERE vfars.ResourceTypeGuid IN (SELECT ResourceTypeGuid FROM vResourceHierarchy WHERE BaseResourceTypeGuid = '493435F7-3B17-4C4C-B07F-C23E7AB7781F') AND vfars.Status NOT in ('Active', 'Retired', 'Disposed', 'Returned to Lessor') AND DATEDIFF(DAY,acir.[Collection Time], GETDATE())

Vlite in RC

Vlite has gone in RC : www.vlite.net <http://www.vlite.net>
For those who do not know vLite... vLite is a tool for customizing the Windows Vista installation before actually installing it.

v1.0 RC
* new: More compatibility options
* new: 'Manual Install'
* new: 'Internet Connection Sharing (ICS)'
* new: 'Distributed Link Tracking Client'
* new: 'Computer Browser'
* new: 'Sample Pictures'
* new: 'MSN Installer'
* new: 'Malicious Software Removal Tool'
* new: 'Multimedia Class Scheduler'
* upd: 'Performance Counters' (SQL Server installation dependency)
* upd: 'Screensavers' (PhotoScreensaver removed if Gallery kept)
* upd: 'Volume Shadow' (Previous Version tab removed)
* fix: 'Windows Collaboration' (netsh dependency)
* fix: 'Windows Media Player' (portable devices)
* fix: Paint.NET compatibility option

Altiris Support for Windows 2003 SP2

Service Pack 2 for Windows 2003 was released on March 13, 2007. The Altiris testing methodology is to ensure that all new versions of Altiris solutions are compatible with current technology. Therefore, any solution that is released or upgraded on or after April 2007 will be supported for Windows 2003 SP2.

Note: More complete product compatibility support is available for the prior service pack versions of Windows 2003 (SP1 and R2)

Confirmed list
The following solutions versions have been confirmed for compatibility with Windows 2003 SP2:

* Notification Server 6.0 SP3 with Rollup 5-Note: This does not imply that Notification Server-dependent products have been tested. Any new product versions released after R5 (May 24, 2007) will be tested for compatibility with Windows 2003 SP2 as part of their normal QA approval process.
* Software Virtualization Solution 2.1 (released June 7, 2007)
* Patch Management Solution for Dell Linux Servers (released June 7, 2007)
* Recovery Solution 6.2 SP2 (released June 14, 2007)
* As of June 28, no other Notification Server-based products are currently supported for usage with Windows 2003 SP2. As new product versions are released, this article will be updated to reflect accordingly.

Support for SQL 2005 SP2

Service Pack 2 for SQL 2005 was released on February 16th, 2007.
The Altiris testing methodology is to ensure that all new versions of Altiris solutions are compatible with current technology.
Therefore, any solution that was released or upgraded on or after March 2007 would be supported for SQL 2005 SP2.

Confirmed list
The following solutions versions have been confirmed for compatibility with SP2 for SQL 2005:
NS 6.0 SP3 with Rollup #5 (Released May 24th 2007)
Application Control 6 SP1 (Released April 5th 2007)
Application Management 6.1 SP1 (Released April 5th 2007)
Application Metering 6.1 SP2 (Released April 5th 2007)
Carbon Copy 6.2 (Released April 5th 2007)
Inventory (Windows) 6.1 SP2 (Released April 5th 2007)
Monitor Solution 6 SP5 (Released April 5th 2007)
Patch Management for Windows 6.2 SP1 (Released April 5th 2007)
Software Delivery for Windows 6.1 SP3 ((Released April 5th 2007)
Wise Integration Component 6.1 SP3 (Released April 5th 2007)
SVS 2.1 (Released June 7th, 2007)
Patch for Dell Linux Servers (Released June 7th 2007)
Recovery Solution 6.2 SP2 (Released June 14th 2007)
Asset Management 6.5 (released July 26, 2007)
CMDB Solution 6.5 (released July 26, 2007)
Connector Solution 6.5 (released July 26, 2007)


Initial Testing Completed
Asset Control and Contract Management Solution 6.2
Patch Management for Windows 6.2
Patch Management for Dell Servers 6.2
Integrated Component for Microsoft Active Directory 6.1
Connector Solution 6.1
Barcode Solution 6.6 SP2
Recovery Solution 6.2.2332 (SP1)
Recovery Solution 6.2 SP2 (Not yet released, due in Q2 2007))

02 July 2007

A new site for SVS was born

This site is focused on the benefits of using Virtual Applications based on the agent of Altiris Software Virtualisation Solution­®.
This agent is released to the public for personal use only and is the most rewarded tool ever.
On this site you will find the tools I developed for them as also a forum and a possibility to chat with people who can help you with it.
Feel free to look around and be fascinated with this whole new world of Virtualizing your applications.
This site is brandnew and under construction...
More
here

Is there a way to suspend the inventory scan upon bootup?

Question:
There are a number of people who shut their computers down over the weekend. Our Full Software Inventory scan runs over the weekend. When these users come in on Monday morning the Software Inventory scan starts and slows the performance of their computers way down. Is there a way to suspend or minimize the performance hit of inventory for these users?
Answer:
There are a couple of options for doing this with the second option being the most preferred.Option 1: In the registry of the client at HKLM\SOFTWARE\Altiris Agent is a registry key called "Delay at System Boot (secs)". Setting this for a value like 600 (decimal) would theorectically delay the startup of the Altiris Agent for 10 minutes preventing the inventory tasks from running.Option 2: Configure the "Slow mode delay (milliseconds)" in the AuditPls.ini. This will slow down the scan minimzing the performance hit on the computer during the software scan. See article
3674 for details on how to configure this.

15 June 2007

AMS & CMS Database Schema

Finally, a nice document with th DB structure ...very handy document.
Link to KB

Report Builder Document

Altiris has created a very nice document about creating Reports.
This KB can be found at https://kb.altiris.com/article.asp?article=27167&p=1

Altiris Recovery Solution 6.2 to be released today

ALtiris has released Local Recovery Solution 6.2 and Recovery Solution Pro 6.2 today.
I will put the changes later on the blog

08 June 2007

Altiris Software Virtualization Solution 2.1

Improvements for this release include the following new features:
Performance Enhancements
Redesigned registry handling yields significantly higher performance and scalability over SVS 2.0.
Support for Microsoft Windows Vista
This version of the SVS Agent can be run on computers using Microsoft Windows Vista 32 bit.
Note
64 bit operating systems are not supported at this time.
Altiris Task Server SVS Plug-in
An SVS Task-Server Plug-in is included in the installation of Altiris Software Virtualization Solution. The plug-in allows you to leverage the benefits of the Altiris Task Server infrastructure including automation and task sequencing.
SVS Control Panel Applet
An Altiris SVS Control Panel Applet is included as an optional component installed with the Altiris Software Virtualization Agent. It is available from the Windows Control Panel.
Depending on the installation of either SVS Admin or Virtual Package Editor (installed with Wise Package Studio) you can use the applet to create, import, export and manage virtual layers, and also configure local software virtualization options. The ability to import multiple archive files has been added. You can also add, edit, and delete Global Exclude entries as well. For more information, see the Altiris SVS Applet chapter in the Altiris® Software Virtualization Solution™ Reference Guide.Note The SVS Admin utility is still included and supported in this release.
Global Exclude Entries
Global Exclude entry support allows SVS administrators to specify, on a global level, certain file type extensions and directory locations that you do not want to be captured into application layers. This feature includes an additional API, and menu items in SVS Admin and the SVS Control Panel Applet for managing the Global Exclude entries. The SVS installer has also been updated to provide the ability to select or deselect two default global exclude entries; Desktop, and My Documents.
Single Screen Refresh
When activating or deactivating layers from SVS Admin there is now a single screen refresh.
Delete Entry Visibility Enhancements
An additional user interface component has been added to the SVS Admin utility. Now, in addition to file delete entries, registry delete entries are also visible.
Layer Data is Retained on Uninstall
To eliminate risk of data loss, uninstalling the SVS Agent 2.1 does not automatically delete all layers on the computer. However, an MSIexec command line option may be used to force the deletion of layers at uninstall time.
Virtualization of System Path Variable
SVS now fully virtualizes the system path variable. Operation works as expected when layers are activated and deactivated. No manual steps or scripting are required.
A New WMI Provider
There is a new WMI provider with improved functionality. This is an additional provider and the legacy provider will still function with this release. Note: The legacy provider will be deprecated in a future release.
Alternate Import Locations through SVS APIs
The SVS APIs support importing a layer to a location other than the default redirect area.
Additional Language Support
The SVS Agent interface has added support for the following additional languages: Danish,Dutch,Italian, Portuguese, Russian and Swedish
The SVS Solution interface on a Notification Server Environment has added support for the following additional languages: Italian and Portuguese

For more info : https://kb.altiris.com/article.asp?article=30814&p=1

04 June 2007

Aclient used in Runonce and using Modify Configuration

It is always a best practice to install the latest AClient agent from a runonce script after the image deployment.
In some case we work with a fixed INP file to install and configure the AClient, directly followed by a Modify Configuration task to put the PC in a specific domain.

But since the DS6.8SP1 version something has changed. After installing the Aclient the aclient.cfg that has being send by the Modify Configuration Job is cleared. The results that the configuration Job doesn't get run, but is shown as succesfully completed.

What I did is I put an empty script the runs on the client (and not as an automation) just before the Modify Configuration Task.
I also add an empty script at the end of this job to make sure that when the job is show as completed the PC is realy ready.


Upgrading Deployment Server

When you have used the default name "Express" to install your DS then this is NOT valid. If (for one reason or antoher) you used a different name as Db (other then "Express") then upgrading will finish succefull, but you server will need a lot of CPU.

Reason is that the SQL upgrade script use the USE EXPRESS setting to start with. Since this is a SQL script there is SQL log to show that there was an error. But be carefull, not all error in the log are abnormal because the script is made to migrade from all previous versions.


If you will run Server.exe from DSSetup folder (installation files) it will extract all files needed for Server installation to %Temp%\apt0 (or larger number) folder.
And you can use then Upgrade.sql file to update the database manually.


If you have NO experience with SQL the please call Altiris Support

29 May 2007

DS agents and Vista!!!

Whenever deploying Vista with DS and using the NS to deploy the AClient then PLEASE make sure NOT to install the regular AClient , but use only the DAgent.

What happend:
We created a vista image and our XML, we deployed with Altiris Deployment Server and everything went fine. We use a runonce command to install the latetst NS and DS agent the at the first logon and the a reboot after 30 seconds.
After the reboot the NS agent agent starts communicating with the NS Server and gets its sub agents like SWD, PM, App Met, etc...If yo use the standard task to deploy the AClient then an (old) Aclient agent will be installed in addition to the already installed DAgent after a while.

In our case this resulted in a reconfiguration of the PC into the workgroup "WORKGROUP" after a reboot.
The collection of this task should be altered to prevent this task to be run on a VISTA Pc, so just clone the standard Collection to be used and add the exclusion of All Windows VISTA computers.
Running a Configuration job didn't fix the problem (I guess both agents wants to take control)

In any case, prevent the presence of 2 DS agents (Dagent and Aclient) on a VISTA...believe me.

25 May 2007

Notification Server 6.0 SP3 R5

R5 Release notes : https://kb.altiris.com/article.asp?article=31946&p=1

R5 includes updated versions of the Altiris Agent and the Package Server agent. After installing R5 onto the Notification Server, the Altiris Agent and Package Server agent packages will be updated. Upgrade policies for these agents are located in the Configuration tab of the Altiris Console under Configuration > Altiris Agent > Altiris Agent Rollout and Configuration > Server Settings > Notification Server Infrastructure > Package Server Agent Rollout.

21 May 2007

Altiris Administrator Software Development Kit 1.4

New Features Release 1.4 implements the following new features:

  • A PatchManagement library has been added. A list of new functions is available
  • Release 1.4 has added a fourth "layer"—ASDK functionality for some solutions can now be accessed as pre-defined tasks that can be run directly in Altiris Task Management solution. These Administrator Software Development Kit tasks will appear in the Create a New Task dialog under the Server Tasks folder if you check the various "Tasks" checkboxes when installing the ASDK. (Task Management Solution and the underlying Notification Server solution must first be installed or the Task check ox for that solution will not appear.) To access the Create a New Task dialog, right-click on the Server Tasks folder in the Tasks tree in NS, then select New => Task/Job. Tasks exist for the NS, Patch Management, Asset Management, Helpdesk and Software Delivery (full) ASDK libraries.

15 May 2007

VMWare Workstation 6.0 Released

For downloads: http://www.vmware.com/download/ws/

But be aware...This is a 275MB download

For the VISTA lovers....read the know issues...

Installing Out of Band Management OOBM does not install .NET 2.0 - Installs fail to install the Intel SCS if .NET 2.0 is not installed

Installs fail to install the Intel SCS if .NET 2.0 is not installed - Via Solution Center.
Installing with AICM causes Out of Band Management to fail to install due to the above reason.

Resolution

The following steps should be followed when installing OOBM:

1. NS should already be installed with .NET 1.1. This is essential for proper function when installing .NET 2.0.
2. Install .NET 2.0.
3. Install Altiris OOBM.

If the install is already complete for the base OOBM install, follow these steps:

1. Install .NET 2.0.
2. Download the file: Altiris_OOBSC_6_1.exe from
www.solutionsam.com/solutions/6_0.

3. Execute the file on the Notification Server.

02 May 2007

WINPE 2.0 should be possible in DS6.8SP1




Altiris has shipped an article to allow WINPE 2.0 to be used by DS6.8SP1.
After some searching we were able to start the WINPE 2.0

The procedure is unclear about a lot of things and the ISO image created is again larger so it take longer to load.


Thx Stephane for the feedback

25 April 2007

What causes the task message "Run Completed Asynchronously"

The Run History tab for specific advertisements shows a status of Run Completed Asynchronously. What causes this message?

Answer
While the circumstances of the actual issue may vary, the basic cause is the same. If the Altiris Agent service restarts (for any reason) while a task has not returned any sort of status, it assumes it completed successfully and displays the message about running asynchronously.
A few possible scenarios are:

  • System restarts, either because of the deployed software or some other source before a return code is provided.
  • The Agent service is restarted for any reason (other than reboot). If you execute a task then restart the agent service, you'll notice the asynchronously message as well.
  • The software install never provided a return code back to the agent. This means the next time the computer or service restarts, this will turn the status into asynchronously.

24 April 2007

DSEXP.exe utility will export DS data from one database into a new DB

Deployment Solution is installed on a server that is going to be moved, decommissioned, or taken away. A new one is created from a fresh install, but the data from the old server is desired to be in the new server.
How do I move the data from one Deployment Solution server to another?

Resolution
Use the DSEXP.exe utility. This utility will export all the basic data from the old database to multiple text files and then allow it to be imported into the different server. Computers and groups are transferred by this utility.


You can find this tool at http://kb.altiris.com/article.asp?article=34226&p=3
Thx to Anthony

Agent Updates issues on DS6.8SP1

Due to some issues the Deployment Server support team recommends that Autoupgrade in DS 6.8.282 be DISABLED. The additional load put on the Axengine to update the AClients along with the Axengine attempting to process unnecessary requests from the AClients can cause the Axengine to use upwards of 90 to 100% of the CPU and use large amounts of RAM ( >200 MB). Alternate ways to install the Aclient are documented in Chapter 5 of the ‘Deployment.pdf’ file. This file can be downloaded from the Altiris website for reading prior to installing DS 6.8 SP1. Please read KB 33129 and 33127 for a way to update only Aclients that are not current via the Remote Agent Installer. When DS 6.8 SP2 is released AutoUpgrade from build 282 of AClient will be the recommend upgrade method.

21 April 2007

The Inventory Solution 6.1 SP2 upgrade deletes custom inventory files

The Inventory Solution 6.1 SP2 upgrade will delete any custom .xml and .ini files used by custom inventory.

Resolution
Make sure that any custom .xml or .ini files used by custom inventory are backed up prior to performing an upgrade to SP2. After the upgrade is complete, be sure to:
Restore the custom inventory source files back into the altiris\notification server\nscap\bin\win32\x86\Inventory Solution folder.
Add aexcustinv.exe command lines to the appropriate aexinvsoln*.ini files.

11 April 2007

Upgrading Solutions

A lot of people use the Currently installed page to upgrade there solutions.
What you don't know is thats not the ideal way to do it.
These ways are far more practical and sure to upgrade all subcomponents.

First way:
Go to Configuration, Upgrade/install Additional Solution, Available Solutions, Solutions

Click on every installed solution to make sure they are all running the latest version. (If you have previously being upgrading using currently install then go through every installed component (also the component like HP or Dell Client Manager)

Second Way:
Go to Configuration, Upgrade/install Additional Solution, Available Solutions, Suites and click on the installed suite toi verify if all components are up to date

06 April 2007

Application Metering install problem

When trying to upgrade to the new version 6.0.32 I got and error 1316
I removed App Metering and the Package Rules and I got it installed

New Releases

Altiris® Carbon Copy™ Solution 6.2
Software Delivery Solution 6.1 SP3

Altiris® Patch Management Solution™ 6.2 SP1 for Windows
Altiris® Inventory Solution® for Windows 6.1 SP2

Wise Toolkit
Application Management
Monitor Solution 6.0 SP5
Monitor Pack for SQL