As of today the MR2 is released
Didn’t see a Release note yet, but I guess it is KB 51945
22 June 2010
01 June 2010
22 April 2010
McAfee rebooting Windows XP Systems - False positive detection of w32/wecorl.a in 5958 DAT - svchost.exe - Fix via Deployment Solution
A possible way to fix it is just being released and is to be found here https://kb.altiris.com/article.asp?article=52533&p=1
17 March 2010
Limitations when runnning Sysprep for WIN7
If you want to know more about Sysprep you can find more here http://technet.microsoft.com/en-us/library/dd744512(WS.10).aspx#ResettingWindowsActivation
There is a limit of 3 times a sysprep can run on a single computer if you do not use rearm option
If you anticipate running the Sysprep command multiple times on a single computer, you must use the SkipRearm setting in the Microsoft-Windows-Security-Licensing-SPP component to postpone resetting the activation clock. Because you can reset the activation clock only three times, if you run the Sysprep command multiple times on a computer, you might run out of activation clock resets. We recommend that you use the SkipRearm setting if you plan on running the Sysprep command multiple times on a computer.
14 March 2010
Inventory Solution 7.0 Database Schema
01 March 2010
Altiris™ IT Management Suite 7 Release Notes
Finally the TMS7 or in the new naming IT Management Suite 7 is released for download. More info to be found here.
https://kb.altiris.com/article.asp?article=51492&p=1
The ITMS7 contains:
CMS7, SMS7, SD7 and AMS7, but also DS7.1 (With PXE) and Virtual management
28 February 2010
AssetManagement 7.0
the Asset workflows that will ship with the product, they are:
1. Ownership Verification
2. Software Purchase Request
3. Hardware Purchase Request
The installation file is a ZIP file to be found in the root folder of the NSCAP Share. Unzip the file and run the exe AFTER you have installed the Workflow engine.
23 February 2010
Software Catalog Data Provider 7.0 Release Notes
Software Catalog Data Provider enhances Notification Server's ability to identify the software that has been detected on the managed computers in your environment. It uses rules to identify software that otherwise could not be identified. It can then automatically import data into the Software Catalog to create a software resource for the software. After it creates a software resource in the Software Catalog, you can add package resources along with other software information. You can then create policies or tasks that deliver or manage this software on the managed computers in your environment.
Software Catalog Data Provider is needed to identify software in the following instances:
- The information that identifies the software cannot be gathered from Add/Remove Programs.
- The software is identified as a suite, and you need to identify a specific product in the suite.
- The software is identified as a product, and you need to identify the suite.
19 February 2010
Home Use: Norton 360 Version 4 - Finally!
See this article to know more about the home edition of Symantecs Antivuris.
01 February 2010
KNOWN ISSUE: With SIM 7.0.555 (Symantec Installation Manager) installed, SIM is not properly recognizing certain proxy configurations
With SIM 555 installed, it may not properly recognize a proxy configuration (regardless of proxy credentials).
In this case, The SIM can never 'connect' to our servers to obtain the proper information for our Product Listing, meaning all Products install items will appear grayed out.
Here is how it was noticed:
1. SIM 553 installed on a customer system
2. Customer updated the Product Listing and received SIM 555 upgrade
3. When SIM 555 launched, it could not 'see' Products install items. All showed as unavailable and grayed out with 'requires internet connection' message.
4. In some other cases SIM was not able to recognize the customer's Proxy settings so he was not able to obtain access to the Internet
Cause
Some changes in SIM 555 code caused some unexpected behaviours during our attempts to connect to the Internet
Resolution
This issue has been reported to our Development Team. A permanent fix has been developed. This issue is fixed with SIM 7.0.556 version. Please check for updates in SIM.
Note: If SIM is not warning you about installing a new version or it is not able to obtain it, please see the attached file. It should be SIM 7.0.556. Just unzip the file and run the executable to upgrade SIM.
31 January 2010
Top 20 Most Valued Backup Exec Articles
Here is the list of the top 20 Knowledge Base articles.The list is determined by various factors that prove the article's value to our customers. Therefore, please make it a point to check this list first to see if your issue has already been addressed. And FYI, this list would be updated on a quarterly basis.
Symantec Backup Exec 2010
Please find some news on the BE2010 new upgraded product on http://www.symantec.com/connect/blogs/are-you-ready-upgrade
Click on the link to find a document on How to Upgrade to Backup Exec 2010 in 3 Simple Steps
28 January 2010
Windows 7 Nonpaged Pool Srv Error 2017
I’m using my Windows 7 machine as a file server to host my BESR2010 images. I’m using a share. However, I ran into a problem after using the mounted share for a small amount of time. I found a simple solution after a bit of research.
After checking the Event Viewer System log, I found the following error:
Source: srv
Event ID: 2017
Level: Error
The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations.
Some research led me to find this Google Groups discussion about the problem and this Microsoft Technet article discussing the solution (look at the bottom of the page). Apparently you need to tell Windows that you want to use the machine as a file server and that it should allocate resources accordingly. Set the following registry key to ‘1′:
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\LargeSystemCache
and set the following registry key to ‘3′:
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\Size
After making these changes and restarting, I haven’t seen this issue arise again. Fixed!
27 January 2010
ServiceDesk install reports "An error has occurred at: AddProfileValueDefinitions"
• ServiceDesk Solution 7.0
Problem/Symptoms
This issue can manifest itself in a number of ways both during the ServiceDesk installation process as well as after the installation (if errors during the installation process are missed or ignored). We will add new symptoms as we are made aware of them:
1) During the ServiceDesk installation the following error appeared:
An error has occurred at: AddProfileValueDefinitions
Error Message: Server was unable to process request. ---> Exception has been thrown by the target of an invocation. ---> could not save object ProfileServiceDeskSettings ---> Could not insert or update. insert error message: String or binary data would be truncated. The statement has been terminated. update error message: String or binary data would be truncated. The statement has been terminated. ---> String or binary data would be truncated. The statement has been terminated.
Stack Trace: System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> Exception has been thrown by the target of an invocation. ---> could not save object ProfileServiceDeskSettings ---> Could not insert or update. insert error message: String or binary data would be truncated. The statement has been terminated. update error message: String or binary data would be truncated. The statement has been terminated. ---> String or binary data would be truncated. The statement has been terminated. at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at LogicBase.Core.Ensemble.Profile.ProfileService.SaveProfileValueDefinitionsWithInitialValues(String sessionID, ProfileValueDefinition[] profileValueDefinitions, KeyValuePair[] nameValuePairs) at LogicBase.Components.Ensemble.Profile.AddProfileValueDefinitions.Run(IData data) at LogicBase.Core.ExecutionEngine.SinglePathProcessComponentExecutionDelegate.Execute(IData data, IOrchestrationComponent comp, String& outputPath, IExecutionEngine engine, TLExecutionContext context) at LogicBase.Core.ExecutionEngine.AbstractExecutionEngine.DoRunComp(IOrchestrationComponent comp, IData data, TLExecutionContext context)
The installation process is allowed to continue despite this error, however the ServiceDesk will not function properly when it is complete.
2) When attempting to create a new incident after the ServiceDesk 7.0 install is complete, the following error appears:
"Value cannot be null. Parameter name: uriString"
Cause
This error is caused by outdated versions of SQL components that must be installed on the ServiceDesk server as prerequisites. Specificially, one or more of these components may be missing or out-of-date:
SQLServer2005_ADOMD_x64.msi (Microsoft ADOMD.NET)
SQLNCLI_X64.msi (Microsoft SQL Server Native Client)
SQLServer2005_XMO_x64.msi (Microsoft SQL Server 2005 Management Objects Collection)
Resolution
We currently recommend that these files be downloaded from the Feature Pack for Microsoft SQL Server 2005 - December 2008.
21 January 2010
Hydraq
Ref Link
Hydraq is a targeted attack that is also currently referred to as Aurora, Google Attacks, and the Microsoft IE Vulnerability (advisory number 979352). Through the exploitation of a vulnerability, it attempts to install a trojan on a specific computer that steals information from that machine. The trojan attempts to make contact with command and control servers in order to receive instructions and to upload any information that it may have collected. This type of attack is often called an advanced persistent threat because of the sophistication and persistence of the attack within a business.
This attack is of concern to all computer users because vulnerabilities used in this attack are now widely know and likely to be exploited by other cybercriminals.
Symantec customers are protected from Hydraq both today and in future using updates, as well as the products and services outlined in the tabs below.
12 January 2010
Remote Altiris Agent Diagnostics 2.0
Download of latest version can be found here
Ref Link : https://kb.altiris.com/article.asp?article=49683&p=1
“Remote Altiris Agent Diagnostics” (RAAD) version 2 expands on the diagnostic checks and remediation actions performed by RAAD version 1 (KB 45023) to allow those checks and actions against a list of machines and not just the one machine. The Health Checks in RAAD version 2 are designed to take a look at the state of the Altiris solution plug-ins such as Patch, Task, SWD and Recovery to determine if they are working properly. Version 2 also allows the ability to run a Custom Inventory XML against the set of machines and return the results immediately so you can customize your own health check. You can examine more in-depth details of the Agents using the Diagnostics tab which is essentially RAAD version 1. The biggest advantage with version 2 is that you can run remediation actions such as Configuration Request and Start Patching Cycle against as many machines as you’d like and all at once.
The process is to get a list of machines, run a health check against them, then by evaluating the results or drilling down into the diagnostics choose a remediation action to run against the machines you choose.
Features:
- Diagnostics and Health Checks
- x86 and x64 compatible for remote clients
- Ability to pass credentials used to connect to remote clients
- Multi-Threaded
- Agent, sub-agent, and customizable Health Checks
- Ability to run an action against multiple remote clients at once
- Customizable User Interface and captured
* Please see KB 45023 for application functionality
Requirements:
- Run the executable locally, not from a share
- Host and remote machine must be Windows OS
- Do not use 'Run As' - you can pass credentials in this version
- .NET 1.1 framework installed on host and remote machine
- Altiris Agent must be installed on host
- Firewall on the remote machine will also prevent Altiris actions.
You will need to add AeXNSAgent.exe to the Firewall exclusion by running the following command on the remote machine:
netsh firewall add allowedprogram "%programfiles%\Altiris\Altiris Agent\AeXNSAgent.exe" ENABLE
Or you can simply run this command from the 'Remote Execute Option' button from the application
Usage:
To distribute desired application settings such as Remote Execute options edit the RAAD.exe.config and place it in the same folder as RAAD.exe. If user has altered application settings have them go to Settings - Change Application Settings and choose Restore All Setting to Default which will import your altered RAAD.exe.config.
Changes:
Ver. 2.1.9.0
- First GA Release
Ver. 2.1.10.0
- Fixed Buttons to show on Vista and Windows 7
- Fixed Collection Picker to import into List after selection
- Add Trusted Connection for database connections to use current Windows Authentication and not just SQL credentials
- Added Stop and Start Recovery service to Actions
- Included RAAD.exe.config to zip so application settings can be distributed to end users. See Usage above.
Ver. 2.1.11.0
- Embedded both dlls into executable so RAAD.exe is a single distributable
- Fixed Recovery Agent Service and Stop
Ver. 2.1.12.0
- Now RAAD minimizes to System Tray on Exit
- Added ability to connect to Client's Diagnostics from System Tray
- Added Select All and Select None on Diagnostic and Health Check options
- Added ability to double-click client from Health Check results or Computer List to launch Diagnostics
- Added horizontal scroll to SWD Packages
- Fixed Task History to show local time not GMT
- Fixed Task History column sizes
- Fixed Logs not refreshing when switching clients
- Fixed exception when running RAAD.exe <computername> from command line
Ver. 2.1.13.0
- Added Garbage Collection to help memory issues
Ver. 2.1.15.0
- Added caching and populating credential password
- Added ability to hit Enter after entering password
- Added populating NS from local agent when using Redirect Agent
- Fixed Redirect Agent UI not executing
- Changed Copy to Ctrl-F so not to impeed Ctrl-C
24 December 2009
Query7: Show OwnerNS for Computers
SELECT vRM_Resource_Item_Partitioned.Name, vRM_Resource_Item_Partitioned.Guid, Item.Name AS ResourceType, Item_1.Name AS OwnerNS,
vRM_Resource_Item_Partitioned.IsManaged
FROM vRM_Resource_Item_Partitioned INNER JOIN
Item ON vRM_Resource_Item_Partitioned.ResourceTypeGuid = Item.Guid INNER JOIN
Item AS Item_1 ON vRM_Resource_Item_Partitioned.OwnerNSGuid = Item_1.Guid
WHERE (vRM_Resource_Item_Partitioned.ResourceTypeGuid = '493435f7-3b17-4c4c-b07f-c23e7ab7781f') OR
(vRM_Resource_Item_Partitioned.ResourceTypeGuid = '2c3cb3bb-fee9-48df-804f-90856198b600')
Query7: Show when a filter has being last updated
SELECT Item.Name, Collection.LastUpdated, Collection.LastUpdateEventDate, Item.Description
FROM Collection INNER JOIN
Item ON Collection.Guid = Item.Guid
ORDER BY Collection.LastUpdated DESC
23 December 2009
Notification Server 6 Agent for Macintosh Update for Mac OS X 10.5 and 10.6
An update that provides support for Mac OS X 10.5 (Leopard) and 10.6 (Snow Leopard) by the Notification Server 6.2 Agent for Macintosh is now available. This update allows 10.5 and 10.6 clients to be managed by an NS and for retrieval of Basic Inventory from these clients. This only updates the agent. The solutions, i.e., Inventory and Software Delivery, do not support Snow Leopard.
The update can be found at: https://kb.altiris.com/article.asp?article=50717&p=1.
Supported platforms:
Previously supported Mac OS X versions will remain the same: 10.2.8 – 10.4.X. New platforms with agent-only support in this addon are:
Mac OS X 10.5 (ppc and x86)
Mac OS X Server 10.5 (ppc and x86)
Mac OS X 10.6 (Intel only platform)
Mac OS X Server 10.6 (Intel only platform)
Prerequisite: NS 6.0.6074 with Altiris Agent for Mac 6.2.1302.
19 December 2009
Site Server / Package Service/Task Service Support for NS7 SP3
Package Service
For Deskstops:
As of WIN2000 SP4 till VISTA SP2 64, but NOT W7 yet
For Servers
WIN 2000 SP4 to WIN2003 R2 32, but not WIN2003 R2 SP2 3W2 and 64 bit
And WIN2008 SP1 32 AND 64 bit, NOT higher
Task Service
For Deskstops:
only WIN XP SP3
For Servers
WIN2003 SP2 32, WIN2003 R2, WIN2003 R2 SP2 (all 32 bit only)
16 December 2009
Managing Microsoft Windows 7 computers using Client and Server Management Suite 7.0 SP1 and Symantec Management Platform 7.0 SP3
Client Management Suite 7.0 SP 1 was released in September 2009 before the release of Microsoft Windows 7. However, when updated with the subsequent release and application of Symantec Management Platform 7.0 SP3 (December 2009), CMS/SMS 7.0 SP1 provides limited support for Windows 7 and Server 2008 R2 subject to the limitations listed below. In 2010, a CMS/SMS Service Pack 2 is planned that addresses these limitations.
For more information about Client Management Suite 7.0 SP1, see article 48420.
For more information about Symantec Management Platform 7.0 SP3, see article 49356.
The purpose of this document is to note those issues that you may encounter if managing Windows 7 computers using CMS/SMS 7.0 SP1 with SMP 7.0 SP3.
Known limitations:
Inventory Solution:
- The Inventory Plug-in for Windows will not install on Windows 7 client computers using the default filter (Windows Computers without Inventory Plug-in). It will install if the computer is targeted directly.
- The Application Metering Plug-in for Windows will not install on Windows 7 client computers using the default filter (Windows Computers without Application Metering Plug-in). It will install if the computer is targeted directly.
- Some data classes may not report back correct information.
Inventory for Network Devices (Agentless Inventory):
- No issues have been discovered.
Software Management Solution:
- A managed delivery policy configured to install an .exe or .msi to a software virtualization layer will not run successfully.
- A managed delivery policy that is configured to run from the server will not execute on a Windows 7 client computer.
- A managed delivery policy that is configured to run as a specified user will not execute on a Windows 7 client computer.
Deployment Solution:
- Deployment Solution 6.9 SP3 supports Windows 7 and Server 2008 R2. Deployment Solution 7 will support these operating systems in a separately-scheduled release (either included in or prior to the CMS/SMS SP2 release).
Patch Management:
- Windows 7 or Server 2008 R2 patch data will be available with the CMS/SMS SP2 release.
RTSM:
- A Windows 7 client computer cannot be shutdown when the ‘Graceful power action’ option is enabled.
- Deactivating SVS layers on Windows 7 clients via RTSM will not remove the application’s desktop icon or entry in the start menu. In other words, the layer will be deactivated but will appear to be active.
PCAnywhere:
- Windows 7 is reported as Vista in the remote console.
- The desktop background on the host and in the remote console is black rather than blue when a connection is made. When using the freehand draw capabilities of the white board, the pointer is difficult to see as it is black as well.
Out of Bands Management Component:
- No issues have been discovered.
Network Discovery:
- No issues have been discovered.
Altiris Service after NS7 SP3
The service has a new name. It is now the Symantec Management Agent Service.
10 December 2009
Microsoft SQL Server Management Objects Collection patch is not installed
The following three files are necessary for a remote SQL host:
· Microsoft SQL Server Native Client
· SQL Server 2005 Management Objects Collection -
· Microsoft ADOMD.NET -
Use the following link to download the missing SQL components
NS7 SP3 Available and some critical updates
AS of today the SP3 is available.
Make sure your sourcefiles are not deleted. As per design the system performs a repair first in some cases
The release notes can be found here
08 December 2009
Turn off the Network Location Wizard in W7
-
Click Start, and then click Run.
-
In the Open box, type
regedit, and then click OK.Registry Editor opens.
-
On the Edit menu, click New, and then click Key.
-
Enter the following registry entry:
HKLM\System\CurrentControlSet\Control\Network\NewNetworkWindowOff
22 November 2009
Migrating to W7 with Symantec on YouTube
Thanks to the Symantec Digital Media team we are going viral with our Windows 7 migration video. Check out what is soon to be the most watched IT video on the web! You can also help drive awareness by sharing it with your friends on FaceBook, MySpace or Twitter.
View The Symantec Great Windows 7 Drive on YouTube.
16 November 2009
Software Management Solution 7.0 SP1 MR1 Release Notes
Today a MR1 has being released for SWM 7.0
More details can be found at KB
06 November 2009
Make SD work on x64 platform
Whenevr you install a new win2003 x64 server and enable the IIS then you might need to enable the ASP.NET still after install .NET 35
do this by running this command:
C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -iru -enable
In order to avoid the system check to fail "Microsoft SQL Server Management Objects Collection patch is not installed" run these 3 programs:
http://download.microsoft.com/download/3/1/6/316FADB2-E703-4351-8E9C-E0B36D9D697E/sqlncli_x64.msi
http://download.microsoft.com/download/3/1/6/316FADB2-E703-4351-8E9C-E0B36D9D697E/SQLServer2005_XMO_x64.msi
http://download.microsoft.com/download/3/1/6/316FADB2-E703-4351-8E9C-E0B36D9D697E/SQLServer2005_ADOMD_x64.msi
Then download the install file from the NS and run it...it will take some time to install.
do this by running this command:
C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -iru -enable
In order to avoid the system check to fail "Microsoft SQL Server Management Objects Collection patch is not installed" run these 3 programs:
http://download.microsoft.com/download/3/1/6/316FADB2-E703-4351-8E9C-E0B36D9D697E/sqlncli_x64.msi
http://download.microsoft.com/download/3/1/6/316FADB2-E703-4351-8E9C-E0B36D9D697E/SQLServer2005_XMO_x64.msi
http://download.microsoft.com/download/3/1/6/316FADB2-E703-4351-8E9C-E0B36D9D697E/SQLServer2005_ADOMD_x64.msi
Then download the install file from the NS and run it...it will take some time to install.
30 October 2009
Wise Package Studio 8.0 Shipped October 29, 2009
Wise Package Studio provides advanced software packaging functionality including creating and customizing packages, virtualizing software, and identifying and remediating issues that prevent software from properly functioning in a customer’s environment. Major enhancements include support for additional platforms including Windows 7.
Companies moving to Windows 7 will find Wise Package Studio a key tool for successfully migrating legacy applications to the newest Microsoft OS. Utilizing application repackaging in OS migrations means quicker and more reliable rollouts with fewer errors and helpdesk calls.
29 October 2009
Custom Inventory Samples
The KB https://kb.altiris.com/article.asp?article=4237&p=1 has been updated and contains some example scripts for NS6 AND NS7.
There are also some Links to other KB’s on how to use the customer inventory
12 October 2009
Scheduled tasks Disabled: Danger of installing additional components and hotfixes
In some cases the Altiris Object Host Service ATRShost.exe is not stopped properly and times out at the beginning or at the end of an installation or upgrade. The reason is not know yet (by me). If it happens it will leave the Scheduled tasks DISABLED even after a reboot.
There is a quick way to fix: delete all (NS) scheduled tasks except the NS.Weekly.GUID.
Enable this task and run it. It will recreate all schedules.
To prevent it I open the Task Manager and the services.msc.
If the services is not stopped after a minute or so during install then I kill it.
11 October 2009
Symantec Mobile Management 7.0
Symantec Mobile Management 7.0 is a new product built on the Symantec Management Platform 7.0 SP2 that provides rich management capabilities complimentary with the Altiris Client Management Suite. Symantec Mobile Management also integrates with Symantec Endpoint Protection Mobile Edition thereby providing rich management and security from a single console.
Symantec Workspace Profiles 6.1
Symantec Workspace Profiles (SWP) is a new software product from Symantec’s Endpoint Virtualization Group. SWP separates (virtualizes) the user’s personality (user data, settings and policies) from the underlying operating system allowing users to easily roam from device to device, work on two sessions simultaneously, or access their profile in the context of VDI. SWP give you the benefits of Roaming/Mandatory profiles at the speed of local profiles.
SWP works with other Endpoint Virtualization products such as Symantec Workspace Streaming and Symantec Workspace Virtualization. It is sold both standalone and in the Symantec Endpoint Virtualization Suite.
Symantec Workspace Virtualization 6.1 SP1
Symantec Workspace Virtualization (SWV) virtualizes 6.1 SP1 now supports Microsoft Windows 7, improves streaming performance, and is easier to use with Symantec Workspace Profiles (SWP) through the use of the new Profile Exclude.
07 October 2009
Emerson to Acquire Avocent (parent company to LANDesk)
On October 6th, Emerson (EMR) announced an agreement to acquire Avocent in an all cash tender offer of $25/sh (~22% premium to last closing price of $20.52). Avocent provides technology that “simplifies monitoring, managing and problem solving in any size data center.” EMR believes that the business will be complementary to its Network Power segment’s energy management and cooling solutions. The transaction is expected to close around January 1, 2010.
06 October 2009
Inventory and Throttling
Inventory is a disk and can be a CPU intensive task and this has nothing to do with full or differential Inventory, both scan the complete disk (is no extra exclusions are made)
There there are some techniques to take off the load.
CPU throttling
For software/file inventory task you can choose between Low, Normal, High and Very High priority under “Set inventory process priority” (Run Options tab of Advanced settings). Priorities correspond to the following settings (“nice” options for UNIX/Linux/Mac):
| Priority | Windows | Linux | Unix | Macintosh |
| Low | 25% | 10 | 30 | 10 |
| Normal | 50% | 0 | 20 | 0 |
| High | 75% | -10 | 10 | -10 |
| Very High | 100% | -20 | 0 | -20 |
This can be overridden (Windows only) using the “Override inventory process priority” option
If you select to override a good comparison for Windows would be :
| Priority | Files | Wait for (ms) |
| Low | 150 | 60 |
| Normal | 250 | 50 |
| High | 350 | 40 |
| Very High | 450 | 20 |
Bandwidth Throttling or Fuzzy Logic (Windows Only)
The AeXRunContol does no longer exist, but there is a setting called “Evenly distribute sending inventory over X hours” (aka fuzzy logic). It is located on Run Options tab of Advanced settings.
03 October 2009
How to clone a VDI for Sun VirtualBox using Mac
1) Shut down the virtual machine you would like to copy
2) In File > Virtualdiskmanager, select the virtual machine disk image you would like to copy, and press the Release button
3) In a terminal window, issue following command (see virtualbox user manual):
vboxmanage clonevdi /directory/image1.vdi /directory/image2.vdi
4) In File > Virtualdiskmanager, add the new disk image you've created in step 3.
5) In the main virtualbox window, press the New button to create a new virtual machine, and link it to the new disk image you've created.
Ref : Here
23 September 2009
Software Managed Delivery Tasks
To test some of the features of Managed Software Delivery (MSD) and not to create be afraid the job is scheduled then you can create a MSD using a scheduled time, leave it on 00:00 with no repeat. Then you can launch the MSD using the agent. It will appear in the Policy Pane of the agent as being “Not Scheduled”.
When Using “Depends On” it will install the depended package if it is not detected (Not Compliant)
“Supersedes” will (if checked) uninstall the “old” packages before it installs the depended package and then the actual one.
When you have installed CMDB and activated the Flash player Active X you can see a Resource Association Diagram of this packages
21 September 2009
CMS and SMS SP1 released today (21/09)
Article ID: 48420 : Altiris™ Client Management Suite 7.0 SP1 Release Notes
Changes in Client Management Suite from 6.x to 7.0 SP1
- The functions of Software Delivery Solution and Application Management Solution are combined in the new Software Management Solution.
- The functions of Application Metering Solution are now included in Inventory Solution.
- Inclusion of SVS application technology in Software Management Solution.
- Deployment Solution for Clients is integrated into the Symantec Management Platform.
- Real-Time System Management Solution is included in Client Management Suite.
- Carbon Copy is replaced with pcAnywhere Solution.
- Addition of Ghost Imaging Foundation (both DS 6.9, and 7.0)
Changes in Client Management Suite from 7.0 to 7.0 SP1
Except for Deployment Solution for Clients 7.0, all components of Client Management Suite SP1 have been updated. For information about the new features of the solutions and components, see the individual release notes. To access the solution release notes, use the links that are in the Components of Client Management Suite section.
Article ID: 48733 : Altiris™ Server Management Suite 7.0 SP1 Release Notes
Changes in Server Management Suite from 6.x to 7.0 SP1
- The functions of Software Delivery Solution and Application Management Solution are combined in the new Software Management Solution.
- The functions of Application Metering Solution are now included in Inventory Solution.
- Inclusion of SVS application technology in Software Management Solution.
- Deployment Solution for Clients is integrated into the Symantec Management Platform.
- Real-Time System Management Solution is included in Server Management Suite.
- Addition of Ghost Imaging Foundation (both DS 6.9, and 7.0)
Changes in Server Management Suite from 7.0 to 7.0 SP1
All components of Server Management Suite SP1 have been updated. For information about the new features of the solutions and components, see the individual release notes. To access the solution release notes, use the links that are in the Components of Server Management Suite section.
19 September 2009
NS7 SP2 HF2 Available
NS7 SP2 HF2 Available as of today
as well as a hotfix for Agent Unix, Linux, Mac – Network discovery – PLugable Protocol Architecure
Release notes not yet public available
How do I create a new database or change the database being used by Symantec Management Platform 7.0?
NSSetup is no longer supported in SMP / Notification Server 7.
There are two supported methods to alter database settings.
- Within the console: If you are able to access the Symantec Management Console, go to Settings - Notification Server Settings - Database Settings. Use the options on this page to create a new database or to change the database currently being used by Notification Server.
- Using AeXConfig.exe: When you don't have access to the SMC, Run AeXConfig.exe /db from a command prompt. It is found in the directory \Program Files\Altiris\Notification Server\bin. Syntax examples are shown below:
- To connect to the SQL Server using Windows Integrated Security, under the account credentials of the current cmd.exe process:
AeXConfig.exe /db dbserver:<SQLServerName> dbname:<DBName> dbusername: dbpassword: dbtimeout:<DBTimeout> - To connect to the SQL Server using a SQL Login:
AeXConfig.exe /db dbserver:<SQLServerName> dbname:<DBName> dbusername:<SQLLoginName> dbpassword:<SQLLoginPassword> dbtimeout:<DBTimeout>
- To connect to the SQL Server using Windows Integrated Security, under the account credentials of the current cmd.exe process:
NOTE: You must use all of the parameters for the command to work, but for Integrated Security to work using the account credentials of the currently executing cmd.exe process, do not put the user name or password after the dbusername: and dbpassword: parameters.
12 September 2009
Altiris PC Transplant 6.8 SP3 from Symantec Release Notes
Introduction
PC Transplant Solution uses its wizard-driven interface to capture a computer's personality—user accounts; desktop, network, and application settings; files; folders; and personal data. The solution then transplants the personality to another computer. You can transplant a personality through a self-extracting executable file called a Personality Package, or you can perform a real-time migration from one computer to another.
PC Transplant Solution simplifies the deployment and migration of new computers or Windows operating systems by facilitating the migration of data and settings. It complements existing desktop management tools, meeting an easily identified need that none of these tools currently address. With PC Transplant Solution, you can not only migrate to a new computer quickly and efficiently, but you can also transfer key aspects of a computer's personality on an on-going basis. PC Transplant Solution is an ideal solution for IT administrators, consultants, VARs, resellers, computer vendors, and configuration centers.
PC Transplant Solution is part of the following suites:
- Altiris™ Client Management Suite from Symantec
For release notes, see Knowledge Base article 40929. - Altiris™ Server Management Suite from Symantec
For release notes, see Knowledge Base article 45893.
Features in this Release
This version includes the following features:
- Support for Windows 7.
- Support for EFS RAW. Added the -efsraw command-line switch to enable the RAW migration of EFS encryption.
- Support for Microsoft Internet Explorer 8.
- Support for PC Transplant Web Store installation on Windows Vista and Windows 7 computers.
- Support for migration of power setting from Windows Vista to Windows Vista, Windows Vista to Windows 7, and Windows 7 to Windows 7.
10 September 2009
What are the new features in Patch Management Solution 7
Maintenance windows
By default, Software Update agents will respect Maintenance Windows if one is configured and applies to the agent computer. This is controlled by the ‘Override Maintenance Window’ setting on the Agent Configuration Policy. If this setting is not enabled, and a Maintenance Window applies to the agent computer, it will only install updates and trigger required reboots when that Window is Open. If the Window is not Open, the installations and reboots are deferred until the Window next opens. If the setting is enabled, the agent will ignore Maintenance Windows and use the installation and reboot options defined in the configuration policy. Software Update policies set to run ASAP or at a Custom time can be set to override Maintenance Windows.
Reporting Changes in 7.0
The number of reports and reporting infrastructure has improved with Notification Server 7.0, resulting in fewer reports and an improved dashboard user interface. Patch Management Solution 7.0 for Windows includes the following default reports:
- Microsoft Compliance by Bulletin
- Microsoft Compliance by Computer
- Microsoft Compliance by Update
- Microsoft Compliance Summary
- Microsoft Vulnerability Analysis Summary
- Software Bulletin Details
- Superseded Bulletins
- Windows Software Update Agent Rollout Status
- Reboot Status
- Software Update Delivery Summary
All other existing reports, including custom reports, will not be included or upgraded to 7.0.
Retired managed computers no longer consume a license nor do they appear in vulnerability reports
Managed computers with a “Retired” status will release their license, freeing it up for new computers coming online. These computers will also no longer appear in the Compliance and vulnerability reports.
Notification Server 7.0 hierarchy and organizational view features are supported
Notification Server 7.0 has new hierarchy features that let you manage a group of Notification Servers by simply configuring a parent that passes all configuration settings and resources to child Notification Servers. This functionality is supported in Patch Management Solution for Windows through two separate replication rules: one to allow the replication of Patch Management Import data based on the managed languages of the child Notification Server and one to allow the selection of Software Update policies to replicate to the child. Summary compliance information is also sent up the hierarchy daily and can be viewed in the Microsoft Compliance Summary report.
Distribute software updates across multiple time zones
You can now simultaneously distribute software updates to managed computers across multiple time zones, at a time specified on a single Notification Server. Previously, software updates were installed according to the time on managed computers’ clocks. The new user interface control is found in the Software Update Policy Wizard scheduling options, with the choice to distribute packages at server time, client time, or UTC time.
Offline Microsoft Patch Management Import files are now supported
Notification Servers without Internet access can now download Microsoft Patch Management Import files from a local caching server. Taking advantage of new Notification Server 7.0 hierarchy features, enabling software bulletins on a child Notification Server (without Internet access) will download the relevant files from a parent Notification Server, where the files are cached.
Disable superseded software updates
The field, Disable all Advertisements for Superseded Software Updates, on the Microsoft Patch Management Import task lets you disable any Software Update policies with superseded software updates. You can also control this function and set a schedule for it in the Disable Superseded Software Update Advertisements server task. After PMImport has run, any Software Update policies with superseded software updates are disabled and the administrator is notified by the Disabled Advertisements Notification Server policy (which must be enabled). An obsolete Software Update policy is disabled only if you created a new one from the superseding software update.
Inventory rules only run against applicable inventory and have increased performance
To reduce bandwidth use, inventory rules that run on managed computers only run against applicable inventory items. For example, if a managed computer has Windows XP SP2 installed, the Software Update Agent will run inventory against and report on items only applicable to Windows XP SP2. The inventory rules are now contained in an SQLite database increasing the speed of the inventory process of reading of the xml file used previously.
New task 'Check Software Update Package Integrity'
This is a Task server task and has 3 functions it can perform; Delete physical packages for discovered orphaned software packages, Delete physical files for packages with no associated advertisements and Relocate existing packages if default software update package location has changed
Notification can be sent when new Bulletins are available
Administrators can configure the Microsoft Patch Management Import task to send a customized message to specified recipients at the completion of Microsoft Patch Management Import downloads.
Quicker distribution of software updates
Behind-the-scenes modifications have increased the distribution time of updates being rolled out to computers. Resource targeting has been modified to be more efficient, it is only looking at the applicable dataclass now. The inventory rule process has been streamlined.
NOTE: This information was taken from the release notes and modified slightly to remove entries that were not new features and clarify the information.
From the beta site : CMS 7.0 SP1 New Feature Highlights
Canned commercial software application definitions are included to more accurately identify installed software in the environment.
Inventory policies are greatly simplified.
Collection of detailed file inventory has been optimized
Inventory policy management and status monitoring has been added to the improved Inventory Portal.
Patch Admins can use a consolidated “worker view” (page or portal) from which they can accomplish or access primary Patch functions; similar views are also provided for software delivery functions and monitoring functions (via Altiris Server Management Suite).
Software packages and software data can be imported from Wise Package Studio into the library and catalog, respectively.
Patch Admins can identify missing software updates on Mac OS X and can use the console to distribute and install the missing updates.
Automated patching is added for Adobe applications: Reader, Acrobat and Flash.
pcAnywhere solution adds custom port configuration for console and client and expanded approve connection control with a super user that can bypass approval
Important change: How is the Software Management Framework Software Discovery task utilized by Inventory Solution in 7.0 SP1?
| Question | |
| In 7.0 GA for CMS, the Software Discovery component that captures Add/Remove Program data was only included as part of the Software Management Framework. In Inventory Solution 7.0 SP1 this component will now be launched by Inventory Solution as part of the Inventory Solution Policies or Tasks. The following information will help provide understanding to how Inventory uses this component. | |
| Answer | ||||||||||||||||
| Software Discovery will be executed by the Inventory Solution Policies or Tasks in SP1. The option is labeled 'Software - Windows Add/Remove Programs and UNIX/Linux/Mac software packages' when an Inventory Policy or Task is edited or created. When this is checked, we'll run the Software Discovery as part of the Policy or Task, with the following intelligence as far as if we will send all data or only delta data. We've built in logic to look to see if the Resource GUID of the system has changed or not:
The SMF cache holds all Add/Remove Program data, and leaving the cache means only a small subset of changed data will be sent up. It's important to delete this cache if the server, for whatever reason (the record was deleted, the agent was directed to a new NS, etc...) no longer has the data for the system. | ||||||||||||||||
05 September 2009
Altiris™ Deployment Solution 6.9 SP3 from Symantec Release Notes
In SP3, support for Windows 7 and Windows Server 2008 R2 was added. See also added the Features in this Release section.
To see the Release Notes for the Deployment Solution 6.9 SP1 and SP2 releases, see Knowledge Base articles 42696 and 46383.
Deployment Solution is part of the following suites:
- Altiris™ Client Management Suite from Symantec
For release notes, see Knowledge Base article 48420. - Altiris™ Server Management Suite from Symantec
For release notes, see Knowledge Base article 48733.
Features in this Release
The following are features of this release:
- We added support for the Windows 7 and Windows Server 2008 R2 operating platforms. For detailed information on supported platforms, please see Knowledgebase article 47794
- PC Transplant (included with Deployment Solution) was updated to support Windows 7 migrations from Windows XP and Vista. For more information, see the PC Transplant Release Notes article 48704.
- DAgent can now be uninstalled from the DS Console. To access the uninstall option, right-click the client in the DS Console.
- DAgent supports the customdata.ini file.
- The DS Linux preboot automation environment now uses the openSUSE 11.1 Linux kernel, which is the kernel 2.6.27.7 version.
- The Deployment Solution installation adds the Ghost Walker tool that you can use manually. There are no integrated tasks or jobs in Deployment Solution for Ghost Walker, however.
- New options were added to the evaluation mode DeployAnywhere. You can now specify a file name for the report and log files, so that multiple computers write to separate files. The logPath option and the logId option can be used together or individually. logPath contains the fully qualified path to where the DeployAnywhere log files are written. logId is a string that is prepended to the log file names. For example, Ghdplyaw32.exe /target=c: /eval /logPath=z:\logs /logId=zzz.
25 August 2009
When scheduling jobs in Deployment Server, certain jobs will not run
When scheduling jobs in the Deployment Server console, the job will not run. Sample jobs that are included with Deployment Server run but the user-created jobs do not.
Cause
When the job is created, a command is processed to insert a record into a task table. A trigger in that table fires to create a record in the task table and then the task table has a trigger that is supposed to insert a record into the event_condition table if none is found. This last step is what is not occurring. This can be a result of a SQL setting "Nested Triggers".
Resolution
Ensure that SQL server is configure to allow nested triggers. This setting can be found in SQL Enterprise manager by right clicking on the server node and choosing properties. On the Server Settings tab, there is a checkmark that reads "Allow triggers to be fired which fire other triggers (nested triggers)."
Once nested triggers are allowed, the job(s) in question will need to be re-created and should run when scheduled.
Subscribe to:
Posts (Atom)