Hallo zusammen,

kann mir einer von euch auf die Schnelle sagen, wie ich in DSM 2017 den Neighborcast Status Service auf den Clients aktivieren kann, sodass per http://<Clientname>:56788 eine Abfrage des Neighborcast Status möglich ist? Ich sehe im StatusService_#.log unter NiLogs\NeighborCast, dass der Status Service zum letzten Mal unter der DSM 2017 Beta am 20.12.2017 gelaufen ist. Seitdem kein neues Log (vermutlich weil ich auf DSM 2017 RTM aktualisiert habe) und im Release Build der erst auf den Clients eingeschaltet werden muss... aber wie?

Danke für kurze Info, Grüße und schönes Wochenende

Frank

Hi again,

I want to run Rule Analyzer on an endpoint. However, I noticed that Application Control Agent is not listed in services. How can I install or configure this?

The Application Control agent is installed on the endpoint.

1. 1.On the Start menu select Control Panel.
2. 2.Select Administrative Tools.
3. 3.Double-click Services.
4. 4.Locate the Application Control Agent.

Thanks!

Has anyone had any success creating new Recurrence Patterns for use with the Recurring Activity Management Design App?

I've been working with Support on this as well but I'm interested in ideas from the community.

I'm tackling understanding Boo, so my calculations may not be correct even though they pass syntax.

Based on the modified calculation by Support (thanks Martyn) to recur on Monthly, I attempted to calculate for Quarterly and Annual as well.

Please have a look at my calculation formula from the Create Task attribute on the Recurring Activity business object in the Recurring Activity Management module and see if it makes sense.

if RecurringActivity._RecurringActivityPattern._Name == 'Monthly':

               currentDate  = RecurringActivity._StartDate.Day

               if currentDate == DateTime.UtcNow.Day and RecurringActivity._StartDate.AddHours(1).Hour == DateTime.UtcNow.Hour:

                       return true

        if RecurringActivity._RecurringActivityPattern._Name == 'Quarterly':

               currentQuarter = RecurringActivity._StartDate.Month

               if currentQuarter == ((DateTime.Now.Month - 1) / 3) + 1 and RecurringActivity._StartDate.AddHours(1).Hour == DateTime.UtcNow.Hour:

                       return true

        if RecurringActivity._RecurringActivityPattern._Name == 'Annual':

               currentYear = RecurringActivity._StartDate.Year

               if currentYear == (DateTime.Now.Year - 1) + 1 and RecurringActivity._StartDate.AddHours(1).Hour == DateTime.UtcNow.Hour:

                       return true        

Additionally, is there a recommended method of testing this?

I have been creating an Activity and advancing the date and time on the server to force the Activity to create the tasks. I'm wondering if there is another method that might be better.

Any advice would be greatly appreciated.

Hello There,

I managed to import AD Security Groups into Service Desk. However, I want to import (map) the members of these security groups to be members of the groups that were created in Service Desk. I managed to find an attribute in AD that lists the users groups (The groups that he is a member of). What is the best way to get these users automatically added into the Service Desk Groups?

Hey everyone,

We're trying to set up a custom action on our Citrix XenDesktop servers which adds an Active Directory Domain Group to the local "Remote Desktop Users" group.  Before EM, we had a script that we used to do this, but we would like to import it into our Environment Manager policy so that it runs on the machine when it starts up.  Here's the custom action:

 $DomainGroup = "GroupToAddTo"
 $LocalGroup  = "Remote Desktop Users"
 $Computer    = $env:computername
 $Domain      = $env:userdomain

 ([ADSI]"WinNT://$Computer/$LocalGroup,group").psbase.Invoke("Add",([ADSI]"WinNT://$Domain/$DomainGroup").path)

If I go into the server and execute these actions, it runs without any issues.  If I put it into the Computer->Network Available trigger, however, I get the following event in the management console:

Any chance one of you gurus out there has an idea of what's going on here?  I've attempted to run it as both system and a user account, and I get the same error both times.  Thanks in advance!

Running 2016.3

In provisioning history I see jobs still showing as running and are not in scheduled tasks, some as far back as a year. I was told a long time ago to delete the computer from Landesk then run a full inventory history.

Sometimes these running jobs even though they aren't in scheduled tasks and may be 6 months old get turned back on and a computer will try to provision itself.

Is there any other way with a script to clear this?

We want the ability for a project manager to assign tasks to individuals.  So we created a Project Management module.  A project can be created and have tasks associated with a project.  Tasks then are assigned to an analyst.

We want to have an analyst log the amount of time they spend on doing a task.  I want them to open the task window, have an action, Add Time, that opens another window where they can add the amount of time (decimal format) they've worked on the task, select Enter, and have that time added to whatever was already entered - a running time for the task.  For a given task, there may be several times entered.  An analyst may work 1 hour one day, 2 hours the next and so on.

I want the total time for a task to show on my task window.  As the analyst adds time to a task, this total time will increment accordingly until the task is completed.

I've create a business object (BO), ProjectTaskTimer, and made it a collection on my ProjectTask BO.

In my BO ProjectTaskTimer, I have an attribute, AddTime.

In my BO ProjectTask, I have attributes LastAddedTime, TotalTime.

There can be multiple times logged for a task, so LastAddedTime is a calculation

import System

static def GetAttributeValue(ProjectTask):

Value = ProjectTask._ProjectTaskTimerCol._CumlativeTime

return Value

When I test this calculation in the console I get:

'Touchpaper.Framework.Data.DataObjectListProxy._LastAddedTime' not found

Is this because LastAddedTime is coming from a collection and the calculation cannot determine what value is to be used?

I feel I'm going down the wrong path on this one.

I'm open to other ideas on how to approach this.

For some time, our company has had a strict rule with our email listeners in Ivanti. We've only allowed internal email addresses to freely create incidents in to the system and create a record if no match exists. Due to a changing environment, we are now considering allowing external email addresses to create incidents in to the system. We wouldn't allow them to create new employee records, but would still allow the email to create an incident. I was wondering how some of you may have dealt with the same situation. Does anyone have any advice on "flipping the switch"? Any pointers in dealing with spam email creating tickets? Our company spam filter is pretty good but they get by now and then so this is one issue that worries me. I've never had to block a specific email address or domain from creating tickets in Ivanti but is this something that anyone has experience with?  

Has anyone written a process that will allow your customers/employees to reset their password to whatever they would like for an Explict login?  The issue is that Workspaces doesn't have a shortcut to allow for password reset via the interface.  How do you allow your folks to do this if you use Explicit Login methods via Workspaces?

Dear All,

I've a problem in my LDMS 9.60 SP2 with an incorrect IP address of the device. I do not know why but after installing the Landesk Agent on the client device, it appeared in the LDMS console with an incorrect IP. Because of that I'm not able to execute the "Patch and compliance scan" and deploy new patches to the client server.

I am quite new to the Landesk related topics, so I am asking for help as for a beginner . I have read a lot of articles about this problem, but none has been helpful to me.

Hi,

I'm trying to run a batch file that will remove Office 2013 from our machines. However, I have encountered an issue where the batch file doesn't get applied on the client PC (it gets stuck at the Core initiated stage).

Here is what I have done so far:

1) Created a batch file that will use an XML file to silently uninstall Office:

@ECHO OFF

IF EXIST "%CommonProgramFiles%\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" (

   "%CommonProgramFiles%\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall STANDARD /dll OSETUP.DLL /config "C:\Silent Uninstall Config\SilentUninstallConfig.xml"

    )

2) On the scheduled task properties, I have set the task to run as LocalSystem and added the SilentUninstallConfig.xml file and the entire Office folder as additional files. The folders that contain all of the relevant files have read permissions for the 'Everybody' group

3) I check Event Viewer on the targeted machine but no entries appear. I have also checked the LD logs and this is what appears:

PolicyTaskHandler.exe.log

10/17/2017 12:27:05 INFO  12992:1     RollingLog : Calculating hash for \\server\c$\SilentUninstallConfig.xml

10/17/2017 12:27:05 INFO  12992:1     RollingLog : Hasherize: failed to calculate hash for file '\\server\c$\SilentUninstallConfig.xml'

10/17/2017 12:27:06 INFO  12992:1     MDMConsole.MDMTaskHandler : MDMTaskHandler.FilterNodesAndProcess(): Called with 1 computer IDs, Task ID 1183

10/17/2017 12:27:06 INFO  12992:1     MDMConsole.MDMTaskHandler : Queueing 0 devices to notify pipe.

10/17/2017 12:29:50 INFO  12992:1     RollingLog : [Task: Batch - Office2k13 Uninstall - 17/10/2017 12:24:33, TaskID: 1183, ProcID: 12992] : PolicyTaskHandler finished processing task, setting task status to [PULL_AVAILABLE]...

LANDesk.Scheduler.GlobalScheduler.exe.log

10/17/2017 12:29:27 INFO  25364:1     RollingLog : Hasherize: failed to calculate hash for file '\\server\c$\SilentUninstallConfig.xml'

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : Updating allowed machines if needed.

10/17/2017 12:29:28 INFO  25364:1     RollingLog : AllowedMachines.UpdateAllowedMachines2: Updating allowed machines for task:[1183]

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : Calling method to perform remote operations.

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : Before hasherize of C:\Program Files\LANDesk\ManagementSuite\landesk\files\LDN-LDSK-001-task-1183.pmf

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : After hasherize

10/17/2017 12:29:28 INFO  25364:6     RollingLog :         1183 : Troubleshooting guidelines

The global scheduler has delegated task 1183.

  The task was delegated by (source): <server>

  This task was delegated to (dest) : <server>

  Using GlobalTask_Idn              : 315

This delegation was done by creating an entry in the GlobalTask table on the destination core (the task id is provided above).

The Entry in the GlobalTask should have set to state column to 1 to indicate that it is a new task and should be processed.

The scheduler service should detect and process this delegated task, please check scheduler service log on the destination core to see if it successfully detected the GlobalTask entry.

10/17/2017 12:29:28 INFO  25364:6     RollingLog :         1183 : Waiting for task 1183 from <server> to complete on <server>.  Checking every 10 seconds, inactivity timeout after 1200 seconds.

10/17/2017 12:29:48 INFO  25364:6     RollingLog :         1183 : <server> has completed task with status 5 (Delegated task complete.)

10/17/2017 12:29:48 INFO  25364:6     RollingLog :         1183 : Proxy work thread for core <server> is complete.

10/17/2017 12:29:48 INFO  25364:1     RollingLog :         1183 : Thread is complete, synchronizing status information.

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog :         1183 : Remote operations complete, synchronizing status information.

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog :         1183 : Task complete, returning status 12

schedpkgupdate.exe.log

10/17/2017 12:47:37 INFO  8328:1     RollingLog : Calculating hash for \\<server>\c$\SilentUninstallConfig.xml

10/17/2017 12:47:37 INFO  8328:1     RollingLog : Hasherize: failed to calculate hash for file '\\<server>\c$\SilentUninstallConfig.xml'

10/17/2017 12:47:37 INFO  8328:1     RollingLog : [Stop] Republishing complete.

10/17/2017 12:48:04 INFO  27716:1     RollingLog : [Start] Republishing policies...

10/17/2017 12:48:04 INFO  27716:1     RollingLog : Performing policy update...

10/17/2017 12:48:04 INFO  27716:1     RollingLog : Core has changed, resetting the core language cache

10/17/2017 12:48:04 INFO  27716:1     RollingLog : Getting core language for Key:CurrentLanguage Language:ENU

No entries on the SDClient log file exist.

If anybody has any idea on what is going wrong then the help would be appreciated!

Thanks in advance

Is there a way to combine these two?  My auto discovered products are duplicates of the DA, just named slightly differently. 

Hi

It's possible to install Ivanti Endpoint Manager using Windows autentification mode in SQL Server, or it's mandatory to use mixed mode.

Thanks.

Roberth

Is it possible to have the system generate a URL to a specific role like, "IT Knowledge Editor"?

Is it possible to then have this open an "InPrivate" window so that the role used for completing this article review task does not interfere with the user's current role?

Why? Only our IT Knowledge Editor is able to see the edit view for articles. All other roles use the Read view.

When they click the article link in the Task notification I'd like to drop them into that editer role without interfering with the access of their other role. We are not ready to launch Self-service.

Current URL:

https://heat.company.com/HEAT//Login.aspx?Scope=ObjectWorkspace&CommandId=Search&ObjectType=FRS_Knowledge%23Reference&CommandData=KnowledgeNumber%2c%3d%2c0%2c11702%2cstring%2cAND%7C

Waiting for the solution.

Hello,

We have problems with different users in our organization. When you start VulScan, the PCs are blocked with excessive memory usage and in some cases 100% disk usage creating a system lock.
In our infrastructure is installed McAfee antivirus, and reading some thead we have seen that there could be an inability between the two.
We have taken steps to exclude the entire Landesk folder from the virus scan, but unfortunately the problem still occurs.
Do you have any advice to give me to try to permanently solve this problem?

Landesk Software 10.1.10.287

Best regard

-Alex

All of the images past page 98 are missing, ie:

This has been the case since documentation for 15.2

Could we get that rebuilt?

Thanks,

Phil

Good afternoon all Ivantiers

I've got a bit of a curly one, which is probably just some random option that I have set incorrectly.

The knowledge base in ISM is very much out of the box, and only has "IT Knowledge" and "Customer Knowledge" setup as the collections. Customer knowledge is for customers (self service role), IT Knowledge only visible in other roles.

From Self service, when customers go to "Search" and look for knowledge articles, the search only finds knowledge articles in the "Customer Knowledge" collection - This is correct.

But when they go to "Knowledge Centre", all published knowledge articles are listed. This includes articles in both the IT Knowledge and customer knowledge roles. If you click on one of the Customer Knowledge articles, it comes up correctly. If you click on one of the IT Knowledge articles, it comes up as an undefined article or the last article that did work.

For example:

We have 38 published customer knowledge articles. If you go to the knowledge base from self service, it shows that there are 107.

The first one in this list is in customer knowledge, the second is in IT knowledge. Both show the description of the article.

This is what we see when clicking on the second article.

So it's hidden, but still should not show up in the first place.

The permissions for articles are set correctly for the self service role, as per How to limit Self-Service Knowledge to see only certain Collections .

Would anyone have ideas of why these would show up in the knowledge base? (Or can you say which search is used to build this list?)

Thanks in advance.

Jeff

Hi,

How is it best to deploy an MSU file? I cannot see it listed in patch manager.

Can I request to have it included? Or is it best to run it as software deployment, if so how?

Many thanks,

Dan.

Auf aktueller Hardware hat HP das BIOS Flash Tool irgendwann komplett umgestellt/umprogrammiert. Statt direkt unter dem OS zu flashen wurde der Vorgang nur vorbereitet.

Ergebnis war, daß es keine returncodes mehr bei keinem oder fehlerhaften BIOS Passwort gab und somit der Flashvorgang immer angestartet wurde.

Nach dem Reboot wurde dann ggf. das BIOS Passwort abgefragt oder wenn es zufällig gestimmt hat eine Option zum Abbruch angeboten.

Zudem ging der Client dann irgendwas einfach aus und es passierte 60 Sekunden rein gar nichts bis es auf einmal wieder weiter ging. Darüber wird zwar kurz mit einem Hinweistext informiert, aber wer liest das?

Das ist in einem Enterprise Umfeld beides ein NoGo.

Heute hat endlich HP die notwendigen Infos rausgerückt und auch zugegeben das diese im Moment nicht öffentlich zugänglich sind.

Der zusätzliche Parameter um wieder das alte Verfahren zu erhalten lautet -wmi

Ich habe auch eine Liste mit aktuellen Returncodes, wenn Interesse besteht poste ich die auch noch.

Ach ja, mit -l"[path]" kann man auch bestimmen wo das LogFile landet.

Es gibt noch weitere Parameter wie z.B. -z, aber die wollte man mir dann doch nicht geben weil teilweise viel schief gehen kann damit.