Hello all,

   I have downloaded the Next Gen patch definitions.  I am unable to download the associated patch file for any of these.  Most give me this error that the hash "does not match with the host". 

Has anyone else encountered this?

-Pat

Hi @ all!

Seit dem Update auf 2017 fallen uns vermehrt - sagen wir mal unschöne - Verhaltensweisen der DSMC auf.

- Wenn man mehrere Policyinstanzen markiert fängt die DSMC erst mal ne Ewigkeit an zu laden. Je mehr Policies desto länger das Laden

- Wenn man in der Ansicht das Patchmanagement einblendet und etwas den Baum runter navigiert und markiert (z.B. Citrix -> Receiver)
und anschließend in der Softwarebibliothek die Patche durchsucht bleibt der Focus des Patchmanagements aktiv und man sieht z.B. nur die Patches des vorherigen auswahl (z.B. wie vorher Citrix Receiver)

- Nach lokaler Ausführung der Softwareinstallation (F7) gehen alle Supervisor-Rechte verloren und man muss die DSMC neu starten damit man überhaupt wieder damit arbeiten kann, sonnst kommt die Meldung

Warning (Module:esiConsoleExt, Severity:0x03): Error #-536598768:

Der angemeldete Benutzer darf die Aufgabe für das Object mit der ID 175 nicht ausführen, das Recht 'Lesen' (read) ist erforderlich.

The authenticated user is not authorized to perform this action on an object with ID 175, the right 'Read' (read) is required.

Sporadisch passiert das auch einfach mal so, mit F7 ist es zumindest bei uns reproduzierbar.

Kann das verhalten jemand bestätigen oder hat ggf. sogar einen Workaround?

Danke schon mal dafür :-)

Hey everyone,

I've been having this issue with my MC9190s and MC92N0s for awhile now and I still haven't figured it out.

Basically we run using Produce Pro and the text seems to be running off the screen. I'm not allowed to take the simple route of just enabling the horizontal scroll.

Here's what going on:

As you can see, the text cuts off at 2. There is more after this. Look below: (All I did to get it all to display for this picture is take the text down to 11 rather than having it at 13, however its far to small.)

It doesn't just change the login screen, it happens all through the software. It's super hard for them to do their job when this is happening. Any ideas?

Hello all,

   I am installing the SU2 to my test server (currently 2017.3 SU1).  I keep getting this error:

---- File lines of Ivanti 2017.3, SU update.log file ----

ERRORSUMMARY_BEGIN

Incorrect function.

ERRORSUMMARY_END

Exiting with Return Code: 1

---- End of file ----

I am using a local database on this test server.  My production server has the DB on a separate SQL server.  This is a Windows 2012 R2 server, with the latest updates installed.  I have attempted to resolve this by rebooting the server.  I have tried manually stopping the Ivanti/LANdesk services.  I have run the above command, "coredbutil.exe /updatecannedreports,90000" in an elevated command prompt.  I did not get an error when I ran this.

I am not sure what else to try.

-Pat

Hello All,

I am in need of assistance with building an xsl file for an email listener I am configuring. I am very close (with help from a template) but stumped on one section. I am needing the listener to create the service request based on the name of a person from which the email defines by "Custid="user_name". Currently the xsl file I am working with creates the service request from who the email is sent.

An example of what the file is current doing would be: I send an email from the account jdoe@example.gov. The ticket will be created under the name John Doe because John Doe has a user account in our system.

If I was to send an email from sharepoint@example.gov, no tickets is created because there is no associated account for SharePoint in our system. The email that the requests will be coming from will be like this example though, so the ticket needs to be created based on a parameter in the email. An example of the incoming email for reference would be:

Subject:SharePoint ADM Request

Custid=jdoe

From this email, I need the xsl file to pick out Custid=jdoe, parse that information, and then create the service request in the name of John Doe. "jdoe" is John Doe's user name in our system for clarification.

I have attached the Main xslt file (main_xslt.txt) and the Service Request xsl file (SR_import.xsl) I am working with to try and accomplish this. Everything else in these files is working to my expectation, we are just focusing on the ticket creation based on "Custid" for this post.

My best guess is modifications to the section below from the SR_import.xsl file will need to be made, but I am not sure:

<!-- find the profile link recid of the email sender, they will be the service requestor/customer-->

<xsl:variable name="ProfileRecId">

<xsl:for-each select="BusinessObjectList/BusinessObject/RelatedBusinessObjectList/RelatedBusinessObject/BusinessObject">

<xsl:choose>

<xsl:when test="@Name = 'Employee'">

<xsl:for-each select="./FieldList/Field">

<xsl:choose>

<xsl:when test="@Name = 'RecId'">

<xsl:value-of select="."/>

</xsl:when>

</xsl:choose>

</xsl:for-each>

</xsl:when>

</xsl:choose>

</xsl:for-each>

</xsl:variable>

Please let me know if any of this needs any further explanation.

Thank you very much to anyone assisting!

Running 2016.3

Anyone seen this message during deploying a image?

I am deploying a Windows 10 image on a mini laptop. The os partition was shrunk to 30gig. When the template starts in the deploying image it glides through partition 1 & 2 but starting in the os partition 3 it says resizing then comes up with the error message. This laptop has a ssd hard drive and I wonder if that has anything to do with it. All other models of laptops image fine.

I have made edits to the survey we want sent out but I'm not able to find the email to edit. 

I'm looking under Business Object -- Incident -- Business Rules -- Triggered Actions

• I seed a Send Survey upon Incident Closure which is actually turned off but people have submitted surveys.  When I click on to edit I can see the email but the subject line there isn't the same as the email that was forwarded to me (so I'm not sure this is the correct notification).
• The help files have me look under Editing and Calculation Rules but I'm not seeing anything about surveys under this heading.

I will also need for this to be set up correctly under Service Requests as well.  Like I mentioned the emails about the surveys are being sent out but I can't find the right location to edit the emails.

We've been using the system for about a month now lol and trying to find everything is a task!

Thanks,

Daniel White

I have been asked to write a package to remove all versions of adobe reader in my environment.  We have everything from 9 to 11 and DC, so trying to create packages to uninstall all the various incremental versions doesn't seem feasible.  Instead, I wrote a 2 line powershell script that will accomplish this easily:

$findapp = Get-WmiObject -Class win32_product | where-object -FilterScript {$_.Name -like "*Reader*"}

$findapp.uninstall()

(I'm aware of the get-installedsoftware option, but this will work, and is a lot less code considering the number of possible items installed..)

I created a distribution package with that script, and it will not run.  Typical results in the sdclient_taskxxxx log is as follows:

Mon, 19 Feb 2018 17:18:01 ******* sdclient starting to process task *******

Mon, 19 Feb 2018 17:18:01 Task id to process: 4363

Mon, 19 Feb 2018 17:18:01 Command line: /policyfile="C:\ProgramData\LANDesk\Policies\CP.4363.RunNow._p4bNGvpgo3tj9xLYTTL+4Kcji9g=.xml"

Mon, 19 Feb 2018 17:18:01 The nostatus flag has NOT been set.

Mon, 19 Feb 2018 17:18:01 Core name 'CORE-SERVER.DOMAIN.COM' obtained from the registry

Mon, 19 Feb 2018 17:18:01 Sending task status, cmd line -coreandip=CORE-SERVER.DOMAIN.COM -taskid=4363 -retcode=229392442 "-ldap=CN=Administrative user - ,OU=Workstation,OU=Admins,OU=Accounts,DC=DOMAIN,DC=COM" -pkgid=xxxx

Mon, 19 Feb 2018 17:18:02 IsFileInCache: Cache2.GetFilePrevCountEx failed - path=\\core-server\distribution\scripts\UninstallAdobeReader.ps1

Mon, 19 Feb 2018 17:18:02 File (\\core-server\distribution\scripts\UninstallAdobeReader.ps1) is not in cache

Mon, 19 Feb 2018 17:18:02 The nostatus flag has NOT been set.

Mon, 19 Feb 2018 17:18:02 Core name 'CORE-SERVER.DOMAIN.COM' obtained from the registry

Mon, 19 Feb 2018 17:18:02 Sending task status, cmd line -coreandip=CORE-SERVER.DOMAIN.COM -taskid=4363 -retcode=229392444 "-ldap=CN=Admin User,OU=Workstation,OU=Admins,OU=Accounts,DC=Domain,DC=COM" -pkgid=2541

Mon, 19 Feb 2018 17:18:03 About to call DownloadFiles (1 files) with these settings:

Mon, 19 Feb 2018 17:18:03 m_allowedBandwidthWAN: 50

Mon, 19 Feb 2018 17:18:03 m_allowedBandwidthLAN: 75

Mon, 19 Feb 2018 17:18:03 m_discardPeriodSeconds: 604800

Mon, 19 Feb 2018 17:18:03 m_preserveDirectoryStructure: 1

Mon, 19 Feb 2018 17:18:03 m_bUseWanBWForPush: 0

Mon, 19 Feb 2018 17:18:03 m_bSynchronize: 0

Mon, 19 Feb 2018 17:18:03 Allowed download methods(m_downloadControl):

Mon, 19 Feb 2018 17:18:03 PeerOneSource

Mon, 19 Feb 2018 17:18:03 Peer

Mon, 19 Feb 2018 17:18:03 Source

Mon, 19 Feb 2018 17:18:03 m_preferredServerControl: AttemptPreferredServer

Mon, 19 Feb 2018 17:18:16 Updating system environment variable LDMS_PREFERRED_SERVER: Preferred Server

Mon, 19 Feb 2018 17:18:19 The nostatus flag has NOT been set.

Mon, 19 Feb 2018 17:18:19 Core name CORE-SERVER.DOMAIN.COM' obtained from the registry

Mon, 19 Feb 2018 17:18:19 Sending task status, cmd line -coreandip=CORE-SERVER.DOMAIN.COM -taskid=4363 -retcode=229392444 "-message=100%" -pkgid=2541

Mon, 19 Feb 2018 17:18:19 DoDownloadFromSourceSteps: DOWNLOAD_ERROR_GENERAL_FAILURE

Mon, 19 Feb 2018 17:18:19 Download Error: err=1, path=\\CORE-SERVER\distribution\scripts\UninstallAdobeReader.ps1

Mon, 19 Feb 2018 17:18:20 processing of package is complete, result -1918107543 (0x8dac0069 - code 105)

I made sure that the download folder had read access to everyone and Domain Computers.

I tried Using a batch file to copy and launch the script.

I tried with domain admin credentials in the "Account" tab.

I tried to run from the core, and download only from the core, and to use the preferred server, as normal.

I entered the path listed in the download error in a browser, and the file popped right up.

I set the user account control off and the execution policy to "unrestricted."

I also tried putting "-execution policy bypass" in the command line.

If I manually copy the script over and then launch it from a command prompt or the powershell ISE it works fine and removes acrocbat reader. 

I would appreciate some insight into how this process works, as I haven't found much detail in the ivanti documentation.

I suspect there's a security setting somewhere that doesn't like allow powershell scripts to be copied and executed, but I'll be darned if I can find it.

I recently started noticing that on a lot of my 2012 R2 servers,  show that Microsoft Patch MS14-053 is missing.   I went through a patch cycle thinking this would be taken care of but I look again this month and they are still showing as missing.  I download the patch manually to the server and start the install.  It fails with the error  "The update Is not applicable to your computer" 

This is happening on multiple servers

KB that is trying to install or says missing is kb2973114.

I can't seem to find any prereq that is needed either.  Anyone ever seen anything like this?

Can anyone tell me when knowledge search will be available for the mobile self service UI? Is it even on the roadmap? self service without object matching is very limited.

Is there anywhere in the admin console to configure these icons or are they hardcoded?

Hello there, which style editor attribute is in charge of the color of these panels? They always seem to default to blue?

Hello there what are the plans for a S4B connector into ISM? I have many customers asking this and would like an official response from Ivanti. Thank you kindly.

Does anyone know, when creating a new GoldMine contact record via an API call will the system duplicate check on Phone Number and/or E-mail address?
If it does how will GoldMine react if a duplicate is detected (error/continue/merge)

My initial though is that it will only dup check on Email address and just not add the Email address if there is a dup (bit like the import process), but someone with more experience with the API may be able to  provide the correct answer.

Auf aktueller Hardware hat HP das BIOS Flash Tool irgendwann komplett umgestellt/umprogrammiert. Statt direkt unter dem OS zu flashen wurde der Vorgang nur vorbereitet.

Ergebnis war, daß es keine returncodes mehr bei keinem oder fehlerhaften BIOS Passwort gab und somit der Flashvorgang immer angestartet wurde.

Nach dem Reboot wurde dann ggf. das BIOS Passwort abgefragt oder wenn es zufällig gestimmt hat eine Option zum Abbruch angeboten.

Zudem ging der Client dann irgendwas einfach aus und es passierte 60 Sekunden rein gar nichts bis es auf einmal wieder weiter ging. Darüber wird zwar kurz mit einem Hinweistext informiert, aber wer liest das?

Das ist in einem Enterprise Umfeld beides ein NoGo.

Heute hat endlich HP die notwendigen Infos rausgerückt und auch zugegeben das diese im Moment nicht öffentlich zugänglich sind.

Der zusätzliche Parameter um wieder das alte Verfahren zu erhalten lautet -wmi

Ich habe auch eine Liste mit aktuellen Returncodes, wenn Interesse besteht poste ich die auch noch.

Ach ja, mit -l"[path]" kann man auch bestimmen wo das LogFile landet.

Es gibt noch weitere Parameter wie z.B. -z, aber die wollte man mir dann doch nicht geben weil teilweise viel schief gehen kann damit.

Hello,

I'm new to Ivanti Workspace Control (RES) and i've been trying to create a managed Microsoft shortcut but it doesn't work. Can anyone perhaps tell me wat I should configure in the "command line" field?

Kind regards.

I reached out to support and got a quick answer that didn't really provide details.

Our connection to AD was not setup to pull in the Managers name for the Employees.  With us getting ready to launch Self Service and Service Requests, I need this field to be populated.  Support helped us get an update into the connection, which gives me this information going forward, but.... I have no way of doing a 1 time force update to pull this for all Active Employees.

The suggestion was to do a new import of records.

Here is where I am stuck.

How?

Do i make a new csv and import it? how do I do this?  I can't seem to find any good tutorials. I will want to test this in my staging environment first as well.  What happens to any current Employee Records? does it just update them?

Thanks!!

Hi

I am very new to the forums and Landesk in general

I have a problem upgrading windows 10 from 1511 to 1709 using patch and compliance.

Here is what I've done so far

I followed the below guide, downloaded the ISO from our Microsoft portal, we have both Enterprise and Pro in our environment so I created a file for both of them and  Landesk accepts them both as downloaded

How to upgrade to Windows 10 Creators Edition using Ivanti Patch Manager

Then I distributed the ISO's to our preferred server and created a repair job

this job I sent to a specific machine and within 2 minutes it showed Success

now for my stress factor..

Noting happened on the machine itself, I cannot see the package on the machine and it does not patch.

I have created several software packages and set up PXE booting for the environment but this one I cannot solve

I sent a package to the machine to check if I could install to it, and that works as it should

I hope you guys can point me in the right direction

Hi Community members

My organisation is about to embark on the iVanti service manager SaaS version. We currently setting up a Staging environment for this.

There's a couple of things we need to setup to allow Service manager to operate properly.

• Access to on premise Active Directory environment (based on AD Windows 2008 R2)
• SCCM integration
• Outgoing email to on premise Exchange 2010 environment

We use ADFS 3.0 (active directory federated services) and we also have a Web Application Proxy in our DMZ to allow access to on premise services externally. We also use Azure AD to sync our on premise AD into the Azure cloud.

Service manager supports ADFS so we have set this up to allow SSO as well as federated access however this doesn't solve the problem of the import of active directory objects (users) into service manager. The notes I have seem that we need to allow access to our on premise Active directory environment either allowing the ports through our corporate firewall or use a VPN connection, either options we are not comfortable with from a security standpoint.

Our preferences would be to either:

• Use of Azure AD and allow service manager to connect to our Azure active directory
• Allow Active Directory access securely using our WAP in the DMZ but I don't think this option is possible
• create a Read only Domain controller, put this in our DMZ and then allow service manager to connect only to this server for import purposes.

I am interesting in knowing how other organisations have allowed this securely. If either of the above options have been used I would be interested to know how you achieved it.

Many Thanks

Ranj

We are in the process of implementing Workspace manager having come from Citrix UPM. I am wondering if it is possible to set a global exclusion UPM style to exclude the following folders from being saved.

Many thanks,

Mark