Hey Everyone,

I'd like to know if anyone has had any luck with using MobileIron to inject the tenant/site name and possibly even network credentials into the Ivanti Service management app. What about the other Ivanti Apps?

I've tried to find more information about this but came up short.

According to our Mobile Iron administrator, he would need to have documentation and a MDM configuration profile shared with him and that is always provided by the vendor.

Any tips or suggestions would be much appreciated.

Hello:

I´m install an agent in a PC with windows 10 v.1803. The PC don´t upgrade to the console in LDMS v 2016.3. In machines with win 7 it´s ok. How it´s the solution. Thanks

Hoping someone can make this simple for me. We are looking at Upgrading a few thousand computers OSs and I don't want to have to have a technician there to type in the name, but the OS Version is part of the naming convention as is the machine type.

Our Naming convention is a two digit site code, OS Version Code, Computer Type, Asset Tag Number. i.e. 02WTD12345 would be Site 02 Windows Ten Desktop Asset Tag 12345

So down to the questions...

1) What do I have to do in the provisioning template to have it change the Site Code based on the Network the computer is being imaged on? i.e.. Site 02 IP = 02 in the computer name

2) Insert WTD in the Name for Windows 10 Images on desktops, WTL for laptops

3) What Naming Template Magic can I use to trim off all but the last 5 Digits of the Computer Name and then reuse them as the end of the new computer name

Thank you in advance for your help,

Erik

Dear All,

Can we validate the "AD group policy" result in Ivanti Endpoint management Suite?

Thanks,

Dheeraj Meher

Hi, we're on-prem customer and I've noticed some odd behaviour, it's either on the core/DB or agent, I can't quite work out which one.

The inventory on machines is not recording the LDAP group membership properly. For example, my laptop is in 4 different AD groups, EPM is only showing two, but appears to have mix and matched the records. This only appears to be affecting the machines LDAP group info, user group info is fine.

ldapwhomai reports the group membership properly, I ran an outputted inventory scan and found the below, which seems to suggest it's the agent mixing and matching the memberships:

LDAP Groups - Machine - (Display Name:P) - Name =CN=PG-SW-Pilot Group,OU=Software,OU=Standard Permission Groups,OU=Standard Groups,OU=Groups,OU=User and Group Assets,DC=insurance,DC=lan

LDAP Groups - Machine - (Display Name:P) - Description =Pilot Group for Software Deployments

LDAP Groups - Machine - (Display Name:P) - Name =CN=PG-SW-Google Chrome,OU=Software,OU=Standard Permission Groups,OU=Standard Groups,OU=Groups,OU=User and Group Assets,DC=insurance,DC=lan

LDAP Groups - Machine - (Display Name:P) - Description =Add machines for google chrome deployment

LDAP Groups - Machine - (Display Name:D) - Name =CN=Domain Computers,CN=Users,DC=insurance,DC=lan

LDAP Groups - Machine - (Display Name:D) - Description =All workstations and servers joined to the domain

LDAP Groups - Machine - (Display Name:P) - Name =OU=Portable,OU=Swansea,OU=Clients,OU=Hardware Assets,DC=insurance,DC=lan

If I read this right (and I could well be wrong) it's trying to list the groups using the same display names, i.e. all with the display name of "P" - one for "Name =CN=PG-SW-Pilot Group" and one for "Name =OU=Portable,OU=Swansea,OU" and finally "ame =CN=PG-SW-Google Chrome"

I've tried uninstalling the agent/deleting from the console and reinstalling to no avail.

Tried following this: How to set up and configure policies to use LDAP Groups or LDAP Containers  but I don't seem to get any different results.

I've just changed the inventory history to 1 day (we've only just migrated so don't much history to keep) in case it's something in the history causing the issue. But I don't understand how when I get the above output on a manual scan on my computer. I would assume if it was the history or database I should only see that issue on the console, not output on the agent.

Can anyone recommend other settings/logs I can check for what might be causing this issue?

How can i bypass this issue?

Hello there ,

so , we installed recently the iVanti Landesk i have too many old patches ( 1990's ... 2000...2013....2016..2017)

i delete manually the patches from the patch and compliance ==> scan folder but they downloaded again and again

i tried also to deleted them from the local repository but it seems like the same problem

is there any to delete them , i want to keep just the 2018 vulnerabilities

Thank you

Hi,

I would like to write calculation for checkboxes.  I have a form where I need to select one checkbox from other 4 checkboxes. 

Can anyone please explain on which field I should write the calculation?

Any help is appreciated.

Thanks,

Deepali

I created a powershell package.  It's called printers.ps1

This script needs to run as the current user.  So I select run as current user.

When running the script the powershell window appears while the user is using it.

It would be nice if LANDesk incorporated the -WindowStyle switch into the powershell package creation so I can run the script at least minimized.

Now I'm going to create a batch to run a powershell command hidden.  Very frustrating.

Customer has asked that i look into using a  hierarchy-based SLA model:

e.g a Priority 1 Incident is created for Employee A , who has a Platinum level SLA. Employee A's SLA dictates that a Priority 1 Incident should be resolved within 30 minutes. However, they are  is calling to report a problem with the E-Mail Server, which utilizes the Primary Server SLA.

The Primary Server SLA dictates that for a Priority 1 Incident, it must be resolved within an hour. Since the Configuration Item’s SLA is higher in the hierarchy schema, the Incident utilizes it instead of the Customer’s SLA (even though the Customer’s SLA would result in a shorter time to resolution). 

Anyone implemented this in ISM before?

LANDesk Management Console 9.6 SP3 running on Windows Server 2008R2.

We consistently have to fallback to other remote control methods to help users remotely on our team.  There seems to be no rhyme or reason this occurs.  The response time from a click can take up to 30seconds, I've seen it!

We have ran the remote control from various machines around the network, even from the main landesk server and the problem still exists.

This happens on hundreds of newly installed Windows 10 Enterprise 64bit machines.  This can happen on machines that are on the same subnet as the current remote management console as well.  We have removed the posibility that this is network related.  The computers in question are all gigabit connected, SSD/i7 desktops that perform excellently locally.

One noticable nuance is that this problem often occurs on computers that have graphics cards installed.  Nvidia or AMD seems to make no difference.

Has anyone else noticed these issues?

Last week I added some Custom Data fields (registry values for Java Update info).  After the inventory scan, the values showed up for the machines (JavaRT & Policy)

Over the weekend I ran a job to update the registry enties to what we require and inventory got updated as picture above.   However, upon reboot, the registry entries reset to the original values (that;s a different can of worms).

The Inventory has not reverted even with a FULL SYCN SCAN.   If I use REGEDIT on the machine the values are different then the LDMS Inventory.

At this point I can't trust the Custom Data I have in inventory.

How can I get this corrected?

I'm running LDMS 9.0, SP3.

Thanks for your help.

I have an unusual situation.

i have about 16 devices and about 6 of them behave strange. not sure how to fix them any one have suggest me a direction please.

when I scan UPC-A bar-code, it transmit only last 11 character leaving very first char out.

but in data wedge profile it show as decoder param for UPC-A is set as Preamble none.

i could change this to Preamble Sys char. and save it.

but when i go back to run Velocity it scan only the 11 character.

when I come back to data wedge profile, it changed back to "preamble none" by itself.

i try several way, to delete the profile and create new profile and it behave same way.

i deleted the profile, and when i start velocity it create the profile with none option.

if I set as with "sys char" then it changes back to none again.

not sure why it doing it.

Problem once are...

hw TC8000

scanning fw 6.11.0

Build date :20161130

Android 5.1.1 with patch 2016.11.01, kernel 3.4.0, build 01-22-06-L-00-A

the working once are

scanning fw : 6.11.0

Build date : 20170512

Android : 5.1.1 with patch 2017-03-01 kernel 3.4.0 , build : 02-10-02-L-00-A

the symptom is similar to the below issue mention but look like no solution is posted for this.

WT6000 with RS6000 won't scan UPC-A barcodes

The following error messages were pulled out of the clients vulscan.log when attempting to patch Office 365.  I followed the document and have the patches in the folder specified.  I can browse to the patch folder in a web browser and see the files on the client.

Sun, 30 Sep 2018 16:16:11 -------------------Patch Installation----------------------

Sun, 30 Sep 2018 16:16:11 BeginWaitForMutex 'Global\vulscan_continue'

Sun, 30 Sep 2018 16:16:11 WaitForMutex 'Global\vulscan_continue' succeeded

Sun, 30 Sep 2018 16:16:11 Getting list of autofix patches

Sun, 30 Sep 2018 16:16:11 HTTP POST: http://LANDESK01.ck.c-k.com:443/WSVulnerabilityCore/VulCore.asmx

Sun, 30 Sep 2018 16:16:11 Setting a proxy...

Sun, 30 Sep 2018 16:16:11 Setting socket timeout to 1000 * 60 * 4

Sun, 30 Sep 2018 16:16:12 Success

Sun, 30 Sep 2018 16:16:12 1 patches were found to run

Sun, 30 Sep 2018 16:16:12 Last status: Done.  1 patches were found

Sun, 30 Sep 2018 16:16:12 No patch download required for *MSO365_MONTHLY_16.0.10730.20102_X64

Sun, 30 Sep 2018 16:16:12 Removing local scheduler maint window task: 893751

Sun, 30 Sep 2018 16:16:12 Checking for other running install/repair actions

Sun, 30 Sep 2018 16:16:12 Last status: Waiting

Sun, 30 Sep 2018 16:16:12 BeginWaitForMutex 'Global\SDClientLockMutex'

Sun, 30 Sep 2018 16:16:12 WaitForMutex 'Global\SDClientLockMutex' succeeded

Sun, 30 Sep 2018 16:16:12 Last status: Done

Sun, 30 Sep 2018 16:16:33 Exit Code: 0 (0x0)

Sun, 30 Sep 2018 16:16:33 Launched desktop instance of vulscan to detect full screen apps.  It returned: 0

Sun, 30 Sep 2018 16:16:33 Running patch *MSO365_MONTHLY_16.0.10730.20102_X64

Sun, 30 Sep 2018 16:16:33 Running pre-install/uninstall script

Sun, 30 Sep 2018 16:16:33 ERROR: Failed to open Patch monitoring info HKLM\Software\LANDesk\ManagementSuite\WinClient\PatchMonitoring (0x2)

Sun, 30 Sep 2018 16:16:33 Patch directory : 'C:\Program Files (x86)\LANDesk\LDClient\sdmcache\'

Sun, 30 Sep 2018 16:16:33 Patch name : '*MSO365_MONTHLY_16.0.10730.20102_X64'

Sun, 30 Sep 2018 16:16:33

Sun, 30 Sep 2018 16:16:33 Command Interpreter running

Sun, 30 Sep 2018 16:16:33 Work Path: C:\Program Files (x86)\LANDesk\LDClient\

Sun, 30 Sep 2018 16:16:33 regsvr file:C:\WINDOWS\system32\regsvr32.exe

Sun, 30 Sep 2018 16:16:33 fullPathDll of DLL file:C:\Program Files (x86)\LANDesk\LDClient\O365Util.dll

Sun, 30 Sep 2018 16:16:33 obtaining core server name LANDESK01.ck.c-k.com from scriptable interface.

Sun, 30 Sep 2018 16:16:33 Core server Name:  LANDESK01.ck.c-k.com

Sun, 30 Sep 2018 16:16:33 Hash File: O365Util.dll

Sun, 30 Sep 2018 16:16:33 In SendRequest: Action = SOAPAction: "http://tempuri.org/GetHashForSingleFile"

Sun, 30 Sep 2018 16:16:33 SendRequest: SOAPAction: "http://tempuri.org/GetHashForSingleFile"

Sun, 30 Sep 2018 16:16:33 Action SOAPAction: "http://tempuri.org/GetHashForSingleFile" failed, socket error: 10054, SOAPCLIENT_ERROR: 5.  Status code: -1, fault string:

Sun, 30 Sep 2018 16:16:33   Retrying in 7 seconds...

Sun, 30 Sep 2018 16:16:36 Last status: Retrying in 4 seconds...

Sun, 30 Sep 2018 16:16:37 Last status: Retrying in 3 seconds...

Sun, 30 Sep 2018 16:16:38 Last status: Retrying in 2 seconds...

Sun, 30 Sep 2018 16:16:39 Last status: Retrying in 1 seconds...

Sun, 30 Sep 2018 16:16:41 Success

Sun, 30 Sep 2018 16:16:41 Work Path: C:\Program Files (x86)\LANDesk\LDClient\

Sun, 30 Sep 2018 16:16:41 GetFileHash: could not find "C:\Program Files (x86)\LANDesk\LDClient\O365Util.dll"

Sun, 30 Sep 2018 16:16:41 obtaining core server name LANDESK01.ck.c-k.com from scriptable interface.

Sun, 30 Sep 2018 16:16:41 About to call DownloadFiles (1 files) with these settings:

Sun, 30 Sep 2018 16:16:41 m_allowedBandwidthWAN: 91

Sun, 30 Sep 2018 16:16:41 m_allowedBandwidthLAN: 91

Sun, 30 Sep 2018 16:16:41 m_discardPeriodSeconds: 604800

Sun, 30 Sep 2018 16:16:41 m_preserveDirectoryStructure: 0

Sun, 30 Sep 2018 16:16:41 m_bUseWanBWForPush: 0

Sun, 30 Sep 2018 16:16:41 m_bSynchronize: 0

Sun, 30 Sep 2018 16:16:41 Allowed download methods(m_downloadControl):

Sun, 30 Sep 2018 16:16:41 Peer

Sun, 30 Sep 2018 16:16:41 Source

Sun, 30 Sep 2018 16:16:41 m_preferredServerControl: AttemptPreferredServer

Sun, 30 Sep 2018 16:16:54 http://LANDESK01.ck.c-k.com/ldlogon/O365Util.dll Done

Sun, 30 Sep 2018 16:16:55 Last status: Done

Sun, 30 Sep 2018 16:16:55 Downloaded  C:\Program Files (x86)\LANDesk\LDClient\O365Util.dll

Sun, 30 Sep 2018 16:16:55 Download the following file successfully: O365Util.dll

Sun, 30 Sep 2018 16:16:55 Called CreateProcess: "C:\WINDOWS\system32\regsvr32.exe"

Sun, 30 Sep 2018 16:16:55 Exit Code for process C:\WINDOWS\system32\regsvr32.exe: 0, (0x0)

Sun, 30 Sep 2018 16:16:55 The result of regsvr32 is:  0

Sun, 30 Sep 2018 16:16:55 Create object of  O365Util

Sun, 30 Sep 2018 16:16:55 created the instance ok : O365Util

Sun, 30 Sep 2018 16:17:07 Register C2RCom returnCode:0

Sun, 30 Sep 2018 16:17:07 Custom Variable URL : http://landesk01.ck.c-k.com/Patch/Office365/2016/Current/x64/

Sun, 30 Sep 2018 16:17:07 Patch Binaries URL : http://landesk01.ck.c-k.com/Patch/Office365/2016/Current/x64/

Sun, 30 Sep 2018 16:17:09 ReportRepairResult returned failure: Failed to execute download and apply actions for installer

Sun, 30 Sep 2018 16:17:09 Failed to execute installer. ReturnCode:5

Sun, 30 Sep 2018 16:17:09 Message returned from repair script was Failed to execute download and apply actions for installer

Sun, 30 Sep 2018 16:17:09 ERROR(RunVbScript) Failed to run command  - 80004005

Sun, 30 Sep 2018 16:17:09 DownloadPatch ERROR: Failed to run commands (80004005).

Sun, 30 Sep 2018 16:17:09 Last status: Failed

Sun, 30 Sep 2018 16:17:09 DeferredReportAction: name '*MSO365_MONTHLY_16.0.10730.20102_X64', code '1', type '-1', status 'Failed to execute download and apply actions for installer'

Sun, 30 Sep 2018 16:17:09 App killer is stopping

Sun, 30 Sep 2018 16:17:09 Running post-install/uninstall script

Sun, 30 Sep 2018 16:17:10 RunPatches completed.  1 processed.  0 installed.  1 failures.

Sun, 30 Sep 2018 16:17:10 Sending previous action history to core

Sun, 30 Sep 2018 16:17:10 HTTP POST: http://LANDESK01.ck.c-k.com:443/WSStatusEvents/EventHandler.asmx

Sun, 30 Sep 2018 16:17:10 Setting a proxy...

Sun, 30 Sep 2018 16:17:10 Setting socket timeout to 1000 * 60 * 4

Sun, 30 Sep 2018 16:17:10 Success

Sun, 30 Sep 2018 16:17:10 Last status: Done

Sun, 30 Sep 2018 16:17:10 Reboot action set to 'never.'  Not rebooting.

Sun, 30 Sep 2018 16:17:10 Reboot and rescan.  Rescan set to false, so doing nothing.

Sun, 30 Sep 2018 16:17:10 ReleaseMutex 'Global\SDClientLockMutex' succeeded. Code: 0

Sun, 30 Sep 2018 16:17:10 No 'continue' tasks

Sun, 30 Sep 2018 16:17:10 ReleaseMutex 'Global\vulscan_scan' succeeded. Code: 0

Sun, 30 Sep 2018 16:17:10 Exiting with return code 0x8db3019c (412).

Sun, 30 Sep 2018 16:17:11 Process is terminating, cleaning scanner...

I'm working with a case that is necessary to open the ISM App directelly by hyperlink recieved by e-mail notification.

That needs is because our user can use the ISM only by VPN.

The ideia is that when our user open an e-mail notification from ISM can use the hyperlink from system to interact with their tickets, but the information security allow access by smartphone only by app, so when our user click on hyperlink we need to know if is possible to include some command on html code to start the ISM app automaticly, because our system can start the VPN connection automaticaly behind of ISM app.

Incident# 11344 has been resolved:

Thanks,

Dear

I'm trying to make Skype for Business 2016 start (and login) on the user's logon.

I've created a User Setting in which the following reg value is added:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Lync"="\"C:\\Program Files (x86)\\Microsoft Office\\root\\Office16\\lync.exe\" /fromrunkey"

When I logon to the machine Skype does not start. However the user setting is applied.

In the registry the "Run" key I added through the User Registry is renamed to "Run.org" (by RES One I guess).

Any idea how to bypass this and start programs on user logon?

Using RES ONE Workspace 9.10.2.1 SR2 Bronze on Windows Server 2008 R2 (Citrix XenDesktop 7.15).

Thanks in advance for any replies.

Hello,

Recently we upgraded to Ivanti Workspace Control 10.2.700.1 and a small population users a reporting there taskbar is autohiding. I checked our User Settings and we are not capturing HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StuckRects3 key. I found the below article mentioning "AutoHide: RES ONE shell/RES Workspace Manager Shell  -> Auto hide Taskbar" but I do not see this setting in pwruser.ini,. What should be the value of "AutoHide" in this INI file? Anyone else experienced this issue?

INFO: PWRUSER.INI explained

Is it possible to transfer Shavlik console from Windows Server 2012 to Windows Server 2016?

The plan is to upgrade the server that contains the licensed console to a newly created server for better performance.

Thank you in advance!

-V

Does anyone out there have a reliable way of integrating / updating a base windows OS image with MS updates for deployment?

Currently when we deploy our desktops and servers from LANDesk we have to sit for a couple of hours whilst it patches and updates.

I would love to be able to capture an updated image to use as a base deployment image but can't seem to find a reliable way to do this.

Just wondered if anyone else was doing anything that works.

We recently updated to Environment Manager 10, now we have noticed the whole Desktop created Section is not executed when we log on to a VmWare Horizon App.

I suppose that's because the Horizon app starts with no shell (explorer.exe), and so there is nothing to trigger this Section.

Everything als that have a shell loaded, works.

Does anyone have the same problem or a solution to the problem?

Thx