Hi,

after click list view button on form list, how to make grid back to last change record, not to first record of list data.

Thanks

Where do you check for your SERVICEHOST.LOG file?

It should be here -- "C:\ProgramData\LANDesk\Log\". It's not a "new-new" feature (we consolidated (nearly) all the logs into the common location ... 9.6-ish I think)?

You may still get a SERVICEHOST.LOG in the "old" location of "C:\Program Files (x86)\LANDesk\Shared Files\" - yes - but it's 0 bytes because it doesn't get written to. Check the "new" (well - not THAT new) location and you should have everything you need there.

You should be "fine" with installing PowerCLI on the Core.

Why on earth VMWare can't / won't "just" do normal web-services is beyond me, but ah well. That's a VMWare decision (which I question) - but you're right ... if you want to talk to VMWare you need one of the VMWare interfacing tools installed (annoyingly).

I *would* suggest you install PowerCLI on a test Core first (just to make sure that they don't blow up anything obvious), but I can't think of anything it should fool around with (since usually the "more sensitive" components tend to be either IIS-related and/or .NET related).

I wouldn't expect any problems, but if you don't make sure, "something will go wrong" - because sod's law.

Alternatively, install PowerCLI on a "dedicated box" (say - one of your VM-s) and store your script(s) there, and just schedule the scripts to be launched from that box. You can access data from the Core if you need with your account via a dynamic query (for example) in Getting Started with the MBSDK (Example Scripts Included) .

Hallo,

ich habe ein Problem mit dem Deployment des CCA über die Management Console auf einem Remote PC oder Server an dem die Consolen installiert sind.

Folgenden Fehler bekommen wir.

Time                Message                                                                                                                                                                           

09.03.2018 09:32:35 Initializing Deployment Agent Installation                                                                                                                                        

09.03.2018 09:32:35 Checking 32 Bit Deployment Agent availability                                                                                                                                     

09.03.2018 09:32:40 Checking 64 Bit Deployment Agent availability                                                                                                                                     

09.03.2018 09:32:44 Connected successfully to 'CW7IMV008.pdv1.mediengruppe.pd' by impersonating user 'PDV1\ctxappsense'                                                                               

09.03.2018 09:32:44 Deployment Agent package with platform='64 Bit' version='10.1.126.0' has successfully been downloaded from the Management Server and is ready for installing on the target computer

09.03.2018 09:32:44 Deployment Agent patch with platform='64 Bit' version='10.1.475.0' has successfully been downloaded from the Management Server and is ready for installing on the target computer 

09.03.2018 09:32:44 Deployment Agent patch with platform='64 Bit' version='10.1.475.1' has successfully been downloaded from the Management Server and is ready for installing on the target computer 

09.03.2018 09:32:44 Starting installation                                                                                                                                                             

09.03.2018 09:32:44 Copying bootstrap service to target computer                                                                                                                                      

09.03.2018 09:32:45 Installing bootstrap service on target computer                                                                                                                                   

09.03.2018 09:32:45 Starting bootstrap service on target computer                                                                                                                                     

09.03.2018 09:32:45 Waiting for bootstrap service to start                                                                                                                                            

09.03.2018 09:32:45 Running bootstrap service                                                                                                                                                         

09.03.2018 09:32:45 Deployment Agent (64 Bit) is installing, with patch                                                                                                                               

09.03.2018 09:32:45 Removing bootstrap service                                                                                                                                                        

09.03.2018 09:32:45 Bootstrap service removed                                                                                                                                                         

09.03.2018 09:32:46 Failed to install Deployment Agent Error reading from pipe. Internal error: 109

Ich habe meine Server W2012R2 in Verdacht gehabt, aber Dieser wurde neu installiert, gepatcht und mit den Appsense Consolen betankt, aber das gleiche Problem taucht auf.

Wenn der erste CCA manuell auf dem jeweiligen PC installiert wird geht es ohne Probleme weiter.

Wenn ich die gleiche Aktion direkt auf dem produktiven Appsense Server ausführe habe ich auch keine Probleme.

Nur wenn die Consolen einzeln installiert sind. C++ 2015 und .Net 4.5.1 sind auch installiert.

Auf dem betroffenen Client gibt es Einträge im Ereignis welche auf den Absturz  der bootstrap....exe hinweist. Kernelbase.dll  usw.

Vielleicht kennt jemand das Problem

Danke

sik                                                                                      

Morning all.  We've just bought some Windows 10 Thin Client devices to put into our meeting rooms for the purpose of running video conferencing calls over Skype for Business and also for launching Citrix Receiver.  I've used Environment Manager to tie down the device and get it exactly as we need it.  What I've just discovered though is that when a user is using IM within Skype and they are sent a URL they are able to launch IE and browse the web and we don;t want them to be able to do this.  So I used Application Manager to block IE but by doing this it somehow breaks Citrix Receiver and stops that from launching correctly.  So my question is, how would it be possible to stop IE from launching as I can't figure out a way to do it?  Thanks.  Phil

You are NOT importing AD's displayname in your screenshot. So the field DisplayName you're looking at is what ISM makes by sticking firstname in front of lastname with a space in between them.

This is why you're getting confused I think.

The other thing you're sonfused about is what object you are mapping to.

The managerLink field is a link to another Employee object. The field you say to link to is the field in which it looks for identical data to the AD field you're naming.

So:

- the result of $(ParseDN(Manager, 0)) is going to be "jye" in your example.

- there must be an ISM field in the Employee object into which that "jye" is put; there is none in your example.

- you must map to that field. You're not doing that in your example.

DisplayName in your example doesn't contain jye because you're not mapping anything into DisplayName (so ISM autogenerates it).

The end objective is this: the result of $(ParseDN(Manager, 0)) needs to look identical to whatever you put in the field it's looking at.

Having understood this, go back to my previous post about mapping that data into another ISM field and then linking to that.

One caveat: again you appear to be under the impression you're looking for data in AD fields (displayname in this case). You're not. ALL querying is done to ISM fields. The field mapping copies precisely the fields you specify from AD over to ISM and then AD ceases to be a consideration. Anything you have in AD that you do not explicitly map to a field in ISM is in no way visible to ISM. You *must* map all the fields you want to use. You're not mapping displayname here, so you can't use it. The fact that a field by the same name exists in ISM does not make that field magically contain AD's information. Worse, that particular field is auto populated by ISM, causing you potentially more grief.

Hallo Alex,

also du willst sagen, dass Patchlink wirklich automatisch Office 365 patcht?

Die Patchpakete enthalten nicht nur die noop.exe sondern wirklich die Office 365 Click-to-Run-Quellen oder was ist da drin?

Ciao

  Klaus

Hi tmcke

If all licenses are imported and activated in Setup > Licensing in the Ivanti Workspace Control Console, then you can click on the link behind Module(s): to set a combination active.

See the screenshot below for an example in my test environment.

With kind regards,

Marc

Here is what I see in the "servicehost.log"  file when I select the device in the LANDesk console.

Fri, 09 Mar 2018 05:57:54 9020: Service Host Started, Host WKS30159.sw.sherwin.com:9595, Peer 10.20.100.225, IP Address 10.20.130.246
Fri, 09 Mar 2018 05:57:54 9020: Public key path C:\Program Files (x86)\LANDesk\Shared Files\cbaroot\certs
Fri, 09 Mar 2018 05:57:54 9020: Anonymous connection established
Fri, 09 Mar 2018 05:57:54 9020: Request Received "GET /allowed/ldping HTTP/1.1"
Fri, 09 Mar 2018 05:57:54 9020: Request Received "GET /allowed/ldping HTTP/1.1"
Fri, 09 Mar 2018 05:59:34 9020: EOF encountered parsing HTTP headers, client closed connection.
Fri, 09 Mar 2018 05:59:34 9020: Service host has finished

Hi Jerfy

This is a message from Microsoft Windows that is relayed through RES ONE Workspace.

Please investigate what happens if Remote Control is used directly.

With kind regards,

Marc

Here's what you should have for a proper / successful conversation to CBA from a "Hey - client - go do stuff" point of view (it's essentially a 2-stage authentication process):

I'm annotating the SERVICEHOST-log entries in a separate colour / highlights:

-- <Starting up CBA on my Win 10 host named KAYOLINGAZ>

Fri, 13 Oct 2017 21:43:38 1224: Service Host Started, Host KAYOLINGAZ.fantasia.org:9595, Peer 192.168.116.160, IP Address 192.168.116.137

Fri, 13 Oct 2017 21:43:38 1224: Public key path C:\Program Files (x86)\LANDesk\Shared Files\cbaroot\certs

--<Core is performing initial "Hey - do you even have CBA installed?" type check/contact>

Fri, 13 Oct 2017 21:43:38 1224: Anonymous connection established

Fri, 13 Oct 2017 21:43:38 1224: Request Received "GET /allowed/ldping HTTP/1.1"

 

--<Now that Core knows "Yay - we have CBA", it can do/attempt the authentication handshake via its certificate>

Fri, 13 Oct 2017 21:43:56 8416: Service Host Started, Host KAYOLINGAZ.fantasia.org:9594, Peer 192.168.116.160, IP Address 192.168.116.137

Fri, 13 Oct 2017 21:43:56 8416: Public key path C:\Program Files (x86)\LANDesk\Shared Files\cbaroot\certs

Fri, 13 Oct 2017 21:43:56 8416: Cached certificate EXPIRED   cached(0) now(131524010366913195)

Fri, 13 Oct 2017 21:43:57 8416: Caching newly created certificate

-- <Certificate authentication via my cert - "5f86bfb0.0" successful>

Fri, 13 Oct 2017 21:43:57 8416: X509 Authentication via 5f86bfb0

Fri, 13 Oct 2017 21:43:57 8416: Request Received "POST /services/exec HTTP/1.1"

-- <Core Server telling the client what to do. In this case "Launch Vulscan with a certain override agent setting"!>

Fri, 13 Oct 2017 21:43:57 8416: Exec: Exec: Launch request <"C:\Program Files (x86)\LANDesk\LDClient\vulscan.exe" /id=3 /run "vulscan.exe" /AgentBehavior=ATREYU_v1245> (sync 0, timeout 300)

{...}

 

If you don't get to the X509 authentication, you may want to check out the certs on the device versus the core.

You may want to (re-)try with something small like the above ("hey - run a vulscan with this agent setting") to confirm whether or not you have cert issues (and/or things like "hey - someone messed with my file permissions on my certs).

For reference, certs on the client are stored here -- "C:\Program Files (x86)\LANDesk\Shared Files\cbaroot\certs\".

As an addendum, you WILL NOT   see a notice in the SERVICEHOST if you do a PDS2DIS ping test, because you're not trying to authenticate with CBA - you literally just poke it to see if it exists.

Just so you know / aren't surprised by that (if you follow some of the debugging / troubleshooting steps from -- How to troubleshoot Agent Discovery ).

Hello everyone,

I am a new Ivanti user and this is my first post.

I am a bit frustrated regarding the inventory local scheduler and I wonder if is there somebody that is facing the same issue.

Basically, in the Local Scheduler Command I configured the settings you can see in the attached file but I am not able to handle these tasks as desidered.

Although these settings, all my PCs run the inventory scan in different days and not the same days I would like for.

I mean, I would like that my inventories always run on Monday-Wednesda and Friday from 1:00pm to 2:00pm but it is not and I do not understand why !!

I configured the inventory starting from Monday till Friday but it seems that it considers Saturdays and Sundays too.

So, is it right (by design) or is it a bug ?

Just another example of a PC which will try to start the inventory on Saturday (...but it will not start it because of it will be turned off on that day):

7: C:\Program Files (x86)\LANDesk\LDClient\ldiscn32.exe /noui

     handle    : 777

     start     : Sat Mar 10 13:00:02 2018

     frequency : 172800

     Filter 1  : Time of Day 13 to 14

     Filter 2  : Day of Week 1 to 5

I can understad a mini-inventory (in different days) only when a PC changes its IP address but this is a setting that has been rightly configured:

  8: C:\Program Files (x86)\LANDesk\LDClient\ldiscn32.exe /mini /noui

     handle    : 778

     start     : Fri Mar  9 09:25:34 2018

     frequency : 600

     Filter 1  : IP Address Change Filter

Lastly, but not less important:

I have some users that complaint about the inventory because of it takes long time before finishing (sometimes till 2 or more hours) and I can not understand this too.

As far as I know,  based on this URL:

Inventory Delta Scan Whitepaper

the PCs should run a really slight inventory if there is nothing changed from the previuos one but it does not seems because, as I wrote, it seems that inventory always scans all the folders and path that have been already scanned.

I really appreciate any useful information or tip on how to "fix" my issues.

Bye

Marco

Hello,

I'm having issues with a pivot table in Xtraction not showing columns for all the responses to surveys from our CA SDM system.

This previously worked according to the report author and some of the people that view it normally. They are not sure when it stopped working.

Basically there should be columns for Very Dissatisfied, Dissatisfied, Not Applicable, Satisfied, Very Satisfied, and potentially No Answer.

It is only showing 3 columns. Very Satisfied, Very Dissatisfied, and Not Applicable. But the data set it's pulling does contain Satisfied and Dissatisfied.

If I filter directly for those responses it will make columns, but it won't display more than 3, so as soon as I filter it to show more answers it just goes back to showing what I originally had.

I've looked through all the settings I can find on the dashboard and can't seem to figure out how to get more columns to display.

I've attached some screenshots and have more with the actual pivot settings I can attach shortly.

You pivot screenshot shows a total of 1054, while your record list shows a total of 1220.

What are the filter conditions behind the pivot and what are the filter conditions behind the record list?

In the pivot, if you click on the "1054" in the top right, how many records appear in the record list that comes up?

Is there a way to alter the pop-up box used for validation rules?

For example, the highlighted part is my message on a validation rule. Everything else just adds confusion for the end users when trying to save and is unnecessary information.

Well it looks like I figured it out.  Even though i confirmed that the script is indeed running as the account listed in the Remote connection, it is somehow losing context when using a Run() command (in Autoit).  Changing the scripts to use RunAs instead of Run has mostly corrected the issues I was having.

Hi,

This is an issue that cannot be easily troubleshot over a forum. As these are pre-installed devices please contact Zebra support for assistance. If they require Ivanti support they will contact us. Zebra is the first line of support for their devices.

Thanks

Hi Anthony,

From my research sadly no... There may be an enhancement request for this: https://community.ivanti.com/community/enhancementrequests

As a workaround we added words in upper case letters to help draw the important information out:

Validation Rule

Message:

ISSUE: The Scheduled End Date/Time must be greater than the Scheduled Start Date.

\r\n

ACTION: Please update either the Scheduled Start/End Date/Time to meet this requirement.

. (<-there is a period at the end of the message which forces another line to help with separation. A return on its own will be stripped during the save process. see below)

Here is a rather drastic example:

As you can see the line with the \r\n and the "."(yellow highlight) it is nicely spaced from everything else. The other lines tend to run together.

This is the best I could come up with. Good luck! Mark

This was really helpful!