Symantec ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0 Manual Download Page 390

Page: 390 / 503

Deployment Solution

390

Command-Line Switches

VendorID

Specifies the Vendor ID for the NIC.

Example:

Vendor ID=32902.

DeviceID

Specifies the device ID for the NIC.

Example:

Device ID=4153.

PCIFunction

Specifies the PCI Function for the NIC.

Example:

PCI Function=0.

PCIDevice

Specifies the PCI Device for the NIC.

Example:

PCI device=8.

PCIBus

Specifies the PCI Bus for the NIC.

Example:

PCI Bus=1

WINS-Server1

Specifies the WINS Server 1 for TCP/IP.

Example:

WINS-Server1=0.0.0.0.

WINS-Server0

Specifies the WINS Server 0 for TCP/IP.

Example:

WINS-Server0=0.0.0.0.

WINS-Server-Count

Specifies the number of WINS servers for TCP/IP.

Example:

WINS-Server-Count=2.

WINS-Enabled

Specifies whether the WINS servers are enabled.

Example:

WINS-Enabled=True.

SetWINSInfo

Specifies whether to set the WINS information.

Example:

SetWINSInfo=True.

DNS-Server2

Specifies the DNS server 2 for TCP/IP.

Example:

DNS-Server2=0.0.0.0.

DNS-Server1

Specifies the DNS server 1 for TCP/IP.

Example:

DNS-Server1=0.0.0.0.

DNS-Server0

Specifies DNS server 0 for TCP/IP.

Example:

DNS-Server0=0.0.0.0.

DNS-Server-Count

Specifies the number of DNS Servers for TCP/IP.

Example:

DNS-Server-Count=3.

DNS-Domain

Specifies the DNS domain for TCP/IP.

Example:

DNS-Domain=mydomain.com

DNS-Host

Specifies the name of the DNS host.

Example:

DNS-Host=TSTWXP2.

DNS-Enabled

Specifies whether the DNS is enabled.

Example:

DNS-Enabled=True.

SetDNSInfo

Specifies the DNS information for TCP/IP.

Example:

SetDNSInfo=True.

Parameters

Details

Summary of Contents for ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0

Page 1: ...Altiris Deployment Solution 6 9 SP4 from Symantec Admin Guide ...

Page 2: ...IMED EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID SYMANTEC CORPORATION INCLUDING WITHOUT LIMITATION ITS AFFILIATES AND SUBSIDIARIES SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING PERFORMANCE OR USE OF THIS DOCUMENTATION THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE The Licensed Softwar...

Page 3: ...gram 27 Enable Microsoft Sysprep Support 27 Enable Microsoft Windows Vista Sysprep Support 28 Remotely Install Deployment Agent 28 Chapter 4 Post Installation Configuration 29 Step 1 Grant Full Control of the Deployment Share to Your Service Account 29 Step 2 Create Domain Join and Deployment Share Accounts 29 Domain Join Accounts 29 Deployment Share Read Write Account 30 Step 3 Grant Services Acc...

Page 4: ...oppy 42 Chapter 8 Automation Operating Systems 44 Which Automation Operating System Should I Use 44 DOS 44 WinPE 45 Linux 45 Chapter 9 Installing and Configuring Automation 46 Configuring Automation Operating Systems 46 Obtaining and Installing WinPE Linux or DOS 46 Adding Additional Files 47 Adding Mass Storage Drivers for WinPE 48 Adding Large Files to a Linux Boot Configuration 48 Configuring A...

Page 5: ... Console 69 Deployment Console basics 70 Features of the Deployment Console 70 Computers pane 70 Jobs pane 71 Details pane 72 Shortcuts and resources view 72 Thin client view of the Deployment Console 73 Installing the thin client view 73 Switching between two views 74 Computers pane 74 Resources pane 75 Software packages 75 Inventory pane 76 Toolbars and utilities 77 Deployment Solution utility t...

Page 6: ... account 99 Importing new computers from a text file 100 Computer configuration properties 101 General configuration settings 102 Microsoft networking configuration settings 103 TCP IP configuration settings 104 TCP IP advanced options IP interfaces 106 TCP IP advanced options gateway 106 TCP IP advanced options DNS 106 TCP IP advanced options WINS 106 TCP IP advanced options static routes 107 Net...

Page 7: ...nagement features 135 Server deployment options 136 Managing server blades 137 Managing new server blades 137 Virtual bays 138 Hewlett Packard server blades 138 Dell server blades 139 Fujitsu Siemens server blades 139 IBM server blades 140 Finding a computer in the database 140 Using lab builder 141 Chapter 14 Building and scheduling jobs 145 Viewing job details 145 New job wizard 146 Migrating co...

Page 8: ... language 170 Installation source files 171 Operating system source files 171 Partition and format disk 171 Import an answer file 172 Answer file setup 172 Add a new section 172 Delete a section 173 Add a new variable 173 Command line switches for scripted install 173 Deployment agent settings for scripted install 173 Scripted install summary 174 Scripted install for Windows Vista and 2008 server ...

Page 9: ...ty 206 Manage By Exception 206 Rights and Permissions 206 Grant Rights to Administrators 207 Grant Permissions to Administrators 207 Permission Rules 207 Part 3 Database Security 207 Required Database Rights 208 Rights Required to Install 208 Rights Required for the Services Account 209 Rights Required for Deployment Administrators 209 Part 4 Securing Communication 210 Deployment Agent Authenticat...

Page 10: ... 21 Software Packaging 227 Why Use Software Packaging 227 Overview of the Software Packaging Process 227 Setting up a Reference Computer 228 Accessing Wise SetupCapture 228 Capturing a Software Package 228 What Can I Capture 228 The Capture Process 229 Customizing a Software Package 229 Distributing a Software Package 229 Appendix A Migrating From RapidInstall 229 Appendix B Windows Installer Form...

Page 11: ... 250 Dell Server Blades 250 Fujitsu Siemens Server Blades 251 IBM Server Blades 251 Part V Operating System and Platform Reference 252 Chapter 25 64 bit Platforms 253 64 bit Job Conditions and Filters 253 64 bit PXE Boot Images Configurations 253 Adding Files to a Boot Disk Creator Configuration for 64 bit 253 Chapter 26 Linux and Unix Systems 254 ADLAgent 254 Installing and Configuring ADLAgent 2...

Page 12: ... Wizard 275 Configuration Name 275 File Server Type DOS 275 Multi Network Adapter Configurations 276 Network Adapters 276 Have Disk 277 Internet 277 Advanced 277 TCP IP Protocol Settings 278 Altiris Deployment Server Communication 278 Network Connection 280 Network Drive Mappings and Mount Points 280 WinPE Boot Option Settings 281 Optional Components 281 Configuration Summary 281 Edit Configuratio...

Page 13: ...gs 303 Altiris Deployment Server Communication 303 Network Connection 304 Network Drive Mappings and Mount Points 305 Optional Components 305 Configuration Summary 306 Edit Configurations 306 Additional Files 306 Create PXE Boot Image Files PXE 307 PXE Boot Image Creation Complete 308 PXE Server Tab 308 DS Tab 309 MAC Filter Tab 310 Define MAC Addresses 311 Multicast Tab 311 Data Logs Tab 313 Stat...

Page 14: ...ployment Server system requirements 340 Simple install for Deployment Server 341 Custom install for Deployment Server 344 Thin client install 347 Component install 349 Installing Deployment Solution agents 351 Client connectivity and network adapters 352 Installing the Deployment Agent 353 Remote agent installer 353 Enter administrator account information 353 Specify install directory 354 Automati...

Page 15: ...onents 371 Console install 371 Part VII Technical Reference 372 Appendix A Command Line Switches 373 Job Utilities 373 Job Export Utility 373 Job Import Utility 374 Create Job Utility 375 Schedule Job Utility 377 Import Computer Utility 378 axengine exe 378 Deployment Agent for Windows 379 Aclient exe Command line Switches 379 Aclient inp Parameters 380 ADLAgent config Parameters 383 AClient confi...

Page 16: ... Error Messages 446 Communication Error Messages 447 Critical Error Messages 447 Memory Error Messages 449 Partition Error Messages 450 Installer Return Codes 451 Appendix E System Jobs for Deployment Solution 456 Imaging 457 Create Disk Image 457 Distribute Disk Image 457 Simple Tests 457 DIR Command at DOS 457 DIR Command at Windows 457 Distribute RapidInstall Package 458 Migrations 458 Capture ...

Page 17: ...Error Email Windows 473 Server side Embedded VBScript Windows 473 WLogevent CMD Script Windows 473 WLogevent VB Script Windows 474 XP Embedded 474 Disable Enhanced Write Filter 474 Enable Enhanced Write Filter 474 Distribute RapidInstall Package 474 Agent Update 475 SVS 475 Appendix F Network Ports 476 PXE MTFTP 477 PXE Manager and PXECfg Service 477 Deployment Web Console Web Console 478 DB Manag...

Page 18: ... 498 Viewing and Setting Device Properties 498 Setting the VLAN for a Switch Port 498 Assigning Connectivity to a Switch Port 499 Command line Parameters 500 GUI Tools 500 Deployment Solution Switch Add On Command Line Options 501 Command line Examples 502 Index 503 ...

Page 19: ... Wise Package Studio and Wise SetupCapture Build and capture custom installation packages using the latest Windows Installer technology Script deployment engine Remotely execute Visual basic and Linux shell scripts Deployment Server Feature Description Task sequencer Management tasks provided by Deployment Server can be grouped and executed in order enabling you to perform complex management opera...

Page 20: ...g on the needs of your environment multiple Deployment System components can be installed on the same computer A single dedicated server could host your Deployment Server Deployment Share Deployment Database Management Consoles and PXE Server Extensive supported platforms Support for 32 and 64 bit architecture servers blades thin clients and Itanium running Windows and Linux operating systems Powe...

Page 21: ...nt System Most of the time you do not need to interact directly with the database Deployment Share The Deployment Share stores all files such as installation programs disk images and SVS layers you want accessible to managed computers This share can reside on your Deployment Server or on another computer and is often replicated to different locations to provide better access especially in distribu...

Page 22: ... by Deployment Server to perform tasks which need to happen outside of the normal operating system If you have ever used a disk imaging utility or booted a computer using an installation CD you are probably familiar with running computers in a similar environment Deployment Solution provides several tools to boot computers to this environment and supports several automation operating systems Deplo...

Page 23: ...omputer management requirements This section provides steps for installing Deployment Solution components but also includes system architecture details and discusses planning strategies to install and optimize your Deployment Solution system The installation process is divided into the following sections z Preparing To Install page 24 z Installing page 27 z Post Installation Configuration page 29 ...

Page 24: ...r as an Administrator The account you use to install Deployment Solution must be a Windows Administrator and must possess System Administrator rights on the SQL server that will host your Deployment Database to install the Deployment Database These database rights can be granted temporarily and revoked after the installation completes If you want to use a different account to create the database y...

Page 25: ...n on your part Step 2 Create a Services Account Create an account to run the services and connect to the database This account is used only by Deployment Server and is not tied to a user For security reasons we don t recommend using an existing administrator account which might possess rights beyond those needed by Deployment Server The account should not be part of a group and should not posses i...

Page 26: ...tomation operating systems later Place your automation install files BDC frm in the same folder as the Deployment Solution installation program by default this is c DSSetup During install these files are detected automatically Step 4 Obtain a License File For evaluation you can use the integrated 7 day license or you can use the 30 day 10 node trial license that is sent automatically when the soft...

Page 27: ...nPE z Lets you select a custom name and instance for the Deployment Database z Lets you select a different computer to host the Deployment Share If you plan on doing this you must create the share and grant the account you created in Step 2 Create a Services Account page 25 full control before installation z Lets you install multiple automation operating systems more can be added later Running the...

Page 28: ...ate the support for multiple images After building the basic image the Administrator can run Microsoft Sysprep on a computer to delete unnecessary information and prepare the system for imaging and distribution to other systems Remotely Install Deployment Agent After the installation completes you have the option of remotely installing the Deployment Agent Unless you are familiar with Deployment S...

Page 29: ...s created during the installation grant the services account full control of this share By default this folder is C Program Files Altiris eXpress Deployment Server Step 2 Create Domain Join and Deployment Share Accounts After installation we recommend creating some additional accounts These accounts are different than the accounts used by the people who are going to manage computers These accounts...

Page 30: ...es Account the db_owner Role to Your Deployment Database 1 Open Enterprise Manager and connect to your SQL Server 2 Browse to Security Logins 3 Double click the account you are using to run the Deployment services If the login is not listed add it 4 Click the Database Access tab select the eXpress database and enable the db_owner role Rights Description File System Grant read write privileges to y...

Page 31: ...nt Console click Tools Options Domain Accounts 2 Provide the accounts you created in Step 2 Create Domain Join and Deployment Share Accounts page 29 Enable Security and Add Administrators By default the Deployment Console can be used on your Deployment Server by any user who possesses rights to log in and run applications This works well in situations where you already have policies in place to co...

Page 32: ... and click Rights 3 Enable the rights you want granted For a more complete discussion see See Securing Deployment Solution 6 8 on the Altiris Knowledgebase Grant Database Rights to Administrators Each Administrator with console access must be granted public rights to your Deployment Database The best way to do this is by assigning public access to the Active Directory groups containing your Deploy...

Page 33: ...igure Security Settings See Securing Deployment Solution 6 8 on the Altiris Knowledgebase for an in depth discussion of Deployment Solution security Step 6 Install the Deployment Agent The Deployment Agent needs to be installed on all computers you want to manage using Deployment Solution See Deployment Agent Installation page 34 Step 7 Configure Automation If you plan on imaging computers or depl...

Page 34: ...ent Agent can be installed in the production environment of all the computers you want to manage Additionally the Deployment Agent is automatically included in each of the automation boot configurations you create using PXE automation partitions or boot media There are three versions of the Deployment Agent z DAgent Windows Vista Windows 2008 z AClient Windows XP and previous z ADLAgent Linux UNIX...

Page 35: ...erforming the one time agent installation so either use your domain administrator a domain account with local user rights or any other account with local rights After the agent is deployed you no longer need access to this account To determine whether you have sufficient rights browse to hostname admin Replacing hostname with the name of the computer where you want to install the Deployment Agent ...

Page 36: ...hin each file and are also described in the Deployment Solution Reference Guide When modifying adlagent conf ensure you use a text editor that properly handles UNIX format line endings Configure each file and place a copy with the agent installation program Optionally for Windows computers you can use the Force Deployment Agent Settings on New Computers feature to reduce the amount of configuratio...

Page 37: ...uters in batches to prevent network overload This greatly reduces the effort required when upgrading See the release notes on the Altiris Knowledgebase for specific information on Agent upgrades Troubleshooting See the following article on the Altiris KnowledgeBase Additional articles can be found by searching the Altiris KnowledgeBase 18248 Remote Agent Installer Fails for AClient ...

Page 38: ...nment where it can communicate with your Deployment Server to perform tasks This preboot environment is called automation In order to perform image capture and deployment scripted installs or execute certain scripts you must implement a way to boot computers into this environment This section provides the information you need to configure a boot method including PXE and select an operating environ...

Page 39: ... range of boot methods and automation operating systems this section helps you decide which works best for your environment In order to set up automation you must make the following decisions z Which Automation Boot Method Should I Use page 41 Automation Automation is to the pre boot environment loaded by Deployment Server to perform tasks which need to take place outside the normal operating syst...

Page 40: ...Deployment Solution 40 What is Automation z Which Automation Operating System Should I Use page 44 ...

Page 41: ...w computer arrives a technician could quickly unpack and plug the computer into the network and possibly enable PXE boot if it was not enabled by the manufacturer When this unknown computer contacts the Deployment Server it is assigned an initial deployment job which could image the computer with the corporate standard image install additional packages and power off the computer The computer is no...

Page 42: ...tion If you have tools that are supported only in DOS this might limit you to DOS for all automation tasks on a particular managed computer Automation partitions have an additional advantage in some configurations Optionally you can create a different type of automation partition called a hidden partition to store an image or other files locally This provides advantages in environments where compu...

Page 43: ...again the boot media must be re inserted To avoid these issues some customers load the automation operating system the RapiDeploy imaging executable and the image on bootable physical media They boot a computer execute the necessary commands and provide the required image files In this circumstance the remote management capabilities of Deployment Server are not being used so the process is more ma...

Page 44: ... DOS boot to WinPE or Linux to perform an imaging task When you set up your test environment you might want to run automation jobs in multiple operating systems to see if one performs better in your environment The following sections contain an overview of the automation operating systems z DOS page 44 z WinPE page 45 z Linux page 45 Although you can use these environments to perform a wide variet...

Page 45: ...driver support WinPE uses the same drivers used by the other modern versions of Windows increased speed and generally more functionality The biggest drawbacks are its size which causes increased boot time especially when booting over the network using PXE Linux Linux provides an alternate pre boot environment to DOS or WinPE Many vendors provide gigabit and wireless drivers for Linux that are not ...

Page 46: ... Boot Disk Creator click Tools Install Pre Boot Operating Systems WindowsPE WinPE is available on the Deployment Solution for Client or Servers download page at http www altiris com Download aspx Linux The Linux 32 and 64 bit and FreeDOS preboot environments are available on the Deployment Solution for Clients or Servers download page at http www altiris com Download aspx Click the Linux and FreeD...

Page 47: ...this process see the Boot Disk Creator help Adding Additional Files Occasionally you might need to make additional files available within an automation environment such as utilities or mass storage drivers These files can be added to every automation configuration of a specific type or to select configurations only This is determined by the location you add the files in Boot Disk Creator ...

Page 48: ...per device driver some textsetup oem files might support multiple devices and drivers and the proper device must be specified in the defaults section The diskdrivers path is for adding mass storage drivers If you are adding different driver types you might need to modify this path Adding Large Files to a Linux Boot Configuration Linux automation is typically loaded into RAM Due to limitations on t...

Page 49: ...erver sends a message that the client computer should reboot back to the Production environment the MBR is restored when using automation partitions The following sections guide you through the process of setting up PXE automation partitions or media to boot your computers into the automation mode z Configuring PXE z Configuring Automation Partitions z Configuring Boot Media DVD CD USB device Flop...

Page 50: ...han using boot media to access automation because the automation partition media is used once per computer to install later the partition is used to perform tasks Using boot media to access automation doesn t leave any files on the computer but the media must be used each time you want to access automation Configuring Boot Media DVD CD USB device Floppy Creating and using boot media is a straightf...

Page 51: ... to correspond to the automation configuration you want to install Create an automation partition install package Creates an executable or configures a CD USB device or floppy to install the automation environment This process is executed once per device After that the computer uses the files from the automation partition Select this if you are using automation partitions For managed linux compute...

Page 52: ...nfigurations for automation Partitions or boot media When this option is selected from the PXE menu the necessary files are loaded the job is performed the computer boots to the production operating system None of these files are saved on the managed computer they are downloaded each time the computer boots to automation 4 Provide any additional configuration options and click Save ...

Page 53: ...tiris PXE Server now boots the computer into the automation environment indicated in the Deployment Solution job automatically z PXE can perform an initial deployment of a new system by checking to see if a computer exists in Deployment Solution z All PXE configuration is done using the PXE Configuration Utility from the Deployment Solution console enabling you to remotely configure all PXE server...

Page 54: ...te settings and data automatically making it unnecessary for you to individually configure each PXE server The following table contains an overview of the PXE services The PXE Manager service interacts with Deployment Server PXE Helper service and the PXE config utility to perform centralized PXE management Service Description PXE Manager z Provides all boot options and configuration settings for ...

Page 55: ...onfigured started and stopped by the PXE Config Helper service Clients connect directly to these services during the PXE boot process How PXE Works Before a computer can boot over a network it needs two things an IP address to communicate and the location of an Altiris PXE Server to contact for boot instructions The following sections outline the PXE boot process z Part 1 DHCP Request and PXE Disc...

Page 56: ...CK packet to the client to acknowledge the client s receipt of its IP During this process the Altiris PXE Server monitors the wire for DHCPREQUEST packets with an option 60 PXE client When a packet is recognized the client s MAC address is used to find any pending automation work in Deployment Server If no automation work is required the Altiris PXE Server does not respond to the client and it boo...

Page 57: ...ovide the automation environment on the managed computer The following diagrams contain a basic outline of this process PXE Planning and Installation This section contains an overview of the PXE deployment process in the following sections z Enabling PXE on Managed Computers z Installing and Configuring DHCP z How Many Altiris PXE Servers Do I Need z Installing Altiris PXE Servers ...

Page 58: ... single Altiris PXE Server can deploy a DOS boot image to up to 100 computers at a time and not consume any more resources than it would while deploying a single image If you are using WinPE or Linux however multicast boot is not available Usually a single Altiris PXE Server in a specific location is enough if you either use multicast to deploy images or spread out your image capturing jobs to be ...

Page 59: ... considered Multicasting leverages significant efficiencies in transferring files but also introduces challenges similar to broadcast packet forwarding Like the broadcasting solution routers can be configured to support multicast traffic between PXE Clients and Altiris PXE Servers Please consult the documentation provided by your router vendor for additional information on packet forwarding Instal...

Page 60: ...ly locked out for extended periods example an instance is inadvertently left open on another computer a timeout has been added which terminates a connection after 30 minutes of inactivity after someone else attempts to connect This timeout only applies if someone else is attempting to launch PXE Configuration If no other connections are attempted the timeout is never enabled and your session remai...

Page 61: ... the same PXE boot option for each office you are going to have problems The Alberta office uses a mirror of the deployment share on alb1 eXpress and stores captured images on alb1 images The two Ontario offices use the ont1 and ont2 servers respectively You could go ahead and create three global configurations and three different jobs but that is confusing and could potentially cause problems if ...

Page 62: ...eployment Solution 62 Part III Using Deployment Solution This section provides feature identification and basic procedures for deploying and managing computers using Altiris Deployment Solution software ...

Page 63: ...r environment is represented in the computers pane Computers can be dragged into a group or automatically assigned to a group when the agent is installed Computers can belong to only one group When a new computer connects it is placed in the New Computers group Jobs Jobs contain a sequence of tasks to perform work on managed computers Example a job might be install and activate Winzip 10 This job ...

Page 64: ...g on the return code of the task Context Menus Right click In the Deployment Console you can right click almost any object for a context specific list of management options Example if you right click a computer or group you are given the option of viewing computer details or job history remote controlling or opening a chat session renaming power control and several other options Find a Computer in...

Page 65: ...or lab environment Click CTRL F or click Find Computer on the console toolbar to search the Deployment Database for computers by property settings The computers that match the search will be highlighted in the Computers pane Name BIOS name of the computer Computer Name Deployment Solution name of the computer MAC Address Example 0080C6E983E8 IP Address Example 192 168 1 1 ID Example The computer I...

Page 66: ...es in the Update Configuration job The following information describes the default jobs To run one of these jobs drag it to the computer or computer group you want it applied to Create Disk Image This job uploads an image of a computer to the server and an image name is created automatically based on the lab name However there is no actual image in the job until you drag the image source computer ...

Page 67: ...pport three IP addresses z All fields up to and including site must be present in the file but all data except for Name is optional z To use optional fields for multiple network adapters the preceding fields are required Example to use Nic3 fields all fields for Nic2 are required z For Deployment Server to read the import text correctly ensure there is a final hard return at the end of the file Fo...

Page 68: ...e1 user1 context1 1 John Doe Altiris Inc 12345 OEM 1234567 12345 John Doe Engineering jdoe altiris com 111 801 805 1111 Lindon Test Group Test Job 12 31 2001 17 30 00a0c95c2641 0 172 25 10 180 255 255 0 0 172 32 0 4 172 32 0 1 172 32 0 7 172 32 0 4 altiris com2 00a0c95c2642 1 altiris com3 00a0c95c2643 0 1 1 1 1 2 2 2 2 255 255 255 255 255 255 255 0 1 1 1 2 2 2 2 1 3 3 3 3 4 4 4 4 5 5 5 5 6 6 6 6 a...

Page 69: ...ines management and reporting features across multiple Deployment Server systems and lets you integrate additional Web applications in the client and server management suites including Inventory Software Delivery Recovery HelpDesk Patch Management and Application Metering solutions Features of the Deployment Console The Windows console for Deployment Solution provides standard Computers Jobs and D...

Page 70: ...ment Console The Deployment Console is divided into several panes to organize computers deployment jobs and software packages and scripts It gives you a graphical view of your network and provides features to build jobs drag and drop icons to schedule operations store and access jobs and packages and report the status and state of your computer resources The Deployment Server includes three main p...

Page 71: ...in the folder and gives a basic information about each job such as its state and status It also shows the computers or computer groups to which the job is assigned z The Conditions detail bar also appears letting you assign jobs to computers See Setting conditions for task sets on page 151 z In System Jobs folders are created to store jobs that are created when running operations from the console ...

Page 72: ...s easy access to the computers and job objects identified in the console and the software packages stored in the Deployment Share In the Shortcuts view you can drag computers computer groups jobs and job folders to organize and access commonly used console objects In the Resources view you can identify and assign package files The Shortcuts view provides quick links to view and access computers jo...

Page 73: ...lient view The Thin Client Console has the following panes z Computers z Resources z Software Packages z Inventory The Computers Resources and Software Packages panes are on the left side of the Thin Client view while the Inventory pane is on the right side of the Thin Client view Installing the thin client view During installation you can install the Deployment Solution Thin Client view By defaul...

Page 74: ...e Thin Client view are unavailable These are visible when you switch to the traditional view Computers pane This pane is the same as that in the traditional view However only thin clients are displayed You can right click this pane to view a new menu When you right click a thin client you can view the following options z Capture Configuration z Capture Images z Deploy Configuration z Deploy Image ...

Page 75: ...ent Resources pane This pane is a treeview listing all the resources that you can drag and drop to the thin clients and vice versa The following types of resources appear in this pane z Configuration Packages Example Captured Registry Settings z Images z Software Packages Example HP Tools Note All these resources reside in the eXpress share in the ThinClient directory When you click any of the sub...

Page 76: ...l OS source paths option Click OK To delete the Software Packages option from the Deployment Console 1 Open the Deployment Console 2 In the Jobs pane select System Jobs Thin Client Jobs Software Packages 3 Right click Software Packages and select Delete A confirmation dialog opens 4 Click Yes to confirm the deletion The Software Packages option is deleted from the Deployment Console view Note The ...

Page 77: ...quickly run commonly used remote operations See Remote operations using Deployment Solution on page 122 Deployment Solution utility tools The Deployment Console lets you open utility programs from the Tools menu or from the Tools toolbar You can launch Deployment Solution administration tools Boot Disk Creator PXE Configuration Wise SetupCapture and Remote Agent Installer and package editing tools...

Page 78: ...ver Database Management Lets you run DeployAnywhere to create hardware independent images This functionality is provided by Symantec Ghost Imaging Foundation GIF To add and manage drivers on the Tools menu click the new DeployAnywhere option To enable this functionality select the DeployAnywhere option from the deploy image task For more information about DeployAnywhere or Ghost see the Symantec G...

Page 79: ... can add commands to the Tools menu on the Deployment Console to quickly access additional management applications This lets you easily access applications commonly used with Deployment Solution Commands are added by modifying or adding new INI files You can insert commands to the root ATools ini file for the main menu or add new INI files to create submenus Place both types of INI files in the di...

Page 80: ...Adobe Acrobat acrobat exe Computer filters and job conditions Use this dialog while creating a computer group filter to filter only the specified computers in a computer group or while setting conditions for task sets when running a job only on the specified computers in a group See Creating a computer group filter on page 81 and Setting conditions for task sets on page 151 Creating conditions to ...

Page 81: ...at meet the specified criteria in the Details pane of the Deployment Console Click a job in the Jobs pane The Condition feature appears in the Details pane Click Setup to add new conditions or edit existing conditions When you are setting conditions to schedule a job select from a list of predefined database fields or create custom tokens that key on other fields in the database Filter Name Descri...

Page 82: ...z Global options z Task password options z Domain accounts options z RapiDeploy options z Agent settings options z Custom data sources options Console options Set basic console features for miscellaneous refresh actions and warning messages Scan resource files for changes every ____ seconds Specify how frequently in seconds the Deployment Console updates its view of package files in the Resources ...

Page 83: ... 0 and causes the server to use a dynamic port This setting is useful if you have a firewall and need to use a specific port rather than a dynamically assigned port Automatically replace expired trial licenses with available regular licenses Lets Deployment Solution automatically assign a permanent license to the computer after the trial license expires Note Be careful when using this option Ensur...

Page 84: ...lick Remove Note If the product key is being used by another task you cannot delete the product key You are prompted with a message stating that the product key is being used by another task Task password options According to the network and security properties the passwords for administrators and users change after a certain number of days In such a scenario the password becomes invalid and all j...

Page 85: ...management The Deployment Server accesses the range of computers using the defined IP pairs and avoids retrieving the computers through the port and operating system layers However because some network adapter cards do not handle multiple multicast addresses you can also identify a range of ports to identify these computers On the first pass the Deployment Server accesses the selected computers us...

Page 86: ...try is listed below Alias The alias name you want to use when referencing the external SQL database Server The name of the external SQL database server or IP address Database The name of the external database from which you want to extract data Use Integrated Authentication This option authenticates to the external database using the domain account you are currently logged on as User name and Pass...

Page 87: ...e set on each computer group or job folders for the Administrator group because this has full rights to all features and resources However you can also set up a Technician group that has only basic access and permissions limiting deployment operations This prohibits members of the group from re imaging the Server computer group or scheduling Distribute Disk Image jobs You can explicitly Allow or D...

Page 88: ...e window 6 Select the new group name and click Rights 7 Select Administrator in the Rights dialog This assigns complete rights and permissions to the group Click OK and click Close 8 On the main Security dialog click the Manage Users tab and click Add The Add User Account dialog appears 9 Select the authentication type You can add a DS user or a user from the Active Directory To add users from the...

Page 89: ...dows Active Directory dialog from the main Security dialog click the Manage Users tab and click AD Import Add users from Active Directory not groups The users are added to the Deployment Database However you still need to assign the users to security groups with appropriate rights and permissions Note When logging on with the imported AD account Deployment Solution accessed the Windows Active Dire...

Page 90: ...groups with appropriate rights and permissions DS authentication If the user is already in the Deployment Database and tries to access the Deployment Console the Deployment Server checks the authentication with the logged on user and upon matching does not prompt for user credentials Similarly if a group is already added in the Deployment Database and if a logged on user who is a part of the AD gr...

Page 91: ...ng and exporting jobs on page 193 and Importing new computers from a text file on page 100 Options Task Password Lets you centrally update passwords for users and groups so they can access the Copy File to Distribute Software Run Script Distribute Personality and Capture Personality tasks You must have administrative rights to access this option See Task password options on page 84 Use PXE Configu...

Page 92: ...ty permissions for these Deployment Solution features for the selected objects Note Administrators have access to all objects with unrestricted rights and permissions You cannot explicitly deny permissions to computer or job objects for users with administrator rights 5 To assign permissions to multiple groups click Set permissions on all child objects to assign the values without closing the dial...

Page 93: ...t to the Deployment Database of the preferred Deployment Server connection using the ODBC Data Source Administrator Note Although you are accessing another connection another Deployment Database Windows remembers the last place you browsed to which would be the Deployment Share of the previous Deployment Server connection You need to browse to the new connection s Deployment Share to access its sh...

Page 94: ...ution system you can right click the computer in the Computers pane and select Advanced Reject Connection You can view these rejected computers by clicking View Rejected Computers The rejected computers are prohibited from being active in the Deployment Database They are identified and rejected by their MAC address You can remove computers from the Rejected Computers list by selecting it and click...

Page 95: ...er types are identified by a computer icon in the console with a list of scheduled jobs and operations associated with each computer In the Deployment Console you can assign and schedule deployment jobs to computers or groups by dragging the computer icon to a job in the Jobs pane or vice versa See Viewing computer details on page 96 Add new computers Deployment Solution lets you add new computer ...

Page 96: ...r select from additional management commands See Remote operations using Deployment Solution on page 122 Build and schedule jobs Build deployment jobs with one or more management tasks to run on selected computers Create jobs add tasks and assign the job to computer groups Jobs can be organized and assigned for daily tasks or to handle major IT upgrades See on page 145 Manage Servers Deployment So...

Page 97: ...anaged server connected to the Deployment Server with a user logged on Additional icons identify different states of server deployment A managed Linux computer connected to the Deployment Server with a user logged on Additional icons identify different states of Linux computer deployment Physical view of Rack Enclosure Bay components for high density server systems These icons appear as physical r...

Page 98: ...computer accounts by adding names and network settings from the console See Creating a new computer account on page 99 About new computers When a new computer starts up if Deployment Server recognizes the MAC address provided in a New Computer account or import file it automatically associates the user account at startup with the New Computer icon If this value is not provided the computer appears...

Page 99: ...es you are ready to deploy it because you have done all the work in advance Boot the client computer to automation and the new computer can connect to the server and become a managed computer Now you can perform an Initial Deployment or run a deployment imaging job on the new computer Creating a new computer account You can create computer accounts for individual computers or for computer groups W...

Page 100: ...sult field displays computer names beginning with Sales3 and ending with Sales12 4 Click Associate You can now associate computers in a group including the New Computers group with the multiple computer accounts 5 Click OK Importing new computers from a text file You can import computer configuration data using delimited text files TXT CSV or IMP files to establish multiple computer accounts in th...

Page 101: ...mputer Deploying new computers on a mass scale If you need to deploy large numbers of computers 100 to 5 000 consider using a barcode scanning system to collect user information names operating system and application needs and computer information MAC address serial numbers asset tags You can save this information to a file which can be imported into the New Computers List View Depending on the nu...

Page 102: ...lues The General category provides access to important property settings that are also listed in other configuration categories Click other category icons to view and set additional configuration properties Field Description Name Provides a name that appears in the Deployment Console not the BIOS name of the computer Note The Name field is disabled for multiple computer configuration MAC address T...

Page 103: ...unique in the network and limited to 15 characters Note This field is disabled for multiple computer configuration Use Token for computer name Select this check box to specify the computer name using tokens Selecting this option enables the Select Token option and disables the Define Range option Note This option is applicable for multiple computers and not for single computers Select Token You ca...

Page 104: ... two separate name ranges to be assigned by separate conditions the computer names increment irrespective to the base name See Modifying configuration on page 182 Setting conditions for task sets on page 151 and Computer configuration properties on page 101 Workgroup Select this option and enter the name of the workgroup to place the managed computer Note You can select either the Workgroup or the...

Page 105: ...nly one network adapter it is configured only with the IP settings listed first If IP settings are provided for additional network adapters not present in the computer they are disregarded If you add a new network adapter the Remove button appears You can remove the new network adapter by clicking Remove See also Computer configuration properties on page 101 Description z MAC Address The MAC addre...

Page 106: ...rrows to set the DNS suffix search order TCP IP advanced options WINS Click Add to set a new WINS address Add additional WINS settings for this network adapter Select one of the Enable NetBIOS over TCP IP Disable NetBIOS over TCP IP or Use NetBIOS settings from DHCP server options for this network adapter See also Computer configuration properties on page 101 Field Description IP Address Add or mo...

Page 107: ... M modified from routing daemon or redirect A installed by addrconf C cache entry reject route Set Novell NetWare client values for a new or existing computer Select whether you want to log in directly to a NetWare server or to a NetWare tree in the Novell Directory Service NDS You can specify the preferred tree server name and NDS context Field Description Ignore NetWare settings Select to disreg...

Page 108: ...alue rendered from the OEM key or 25 digit license key required when installing the operating system See also Computer configuration properties on page 101 Set up local user accounts for the newly imaged computer or when running a configuration task Enter a user name full name and password and set standard Windows login options Field Description User name The user name for this local Windows user ...

Page 109: ...m the Deployment Server Console right click a computer or group select Change Agent Settings and click Production or Automation To set or modify agent settings for new computers click Tools Options click Agent Settings Deployment Agent on Windows The Deployment Agent runs on Windows computers including desktops notebooks and servers See Deployment agent settings on page 110 Deployment Agent on Lin...

Page 110: ...uration Utility page appears 2 Click Options 3 Click Transport 4 Select the Automatically update clients option and click OK Deployment agent settings You can set the default agent settings when new client computers are added to the system that the Deployment Server manages Notification Server Client The NS client is an Altiris agent that runs on computers supported by the Notification Server This...

Page 111: ...ent status of the Deployment Agent You can also see the computer name deployment server connected to IP address multicast address and MAC address You can also watch Deployment Agent communicate with the Deployment Server Clicking Properties lets you edit the Deployment Agent properties Passwords protect this option About Displays the version and licensing statement for the Deployment Agent Passwor...

Page 112: ...this option Admin Properties Quickly go to the Admin Properties page to view or make changes Passwords protect this option Show Network Interfaces View what network cards are in your computer Passwords protect this option The following configuration properties organized using tabs in the dialog are included in the Production Agent Settings dialog Server connection Connect directly to this Deployme...

Page 113: ...andwidth when connecting If this option is set too low your client computers will take longer to connect than to refresh their connections Abort files transfers if rate is slower than Select this option to preserve bandwidth when running deployment tasks on slower connections Access Set these commands to control the way the client handles requests from the server Allow this computer to be remote c...

Page 114: ...er does not communicate with the Altiris Client on the managed client computer Note Selecting encryption options slows down the communication path between the agent and the Deployment Server Password protect Admin properties from user Select to let users on the managed computer access the Admin properties only if they enter the set password If the check box is selected and the user does not know t...

Page 115: ...xy to send Wake On LAN packets Set these options to control how the managed computer acts as a proxy agent identifying the type of traffic this managed computer forwards from the server Forward Wake On LAN packets Select if you want the managed computer to forward Wake on LAN packets Forward Deployment Server discovery multicast packets Select if you want to advertise the Deployment Server to clie...

Page 116: ... settings for the Automation Agent for specified computers or computer groups You can remotely maintain important agent settings and update settings as required from the console When a new client computer connects it receives the default agent settings from Deployment Server for drive mappings authentication and LMHost entries Each client computer still has the capability to maintain its unique se...

Page 117: ...lder Path Enter a UNC path You can also edit or remove a drive mapping from the list See also Deployment agents on page 109 Authentication Provide the login credentials that the Deployment Agent for DOS needs to map network drives The associated credentials for each network drive must have the rights that the Automation agents need to access files Domain Workgroup To map the network drives enter t...

Page 118: ... Deployment Server you can reject it This removes the unwanted computer from the Computers pane in the console Further attempts by the computer to connect are denied Although the computer is not deleted any history or schedule information associated with the computer is deleted 1 Right click the computer you want to reject from connecting to the Deployment Server 2 Click Advanced Reject Connection...

Page 119: ... name of the computer as it appears in the console You can view the following logged on user names operating system installed name of the Deployment Server whether an automation partition is installed version of the Altiris Windows Client and other client information View processor make and type processor count RAM installed on the computer display configuration manufacturer model product name MAC...

Page 120: ...rmation for the selected managed client computer View TCP IP information including a list of all installed network adapter cards up to eight for the selected computer Click Change to open the Configuration page to modify settings see Configuring computers on page 125 View the applications that are installed on the computer including their description publisher version number product ID and system ...

Page 121: ...re a blade server using deployment tasks and configuration settings saved from the previous server blade in the bay This lets you replace new blades in the bay and automatically run deployment tasks from its deployment history See Restoring a computer from its deployment history on page 124 All deployment tasks in the bay s history are run starting from the last Distributing a Disk Image task or S...

Page 122: ...er Interaction Default No job or tasks are performed the Deployment Agent on the server blade is instructed to wait The icon on the console changes to reflect that the server is waiting View information about the remote management hardware installed on the selected computer most often a server used to power up power down and restart the computer remotely or to check server status You can also ente...

Page 123: ...uter Status Clear computer status as shown in the title bar of the List View Prompt User for Properties Query the user for personal information This feature sends a form to the user to fill out See Prompt user for properties on page 132 Reset Connection Disconnect and reset the connection between Deployment Server and the Deployment Agent on the selected computer Install Automation Partition Embed...

Page 124: ... Job Wizard Open this to build assign and schedule deployment jobs for the selected computer See New job wizard on page 146 New Group Click to create a new computer group in the Computers pane New Computer Create a new computer account See Adding new computers on page 98 Rename Assign the computer or group a new name in the console Right click a computer or group to edit in the Computer pane Delet...

Page 125: ...e The Computer Configuration Properties dialog appears 2 Set basic configuration values in the General configuration group default view 3 Click other configuration group icons in the left pane to set additional values 4 Click OK See also Remote operations using Deployment Solution on page 122 Quick disk image This computer operation creates a disk image of the selected computer This option is a qu...

Page 126: ...mand to start a computer that has been turned off Notes Your operating system and network adapter must be capable of recognizing and processing the Wake on LAN packets Non embedded network adapters must be properly configured Example 3Com NICs have an extra header cable that enables Wake on LAN Check the documentation that comes with your network adapter for more information about Wake on LAN For ...

Page 127: ... sitting at the managed computer s screen and using its keyboard and mouse Note You cannot disable the flashing eye icon while the computer is being remotely controlled Before you can remotely control a managed computer z The managed computer must have the Altiris Agent for Windows installed and properly set up z The client must have the appropriate Proxy option selected in Altiris Client Properti...

Page 128: ...n the Deployment Console and the master client Refresh Click to update the screen view of the managed computer Ctrl Alt Delet e Click to select Restart or Logon options for the managed computer Note The managed computer must be running Windows and have the keyboard and mouse driver installed for this feature to be available Send File See Send files during remote control on page 129 Toggle Control ...

Page 129: ...olor depths is improvement in speed Use specific image resolution Click to specify the width and height of the image that represents the client display Update Interval Select to specify how often the image in the Remote Control window is updated in milliseconds The more frequently the display is updated the more bandwidth is required Only update foreground window Select to refresh only the selecte...

Page 130: ...trol window for each managed computer Right click each computer and select Remote Control A new window appears for each selected computer z Open a Remote Control window for a group of managed computers Right click a computer group icon and select Remote Control The Remote Control Options dialog appears with options to Control each client separately in its own window or to Control all clients toget...

Page 131: ...te control each computer separately or Select Control all clients together in the same window using the following master to remote control the selected computers together and select the master computer 4 Click OK The remote control connection is established for the computers Additional remote control programs You can manually add access to additional remote control programs to the Remote Control m...

Page 132: ...wer field 3 Click Send or press Enter The exchange of text messages appears in the upper field See also Remote operations using Deployment Solution on page 122 Prompt user for properties This feature lets an administrator prompt a user for computer location and user information The information supplied in this form appears in the Location properties in the Computer Properties dialog See Computer p...

Page 133: ...ion partition When the Deployment Server sends a deployment job to client computers tasks within the job can be assigned the default automation pre boot environment or one of DOS Linux or WinPE With an embedded recommended or hidden automation partition installed on the client computer s hard disk deployment jobs can run automatically You can have multiple tasks within a deployment job and each ta...

Page 134: ...atically You can now run automation specific deployment tasks on this computer Change agent settings This feature lets you modify most of the agent settings for a selected computer or computer group You can set properties for the Production Agent Deployment Agent or for an Automation Agent To change agent settings 1 From the Computers pane right click a computer and select Change Agent Settings 2 ...

Page 135: ...omputer icons in the console server icons can be selected to view server properties or assign specific jobs and management tasks Run Scripted Installs Execute scripted unattended installs across the network for both Microsoft Windows and Linux servers Follow steps to create answer files and set up operating system install files using a wizard See Scripted OS install on page 168 Support for multipl...

Page 136: ...ion Utility In contrast if you want to ensure that the server waits before being deployed or waits a set time before proceeding to avoid erroneous re deployment you must set the options in the Advanced section of Initial Deployment Halt the initial deployment of servers When a server boots from a PXE server or from Automation if the option is set Deployment Server recognizes it as a new computer a...

Page 137: ... properties and rules to deploy Rack Enclosure Bay servers Using Deployment Solution you can employ rip and replace technology that lets you insert a new server blade and automatically configure and deploy it exactly like the previously installed server blade letting you replace any server that is down and get it back on line quickly By default the replay option is checked when you create a new jo...

Page 138: ...s to managed server icons in the Deployment Console as live blade servers are inserted and identified by Deployment Solution Rack name Enter or edit the name of the Rack Enclosure name Enter or edit the name of the Enclosure Enclosure type Select the type of HP server blade from the list Initial Job Select an existing job to run when the pre configured computer account is associated with a new ser...

Page 139: ... from the Deployment Console All Dell Rack Servers are supported by Deployment Solution but the server blades can also be managed from the physical view in the Rack Enclosure Bay view The following servers are supported For Dell blade servers in the physical view the Rack name is always Dell All subordinate Enclosures and Bays are identified with custom names under the Dell rack name Example Dell ...

Page 140: ... the physical view in the Rack Enclosure Bay view For IBM blade servers in the physical view the Rack name is always IBM All subordinate Enclosures are identified with custom names under the IBM rack name and Bays are identified by number Example IBM enclosureName baynumber See also Server management features on page 135 and Server deployment options on page 136 Finding a computer in the database ...

Page 141: ...rs and job conditions on page 80 Using lab builder Use the Lab Builder to set up jobs under the Lab folder in the Jobs pane to set up a classroom or lab environment Name BIOS name of the computer Computer Name Deployment Solution name of the computer MAC Address Example 0080C6E983E8 IP Address Example 192 168 1 1 ID Example The computer ID 5000001 Serial Number Serial number installed in BIOS A pr...

Page 142: ...ob See Creating a disk image on page 157 5 Set computer names and addresses in the Update Configuration job The following information describes the default jobs To run one of these jobs simply drag it to the computer or computer group you want it applied to Create Disk Image This job uploads an image of a computer to the server and an image name is created automatically based on the lab name Howev...

Page 143: ...Altiris Deployment Solution from Symantec User s Guide 143 Upload Registries This job backs up computer registry files to the Deployment Server ...

Page 144: ...Altiris Deployment Solution from Symantec User s Guide 144 ...

Page 145: ...ing modifying copy and pasting or deleting tasks to suit your requirements See Deployment tasks on page 155 and Building new jobs on page 150 Set conditions on jobs to run only on computers with properties that match the criteria you specify You can build one job to run on different computer types for different needs and avoid mistakes by ensuring that the correct job runs on the correct managed c...

Page 146: ...ions for task sets on page 151 z A list of tasks assigned to the job and task descriptions also appears Change the order of the task execution with the up and down arrows Tasks are executed in the order they are listed See Deployment tasks on page 155 z Features to add modify and delete tasks for each job z A list of assigned computers and its deployment history To sort jobs or computer details ju...

Page 147: ...This wizard guides you through the steps required to restore a computer to a known working state by re imaging the hard drive and reinstalling software packages personality settings and defining configuration values This option reschedules jobs saved in each managed computer s history record which contains all deployment tasks previously processed See Restoring a computer from its deployment histo...

Page 148: ...Install software packages prior to applying the personality on the destination computer to install software packages on the new computer Note This option creates two jobs that appear in the Jobs pane Job Capture and Job Distribute Job Capture includes a Capture Personality Settings task see Capturing personality settings on page 179 to capture the personality of the source computer and a Modify Co...

Page 149: ...nd assign it to computers when building new jobs The jobs created in the New Job Wizard appear in the Jobs pane and can be saved and assigned to other computers at a later time You can also schedule jobs for the specified computers in the wizard See Building new jobs on page 150 and Scheduling jobs on page 153 Applying computers to a job When deploying software in the New Job Wizard you can select...

Page 150: ...sage appears asking if you want to continue See Distributing software on page 175 for additional information Option summary After selecting the options in the New Job Wizard you can view a summary of the job names assigned computers conditions and other selected choices To change any options click Back to return to the previous dialog Click Finish to complete the steps in the wizard See also New j...

Page 151: ...et return codes for each deployment task See Setting up return codes on page 193 7 After adding tasks click OK 8 To schedule the job drag it to a computer or computer group The Schedule Jobs dialog appears See Scheduling jobs on page 153 See also Importing and exporting jobs on page 193 Job scheduling wizard The Job Scheduling Wizard provides features to assign jobs to selected computers and compu...

Page 152: ...ures such as operating system software and hardware version hard drive space operating system language RAM and other characteristics To set up custom conditions based on custom tokens select User Defined Tokens from the Field drop down list From the Operation drop down list select a compare statement In the Value box type a string to search for in the selected database field You can set conditions...

Page 153: ...lick the Job Schedule tab The following options are available Do not schedule This option lets you assign jobs to computers but does not run the job until you return to the Schedule Job dialog and set a run time Run this job immediately This option lets you run the job immediately Schedule this job This option lets you specify the date and time to run the job Repeat this job every This option lets...

Page 154: ...ess Delete or right click the job s and select Delete To remove tasks from a job You can remove tasks assigned to a job by double clicking the job and opening the Job Properties dialog Edit features also open in the Details view of the Deployment Console when you select the job from the Jobs pane 1 Select one of the assigned tasks in the Task list 2 Click Delete To remove scheduled jobs from a com...

Page 155: ...k image from a reference computer on the network and simultaneously distribute it IMG or EXE to other managed computers on the network See Distributing a disk image on page 162 Scripted OS Install Run scripted unattended installs using answer files to install computers remotely over the network See Scripted OS install on page 168 Distribute Software Distribute RIPs MSI files scripts personality se...

Page 156: ...2 Wait Use the Wait dialog to retain a computer in automation mode after a task is performed See Wait on page 172 Tasks are listed for each job in the Task list Each task runs according to its order in the list You can change the order using the up and down arrow keys Supported Live Task Types The following is the list of the live tasks supported for the x64 IA64 and SPARC platforms Task x64 IA64 ...

Page 157: ...efault imaging executable This facilitates the imaging of thin client computers The following are the RapiDeploy options for imaging Graphical Mode RDeploy Select this option to run the RDeploy in a GUI mode Text Mode RDeployT Select this option to run the RDeploy in a text mode Advanced Install BIS Certificate No No Yes Advanced Remove BIS Certificate No No Yes Advanced Apply Regular License Yes ...

Page 158: ...s UNC and DFS paths in the Name field For example you can type My_Server My_Volume myimagefile img in the Name field 6 Select Disable image path validation if you want to store the image file outside of the Deployment Share file structure If you do not select this option and do not specify a Deployment Share path a warning message appears reminding you to configure your automation process to use t...

Page 159: ...PE x86 pre boot environment 12 Optional To select Media Spanning and additional options click Advanced See Create disk image advanced on page 162 13 Click OK if you are using the New Job Wizard or click Next 14 Optional Set Return Codes See Setting up return codes on page 193 15 Click Finish The task appears in the Task list for the job The disk image is created when you run this task Tip If an im...

Page 160: ...uction before creating the image 6 From the Automation pre boot environment DOS WinPE Linux drop down list select the required pre boot environment to perform the Create Disk Image task in the selected pre boot environment By default the Default Automation Auto select type is selected 7 Click Next The Return Codes dialog appears 8 Optional Set Return Codes See Setting up return codes on page 193 9...

Page 161: ...prep settings for creating a disk image You can use the Sysprep Advanced Settings dialog to specify Sysprep mass storage device support By default the Enable mass storage device support using built in drivers For Windows XP and 2003 only option is selected Disable mass storage device support When this option is selected the Sysprep inf file contains the section Sysprep with the key value pair as B...

Page 162: ...ote Configuration restoration after imaging a compressed drive is not supported for this release Description Optional Enter an image description to help identify the image and click OK Distributing a disk image Distribute an RDeploy ImageX Mac or Ghost image file to managed computers to deploy a previously created hard disk image Deployment Solution supports hardware independent imaging through De...

Page 163: ...y created image file This option saves an image of a selected computer s hard disk in its current state each time the job runs You can schedule the job to image a specified computer every time it runs which updates the image each time Select the Save the disk image as a file while distributing option to save the newly created image file If you use a reference computer as the image source you can a...

Page 164: ...g a Create Disk Image task The Distribute Disk Image task cannot deploy an image that was created by Apple Disk Utility or the hdiutil tool To deploy a Mac image 1 Select the Select a disk image file option 2 In the Name field choose from one of the following options to add the path to the Mac DMG image Specify the share using the following format afp server sharepoint path filename dmg Provide cr...

Page 165: ...or if you are retrieving the image from a remote server 3 To use Sysprep to distribute the image select Prepared using Sysprep 4 From the Operating System drop down list select the operating system Note Click Add New From the Sysprep Settings dialog select the operating system information 5 From the Product Key drop down list select the product key 6 Add any additional parameters in the Additional...

Page 166: ...of the image so you can determine if you need to change partition sizes Minimum indicates the amount of space the image will use on the target computers Original indicates the image source disk size Fixed Size Select this option and enter the desired partition size Percentage Select this option and enter the percentage of free space you want the partition to occupy Min View the minimum size of the...

Page 167: ...xisting OEM partition from image file forceoem Select this option to replace the existing OEM partitions on the client computer with the OEM partition from the image file Additional Command line switches You can add command line options specifically for the RapiDeploy program that runs imaging tasks Note The checkdisk command line option should not be used from a Deployment Console The post config...

Page 168: ... DOS Linux WinPE to load and halt It does not let the scripted install run When running a Scripted OS Install task you can identify the type of operating system to install for supported languages run the scripted install and update with service pack installations This task provides easy to use features to create an answer file for each scripted installation Scripted installs are flexible in perfor...

Page 169: ... files This process could take a few minutes Because the installation source files are copied over to the Deployment Share when running subsequent scripted installs you do not need to add new source files for this version of Windows They can be selected from the list of installation source files See Installation source files on page 171 Note When importing Scripted Install jobs you must edit the j...

Page 170: ...d version and language must correspond to your Windows installation files We support multiple languages for the following Deployment Solution utilities z Boot Disk Creator z Image Explorer z PXE Configuration Utility z Remote Client Installer z Control Panel Applet z DS Info z PW Util Password utility z Switch Management Select the operating system version Select the Windows operating system you w...

Page 171: ...nter a unique name for the operating system source files Enter a name for the operating system source configuration files to assign an alias to associate with the install files for a specific operating system version and language Enter path to operating system source files Enter the path to the I386 folder on the CD where the Windows installation programs and support files are stored Example Brows...

Page 172: ...in this dialog to enter values to create an answer file for a scripted install These values are stored in the Deployment Database An answer file is generated from the database unattend txt and distributed to each managed computer when the job runs In the Answer File Setup dialog select a value a row in the table A list appears in the Values column to change values for each entry You can add new va...

Page 173: ...r comments to describe the new variable It appears in the Description column of the Answer File Setup dialog See also Scripted install for Windows on page 169 Command line switches for scripted install Use the Scripted OS install commands dialog to enter Windows commands that are executed from the cmdlines txt file You can also add scripted install command line options Switches Add or edit switch ...

Page 174: ... select the following options Windows Vista or Windows 2008 Server as the operating system Operating system language Automation pre boot environment Note Deployment Solution supports only WinPE environments Click Next 2 From the Select or add new OS source files drop down list on the Installation Source Files page of the Scripted OS Install dialog select Vista or Windows 2008 Server 3 Optional You...

Page 175: ...e Default Automation Auto select type is selected See also Scripted OS install on page 168 and Scripted install for Windows on page 169 Scripted install summary View a summary of the selected options for the scripted install Click Back to change any of these settings or click Finish to complete the Scripted Install task Distributing software Send MSI Packages CAB EXE and other package files to sel...

Page 176: ...rs which could be a lot of work To save the work of updating that list or of manually renaming distribution packages the RenameDistPkg feature was added Now the system administrator may update the well known executable list once with a filename of their choice The well known filename may be entered into the Windows registry of the Deployment Server computer the computer running axengine exe as the...

Page 177: ...opy packages directly from the Deployment Share if this data store is located on another server a Custom install It copies the file and runs it avoiding running through the Deployment Server and reducing processor output Run directly from file source Select this option to run files remotely from the Deployment Share or another selected file server Specify user Enter the user name and password for ...

Page 178: ...n drop down list The actions are 4 Click Advanced to copy files using the Deployment Server or copy files directly from the file source See Importing package advanced on page 179 5 Select Manage Layer to manage the selected layer using actions present in the Action drop down list The actions are Manage the SVS Layer using the New Job Wizard or adding the Manage SVS Layer task when building new job...

Page 179: ...g personality settings The Capture Personality task lets you save personal display and user interface settings defined in the operating system for each user You can create a Personality Package that you can save and distribute when migrating users This task runs Altiris PC Transplant from the console to capture and distribute settings 1 After creating a job click Add Capture Personality Deactivate...

Page 180: ...in the selected location most often in the PCT folder on the Deployment Server shared directory on the Deployment Share See Distributing personality settings on page 180 Note Set the conditions on the job for either Windows XP 2003 2008 and Vista computers to ensure that the appropriate Capture Personality task runs on the appropriate computers Capture personality advanced options Domain users Sel...

Page 181: ... you want to send the package to a managed computer with multiple users and to install it for certain users with a unique password clear the Apply to all users box Example To install a Personality Package for specific user accounts on a computer add values to the Additional command line switches field Example user JDoe TMaya BLee Note The command line options are specifically for Personality Packa...

Page 182: ...ame in the Source Path field in the Copy File dialog Execute directly from file source Select this option to run files remotely from the Deployment Share or another selected file server File source access and credentials Enter the user name and password for the client computer and the Deployment Share Both must have the same user name and password this is not an issue if both exist in the same dom...

Page 183: ... is selected 4 Click Advanced if Windows was installed on client computers in a directory other than the default Enter the correct path to the root of the Windows directory Select Include registry information for all users to back up registry keys for all user accounts Note If you clear this check box only the Administrator and Guest user accounts are backed up or restored 5 Click Next 6 Optional ...

Page 184: ...r click Import and select a script file to import After you import the script you can modify it in the provided field 3 Specify the operating system to run the script You can choose Windows DOS Linux or Mac OS X Click Next 4 Set Script Information See Script information on page 185 Click Next 5 Optional Set Return Codes See Setting up return codes on page 193 6 Click Finish The task appears in the...

Page 185: ...ntervention The script runs on the Deployment Server of the managed computer but is not visible Example If you run a DOS command locally on the Deployment Server the Command Prompt window does not open on the Deployment Server computer when the script runs When running the script on the Deployment Server it runs specifically for the assigned managed computer Example If you create a job with a scri...

Page 186: ...rop down list If you select Linux as the operating system type the Locally on the Deployment Server option is disabled and only the Additional command line switches under the Production Client installed OS Windows Linux Mac OS X is enabled If you select DOS as the operating system type the Locally on the Deployment Server and the Production Client installed OS Windows Linux Mac OS X options are di...

Page 187: ...r server side scripts you must add the id ID switch See the Locally on the Deployment Server option in Script Information to select a server side script See Script information on page 185 level is the severity level The following levels are used 1 Information message 2 Warning message 3 Critical failure message Only this level can be used to set up a return code See Setting up return codes on page...

Page 188: ...eck box to run this task in automation mode Note This option is only applicable for Linux and WinPE automation 4 Type the destination path The Destination path field automatically enters a sample path but you can enter the directory path you require If the destination path does not exist on the destination computer it is created 5 Click Advanced to specify additional features to copy files through...

Page 189: ...is option to copy packages directly from the Deployment Share sending only one copy across the network It copies the file directly to avoid running through the Deployment Server and diminishes processor output Because the Deployment Agent doesn t recognize shared rights and is not guaranteed to have a mapped drive to the data source you need to identify a user name and password for the data share ...

Page 190: ...lick the job you want to modify 2 Click Add and select another task from the menu 3 Follow the basic instructions on each dialog provided for each task Select the type of task you want to add and follow the directions 4 After finishing task configuration a new task appears in the Jobs list 5 Change the order of the tasks using the up and down arrows The tasks run in the order listed To copy and pa...

Page 191: ...current condition settings of the destination job 5 Change the order of the tasks using the up and down arrows The tasks execute in the order listed To add a new task to an existing task list 1 Select a job from the Jobs pane 2 Click on one of the tasks within the job and add a new task The new task is inserted above the task you highlighted and all other jobs shift down by one position 3 Use the ...

Page 192: ...h file by right clicking the file and selecting Rename 5 Type the script in the open file and save it 6 Drag the Batch bat file to a computer or computer group where you want to schedule the job 7 Specify the scheduling options and click OK See Scheduling jobs on page 153 Copy and paste jobs and job folders Jobs or job folders including their subfolders can be copied to any other job folder in the...

Page 193: ...k in a job you can define a response to specific return codes generated from that task after it runs You can determine the response if the task runs successfully or if the task fails You can also set up custom return codes generated from scripts or batch files that are unique to your environment or deployment system Note Return code handling cannot be set up for jobs created in the New Job Wizard ...

Page 194: ... code as Success or Failure and provide a message in the Status field These custom codes can respond to any return codes set up in scripts or batch files in the Run Scripts task or these custom codes can respond to system return codes thrown from the Deployment Server or external codes generated when distributing applications personality settings or disk images Any task can have custom codes that ...

Page 195: ...ine how to respond to the Deployment Server success return code zero in the Success field how to respond to a failure return code a non zero in the Default field and how to respond to a custom or externally generated return code defined in the Other return codes field The following example describes how to set up a simple process to deal with custom and system return codes and how to interpret the...

Page 196: ...ed with an asterisk require input parameters or other minor modifications added before running on your system These modifications let you add parameters to the job such as user name and password or other required data for the job to be functional Jobs requiring input parameters or customizing do not function properly if you do not edit the job with the information specific to your environment All ...

Page 197: ...ck the DAgent Upgrade sample job 4 Copy the sample job to another location and rename it 5 Schedule the job to run Symantec Backup Exec System Recovery BESR sample jobs Deployment Solution includes several BESR sample jobs For more information on BESR see http www symantec com and search for Symantec Backup Exec System Recovery Initial deployment Initial Deployment is a default job designed to hel...

Page 198: ...rs z Configurations z Jobs z Advanced Configurations Click the Configurations tab on the Initial Deployment dialog to configure different sets of computer properties Each configuration set is presented to the user as a menu The user can select the configuration set designed for their environment Compare the Configurations tab with the Jobs tab See Jobs on page 199 Note If you do not create any con...

Page 199: ...job which runs for all clients at the specified time z Click OK Jobs Click the Jobs tab on the Initial Deployment dialog to add existing jobs or create new jobs to run on the new computer The jobs you add or build using this dialog are listed in a menu and presented to the user during startup The user can select the deployment jobs to image the computer and install applications and personality set...

Page 200: ...set and job is run However in many cases you do not want Web or network servers to be automatically re imaged without confirmation from IT personnel z Select Servers to stop servers from automatically running Initial Deployment configuration jobs Servers are identified as the managed computers running multiple processors or identified as a specific server model from specific manufacturers Example ...

Page 201: ...Deployment Solution 201 Part IV Best Practices This section provides details on many of the management tasks available in Altiris Deployment Solution software ...

Page 202: ...sks while still allowing Deployment Solution to manage computers We recommend creating the following accounts Deployment Server Accounts Contains instructions to set up the accounts you use to run Deployment Server services join domains and connect to the Deployment Share in automation Administrator Accounts and Role and Scope based security These security policies control administrator access to ...

Page 203: ...abase or Share is on a different computer than your Deployment Server create a domain level account or create local accounts with the same credentials on each computer hosting a Deployment Solution component This account requires the following rights Domain Join Used to join computers to a domain during configuration Deployment Share Read Write Provides access to the Deployment Share in the automa...

Page 204: ...onsole click Tools Options Domain Accounts 2 Provide the accounts you created Deployment Share Read Write Account This account provides read write access to the Deployment Share This account is used to access files in the automation environment and optionally in some tasks if it is more File System This account requires full control of your Deployment Share and does not require administrative priv...

Page 205: ...ave additional rights across your network You should select a group of administrators to grant full administrator rights and determine how to grant rights and privileges to other administrators as necessary We recommend creating groups in Active Directory to manage these rights adding and removing accounts from these groups as necessary Note Each Deployment administrator needs to be granted public...

Page 206: ...You must add at least one user or group to enable security 1 In the Deployment Console click Tools Security 2 Add a new user or group We recommend clicking AD Import and importing Active Directory groups as this simplifies rights management The first user or group added is granted administrator rights Each additional user or group after the first are granted no rights and must be assigned rights e...

Page 207: ...object tree Instead the object in question looks in the current location and up the tree for the first permission it can find and uses the same z If a console user does not have permissions to run all tasks the job contains the user is not allowed to run the job Part 3 Database Security Securing your Deployment Database is tied directly to securing the account you use to connect to the database De...

Page 208: ... Install To create the Deployment Database during the Deployment Solution installation you need to grant the System Administrators database role to the administrator installing Deployment Solution These rights can be revoked after the installation completes 1 Open Enterprise Manager and connect to your SQL Server 2 Browse to Security Logins 3 Select the Administrator account you are using to insta...

Page 209: ... you are using to run the Deployment services If the login is not listed add it 4 Click the Database Access tab select the eXpress database and enable the db_owner role 5 Click OK and verify that the change was successful Rights Required for Deployment Administrators Each Administrator with console access must be granted public rights to your Deployment Database The best way to do this is by assig...

Page 210: ...cusses the following z Deployment Agent Authentication page 210 z Additional Agent Security page 212 z Keyboard Locks in Automation page 212 Deployment Agent Authentication We recommend providing a Deployment Server hostname rather than using multicast and implementing key based authentication if additional security is needed Key based authentication prevents agents from connection to un trusted D...

Page 211: ...ment Console right click a computer or group and select Change Agent Settings Production Agent 2 Select Connect directly to this Deployment Server and provide the hostname 3 Select to Enable key based authentication to Deployment Server and provide the path to your server key file on your Deployment Share ...

Page 212: ...mputer Keyboard Locks in Automation Lock the keyboard whenever possible in automation This prevents the session from being broken manually on the managed computer If you set up your account according to the instructions in this document this risk is greatly reduced as the account you are using has only read write access to the Deployment Share However if you are using an account with broad network...

Page 213: ...d you no longer need access to this account To determine whether you have sufficient rights browse to hostname admin Replacing hostname with the name of the computer where you want to install the Deployment Agent If you can access this share you have sufficient rights Appendix B Managing Task Passwords When a task executes it remembers information about the administrator who executed it as part of...

Page 214: ...rity key should be backed up to a secure location in case this Deployment Server needs to be re installed If you re install without this key each agent using key authentication needs to be updated to use the newly generated server key file The public key is located on your Deployment Share and should be backed up as well Enabling Key based Authentication with Redirection If your Deployment Server ...

Page 215: ...n Data and User Settings To perform migration Deployment Solution uses an integrated technology called Altiris PC Transplant A complete guide to PC transplant can be viewed by launching the PC Transplant Editor Deployment Console Tools PC Transplant Editor ...

Page 216: ...tion understands the Windows file system and captures just the data So an image of an 80 GB hard drive only requires as much space as the data on the disk How Imaging Works 1 Computer boots to automation 2 The rapideploy executable creates the disk image and transfers it to a remote location or reads the disk image and restores the target partition or hard drive File Systems Hard disks are imaged ...

Page 217: ...iple partitions the partition size percentage of the Client PCs will by default be the same as the image source Example If you image a 100 GB hard disk where 40 40 GB of the disk is a Windows XP partition and 60 60 GB is a data partition a Client PC with a 200 Gigabyte disk will use the same percentages The size of the Windows XP partition will be 80 GB and the data partition will be 120 GB RapiDe...

Page 218: ...ur httpd conf file You also need to obtain and install mod_put module to enable image uploading In IIS consult your documentation for information on enabling keep alives and uploads Basic authentication is supported Windows digest authentication is not supported You might also need to specify a file type of application octet stream for your images to prevent errors Capturing Images See Creating a ...

Page 219: ...olution 219 Capturing and Deploying Disk Images Managing Images You can view and make changes to RapiDeploy image files img using the Altiris ImageExplorer For more information see Altiris ImageExplorer on page 316 ...

Page 220: ...n a Tools subdirectory WinPE must be used in automation for for all ImageX jobs Capturing and Distributing ImageX Images As ImageX is a 3rd party tool limited support is provided in the imaging wizard To access the full functionality of ImageX customize the ImageX Imaging sample jobs for your environment When using the Create Disk Image task the following restrictions apply z Only the C drive is i...

Page 221: ... the Mac imaging configuration process 1 Create an automation image This image is a standard OS X operating system with the Deployment Agent installed and configured for automation 2 Enable NetBoot This is an OS X Server feature that enables network booting similar to PXE Server 3 Add your automation image as the default NetBoot image When an imaging job is assigned to a Mac computer the Mac agent...

Page 222: ...iris Agent For instructions see Installing The Mac Deployment Agent page 263 7 After the installation completes open etc altiris deployment agent install conf in a text editor and change the following export OS_TOOLBOX darwin To export OS_TOOLBOX automation To edit this file you can run sudo vi etc altiris deployment agent install conf and select shift i to insert the text When finished type wq to...

Page 223: ...mpletes you can delete SystemRO dmg 4 Add an additional 1 GB padding to the image using the following command hdiutil resize size newsize Volumes NetBootSP0 System dmg Replace newsize with the current size of your image plus 1 GB If necessary you can determine the current image size using a command similar to ls alh Volumes NetBootSP0 System dmg You are now ready to configure the NetBoot Service C...

Page 224: ...tBoot server double click Volumes NetBootSP0 System dmg to mount the captured image as a volume 2 Run the System Image utility Applications Server Network OS 10 3 or System OS 10 4 Image Utility 3 In the upper pane select New Boot 4 Provide Automation as the image name 5 Provide an image ID Example 1300 6 Leave the default NFS option selected 7 On the Contents tab select disk image then browse to ...

Page 225: ...addresses when booting clients 5 Select the NetBoot service 6 On the General tab select the volume containing your images 7 On the Images tab select the Automation image and Enable the image Enable the diskless option Select it as default The NetBoot service also requires the AFP and DHCP services to be started This is done automatically on 10 5 On 10 4 you might need to manually start the AFP ser...

Page 226: ...isk Image tasks To add support for Symantec Ghost 1 On the Deployment Share create a folder called ghost Copy ghost exe for DOS support and or ghost32 exe for WinPE support to this folder Symantec Ghost is now available for selection in the Create Disk Image and Distribute Disk Image tasks A configuration file called ImageTools ini located in the root of your Deployment Share contains settings you...

Page 227: ...s you might want to repackage include z Supporting corporate standards by customizing the way applications are installed z Creating silent installations or limit the options available to end users z Creating transforms for the repackaged installations z Changing the source paths in the installation to UNC paths z Building complex launch conditions using Windows Installer runtime properties that te...

Page 228: ...point After you have a way to execute Wise Setup Capture on the reference computer continue to the next section Capturing a Software Package page 228 Capturing a Software Package What Can I Capture Depending on the complexity of the installation certain programs are better candidates for repackaging than others Installations that perform simple file copies and registry changes such as WinZip Adobe...

Page 229: ...completes review the captured changes and add stand alone files and registry settings in the next section Customizing a Software Package page 229 Customizing a Software Package Open the Wise MSI Editor and open the MSI you captured If you added shortcuts Start All Programs Altiris Deployment Solution Wise MSI Editor Complete details on using Wise MSI Editor are in the Wise Packager Help WisePackag...

Page 230: ... a transaction list that it follows to complete the installation If the installation fails Windows Installer performs a rollback which returns the computer to its previous state Advantages of Windows Installer Before Windows Installer every software application had its own setup executable file usually setup exe or install exe Although many software manufacturers used common installation tools lik...

Page 231: ...pplication files that look at a file s version and its shared DLLs to prevent conflicts between applications Version Rules Decides whether to install a file to a directory by looking at a file s date language version and the modified date on a non versioned file Reference Counting Tracks which applications have installed every file and registry key on the computer on the component level so the Win...

Page 232: ...nstallation Instead open the MSI directly in Wise MSI Editor To customize it for specific workgroups create a transform z SetupCapture does not monitor any internal logic within the installation and it does not replicate the user interface of the original installation z SetupCapture creates a separate feature for each EXE that s installed that has a shortcut Isolating EXE components into features ...

Page 233: ...Deployment Solution 233 Software Packaging z Registry keys that define an environment variable are converted to an environment variable in the repackaged installation ...

Page 234: ... share and any other network resources available in the production or automation environment z Intelligent access to values stored in your DS database DS retrieves values based on the computer currently running the script so a single script can provide unique values for 1000 s of computers z Firm logevent and other Altiris tools The following diagram illustrates how scripts are processed by DS Eac...

Page 235: ...e computer and executing a database query before you can perform a task The same COMPNAME token can provide a unique value for each computer that runs this script When a script is processed DS first parses each script for two things tokens and predefined server scripting commands Tokens are replaced additional action might be taken based on the commands found before the script is delivered to the ...

Page 236: ...tional memory for complex scripts BootWorks is unloaded automatically when you specify ScriptedInstall BootWorks Unload ReplaceTokens Tokens are replaced automatically in your scripts This command replaces tokens in additional files such as those used when configuring a computer Source represents the source file containing the tokens you want replace and destination represents the output file afte...

Page 237: ... server looks for the paths specified by Firm on the server not the client This is valuable when you want to retrieve tokens specific to a number of computers but the script can execute successfully on the server This can relieve network traffic and prevent interruptions on managed computers However when a script runs server side the script is executed separately for each computer assigned to the ...

Page 238: ... be executed directly in your scripts In the Windows production environment the logevent utility is called WLogevent exe In order to use WLogevent exe you must make the executable available to the Windows client either by providing it with an image a software deployment or by simply copying the file directly before your script executes On DOS events are queued until the script completes and they a...

Page 239: ...error handling in Visual Basic script On Error Resume Next Set WSHShell Wscript CreateObject Wscript shell look on the local computer strComputer Set objWMIService GetObject winmgmts strComputer root cimv2 ErrNum Err Number If ErrNum 0 Then Set colNetCards objWMIService ExecQuery _ Select From Win32_NetworkAdapterConfiguration Where IPEnabled True cycle through all of the nics For Each objNetCard ...

Page 240: ...ed has local access to logevent Similar to Visual Basic script Linux provides a powerful method to track error values When running scripts on Linux use logevent to report the status to the server after you have used the built in mechanisms to retrieve errors The following script contains an example of error handling on Linux bin sh export PATH PATH opt altiris deployment adlagent bin grep foo foo ...

Page 241: ...ome a major bottleneck limiting your ability to manage computers at these remote locations The following diagram outlines a typical network topology that can benefit by implementing an image distribution framework It consists of a distributed network with several remote locations and subnets connected using routers over permanent reliable but slow WAN links Typically managed computers at remote lo...

Page 242: ... z Each subnet has a file server to host a local image store z All managed computers regardless of location connect to the local image store to retrieve images This eliminates downloading an image over the WAN link before an imaging operation z The location of each managed computer is determined automatically based on IP address using a custom utility Using this method the same distribute image ta...

Page 243: ...Open getsrv bat in a text editor This batch file calls getsrv exe to populate the server name variable Getsrv bat should look similar to the following copy F server lst c tools server lst C tools getsrv exe s c tools server lst v SERVERNAME c tools srvenv bat call C tools srvenv bat This example copies the server lookup file server lst from the Deployment Share to the automation drive Getsrv exe i...

Page 244: ...SERVERNAME This drive mapping should look similar to the following SERVERNAME share Replace share with the share name of your local image stores 3 Managed computers must be able to resolve the name of the central Deployment Server If using DOS automation NetBIOS is used to resolve names so we recommend adding your Deployment Server to the lmhosts file We also recommend adding the name and IP addre...

Page 245: ...s getsrv bat net use drive SERVERNAME share yes Deploy the Boot Configuration This configuration is now ready to be deployed using PXE installed to an automation partition or copied to boot media Computers must boot this configuration when performing imaging tasks Step Five Distribute an Image You are now ready to test your configuration by deploying an image Use the standard deploy image task in ...

Page 246: ...s enhanced task logging and history tracking features to let you recall administrative actions and quickly redeploy mission critical servers See Server Management Features on page 246 Set Server specific options Servers are essential to any organization and require special planning and management strategies Deployment Server provides server specific features to automatically deploy new servers and...

Page 247: ...server Deployment Server also lets you view and debug each step in the deployment script and track each job to provide a history of tasks for redeploying a server Server Deployment Options Deployment Server includes features to automatically reconfigure and redeploy new servers If you are using Initial Deployment to automatically re image new servers or run installation scripts you can 1 safeguard...

Page 248: ...rompt for Remote Install When you run a deployment job on a computer where the Deployment Agent has been remotely installed a message will appear stating that no BootWorks partition or PXE stamp is found The message will stay open until the user clicks OK on the message dialog which delays executing the scheduled job as part of an automated redeployment process To fix this delay 1 Select Tools Opt...

Page 249: ... Initial Deployment set up Clear the Servers check box in the Advanced dialog If both new computer features are set up and a new server blade is installed in a Bay not previously identified by the Deployment Server the Create Virtual Bay feature will execute and Initial Deployment will not execute New Server Blades in Identified Bays If a new HP server blade is installed in an identified Bay one t...

Page 250: ...ter is associated with a new server blade Server Change rule Select the Server deployment rules to run on the Bay when a new server blade is installed Note If you create Virtual Bays for an enclosure such as the BLe class with 20 bays and if another model of server blade with an enclosure containing fewer bays is connected such as the BLp class with 8 bays the excess virtual bays will be truncated...

Page 251: ...mes under the Fujitsu Siemens rack name Example Fujitsu Siemens enclosureName bayName See also Server Management Features on page 246 and Server Deployment Options on page 247 IBM Server Blades IBM high density Blade Centers can be deployed and managed from the Deployment console All IBM blade servers are supported by Deployment Solution but the server blades can also be managed from the physical ...

Page 252: ...Deployment Solution 252 Part V Operating System and Platform Reference This section contains operating system and platform specific information you need to consider when managing computers ...

Page 253: ... when you create the configuration When a managed computer boots this configuration PXE automatically detects the architecture and sends the correct boot image If you attempt to boot an x64 computer without an x64 boot image it will use the x86 version An Itanium will attempt to boot only an Itanium boot image z When you create an automation partition or boot disk from a Boot Disk Creator configur...

Page 254: ...aries to the client and running the installation script You can configure the agent using the configuration script modifying the configuration file directly or by modifying the configuration directly in the Deployment Console If you need to install ADLAgent on multiple computers you can copy the installation files to an NFS or other share on your network use standard remote access tools to run the...

Page 255: ...ed on a reiserfs partition you must use the raw switch when imaging this partition to preserve the structure Second if you are using an automation partition your MBR is modified to boot this partition If you install a new version of a bootloader your MBR is modified and you might not be able to access your automation partition If this occurs you can reinstall the automation partition To prevent th...

Page 256: ... Thin Client Operating Systems page 257 Production versus Automation Agent Deployment Solution requires that a Production Agent be installed to each thin client you want to manage from the Deployment Console Thin client computers come pre installed with the Deployment Agent so when they are added to a Deployment Server system communications between the server and client are established right away ...

Page 257: ...ows XP Professional operating system with full Win32 Application Program Interface API capabilities Manufacturer Model Fujitsu Siemens Futro B S and C series thin clients running the Windows XP Embedded operating system Currently Deployment Solution does not support Futro thin clients running Linux Futro S series thin clients come pre installed with the Deployment Agent and a license for Deploymen...

Page 258: ...nced Write Filter is an IT managing feature that helps control the data stored on a thin client s hard drive Some of the tasks Deployment Solution tasks that are impacted by the Enhanced Write Filter are certain deployment jobs and installing the Deployment Agent for Windows Other tasks such as creating and distributing images and modifying the configuration computer name or IP address already hav...

Page 259: ...e a different method of enabling and disabling the Enhanced Write Filter See the Sample Jobs folder in the Jobs pane in the Deployment Console for examples or contact Neoware The following are a few examples of how to use the ewfmgr exe program Switch Description all Performs a specified command such as disable or enable on all protected volumes The default command is to display protected volume i...

Page 260: ...on come pre installed with the Deployment Agent and can be managed after they are connected to the network However due to limitations of the Deployment Console you cannot push the Deployment Agent for CE NET to thin clients running the Windows CE NET operating system Rather you must run the Deployment Agent installation from the thin client directly Linux HP and Fujitsu Siemens distribute their ow...

Page 261: ...gent Config option The graphical configuration utility is not installed by default Silent Installation To perform a silent installation use a command similar to the following DAgent msi qn TCPaddr 172 19 17 180 tcpport 402 To remotely install combine the above instructions for a silent installation with a login script or group policy object To view additional options run the DAgent msi using the s...

Page 262: ...istribute Software Task you have left the advanced option on the default selection Copy files using Deployment Server then Execute or you have provided appropriate domain credentials to perform a remote installation See the release notes for additional information Vista Run Script Tasks Due to increased restrictions placed on services in Vista scripts executed by Deployment Solution cannot display...

Page 263: ...ouble click the secondary configuration application 5 Complete the prompts providing the IP address of your Deployment Server and the IP address of your NetBoot Server When the installation completes the computer appears in the Deployment Console Removing the Mac Deployment Agent An uninstall script is contained in the opt altiris deployment adlagent bin folder Before executing this script you mus...

Page 264: ...ence Deployment Solution Help Files This section contains the help files that are launched from the Deployment Console Web Console and other Deployment Solution utilities Translated versions of these help files are available in the product ...

Page 265: ...onnections Option on page 271 z Set debug and log file options See Debug Option on page 272 From the main view of the Altiris Deployment Server Configuration Utility you can view the Deployment Server activity and statistics start and stop the Deployment Server access Deployment Server configuration options and more The following are the fields and tabs on the Altiris Deployment Server Configurati...

Page 266: ...Server services or to view server statistics just as you can do from the Manage Services and Applications Services Altiris eXpress Server service The default setting is to provide a user name and password during installation You can select the Use the following account and password option to install the service on different computers and to access components across the network Options Opens the Al...

Page 267: ...mputers as inactive If this option is selected inactive client connections are reset according to a specified schedule Click Schedule to schedule the resetting of the inactive client connections Encrypt communication between IIS and Data Manager Select this option to encrypt all communication between IIS and the Data Manager Send Wake On LAN to inactive computers when scheduling Select this option...

Page 268: ...restart the service To remove a drive mapping 1 Open the Altiris Deployment Server Configuration Utility in the Control Panel of the Deployment Server computer 2 Click Options and click the Drive Mappings tab 3 Select the drive mapping you want to remove and click Remove 4 Click Yes to confirm the deletion Click OK 5 Click Yes to restart the service Remove Removes the selected drive mapping Data s...

Page 269: ...cast is not disabled Multicast Port This port is used only if multicast is not disabled Multicast TTL Specifies the number of hops or hubs that the client computer can go through to multicast This is used only if multicast is enabled TCP Port This port is used whether multicast is enabled or disabled Use Default Click to use the default communication protocol options Automatically update clients A...

Page 270: ...ulticasting select the Use disk image multicast threshold of n clients check box and set n to 0 If you want to use multicasting whenever there is more than one client computer do NOT select the Use disk image multicast threshold of n clients check box If you want to use multicasting only when there are more than a specific number of client computers select the Use disk image multicast threshold of...

Page 271: ...er the user name for the specified database 3 Enter the password To access and authenticate to a Novell NetWare Server 1 In the NetWare Server Authentication section enter the user name for the selected server 2 Enter the password To access and authenticate to the Deployment Server 1 In the DS Authentication section click Add Key to add a security key for the server you want to connect to 2 Click ...

Page 272: ...ween managed computers Engine Debug Logging Select this check box to set the name and location of the logging report and the logging level for Deployment Server The Engine Debug Log is a single report that captures debug information for Altiris support personnel Log File Name Set the path and name for the log text file The default name is axengine log in the Deployment Server shared directory Max ...

Page 273: ...etes the Create Boot Disk Wizard automatically appears This is the production process of Boot Disk Creator that lets you select the boot disk creation method to implement the configuration you created You can create floppy boot disks to use for DOS configurations since Linux and WinPE system files are too large to fit on a floppy Network and automation boot disks can create ISO images which you ca...

Page 274: ... create pre boot environment configurations to help manage automation tasks used by the Deployment Server Toolbar Description The icons on the Boot Disk Creator toolbar help you navigate easily between the tasks that you want to perform The options are To start the Boot Disk Creator tool open the Deployment Console and click this icon on the toolbar or click Tools Boot Disk Creator Icons Descripti...

Page 275: ...ne Pre boot Operating System for this Configuration Boot Disk Creator supports DOS Linux and WinPE operating systems You can use these operating systems to create pre boot environments Select the pre boot operating system and click Install Pre boot Operating System Files to install the pre boot operating system files See Install Pre boot Operating System Files on page 288 File Server Type DOS The ...

Page 276: ...pport DOS Linux or WinPE so that client computers can connect to a network or Deployment Server depending on whether you create automation partitions or network or automation boot disks The Have Disk button lets you install network adapter drivers from a disk CD or network folder The Internet button lets you connect to an Altiris supported Web site to download and install network adapter drivers T...

Page 277: ... or by navigating to a folder You can download network adapters from the manufacturer s Web site and save to a folder or a disk to install later New network adapters come with a floppy disk or CD to install the appropriate drivers Internet Altiris supports many manufacturer network adapters as well as a Web site for you to download the latest NIC drivers From the Network Adapters page click Intern...

Page 278: ...ing this configuration Enter an IP address Subnet mask and Default gateway You can also enter a Primary WINS server address and a Secondary WINS server address if you need to resolve IP addresses and naming conventions You must create a configuration for each client computer so that the IP address is not the same for all computers Altiris Deployment Server Communication This option lets you set co...

Page 279: ... select Use TCP IP multicasting to find the Altiris Deployment Server a multicast packet is broadcast to the server you specify If you leave this field blank the client computer connects to the first server that responds to the multicast packet Use TCP IP to connect to the Altiris Deployment Server Select this option to connect to a specific Deployment Server You must select this option if your ne...

Page 280: ... automation or a network prompt they connect to the appropriate server You can create multiple drive mappings or mount points However if you are creating a DOS configuration the first mapped drive you specify must connect to the Deployment Share Field Definitions Manually create drive mappings Select this option if you want to include the drive mappings in the autoexec bat file when client compute...

Page 281: ...itions Network and Automation Boot Disks on page 283 and Edit Configuration on page 281 If you are using Boot Disk Creator from within the PXE Configuration Utility the Edit Configuration page appears See Edit Configuration on page 281 Edit Configuration This is the main Boot Disk Creator page that appears when you start the utility If you are using Boot Disk Creator from within the PXE Configurat...

Page 282: ...ults If you edit text files in a OS additional files folder yet the specific configuration file is the one that is written to the boot image the result is not as you expected Add files to all configuration When you install a pre boot operating system a new folder is added to the bottom of the left pane on the main page of Boot Disk Creator If you install pre boot operating system files and the OS ...

Page 283: ...s is a progress page to display the automation boot disk creation process The process does the following Copying files to production area Inserting files into the file system Creating PXE files and so on PXE Boot Image Creation Complete This page informs you that the PXE boot image file creation is complete When you click Finish the New Shared Menu Option page appears displaying the location of th...

Page 284: ...nt computer to automation See Create Automation Boot Disk on page 285 Create a network boot disk Select this option to create network boot disks so you can manually boot a client computer to a network server See Create Network Boot Disk on page 286 Create Automation Partition Install Package This feature lets you create an automation installation setup package that installs an embedded automation ...

Page 285: ...r more information Creating automation partition installer This is a progress page to display the automation installation package process The process does the following Copying files to production area Creating the FRM files Preparing install environment Inserting into the installer package and so on The setup package is located at After the automation partition installation package is created the...

Page 286: ...to create an ISO CD boot image ISO CD image file path Enter the path to the folder that stores ISO images You must use third party software to burn the ISO image to a CD Bootable disk Select this option to create a boot disk that can be used at client computers to manually boot to a network server Select bootable media from the drop down list All the listed drives display the physical drive number...

Page 287: ...older where ISO images are stored You must use third party software to burn the ISO image to a CD Uninstaller package file path Enter the path or browse to the folder where the uninstaller package file is stored Run silent uninstall Select this option to run the installer without user input Bootable disk Select this option to create a boot disk that removes an automation partition from a client co...

Page 288: ... does not require Linux boot images After working with Deployment Server and Boot Disk Creator if you decide you want to create Linux configurations and Linux boot images you can open the Install Pre boot Operating System Files dialog at any time to install the Linux system files or of the other pre boot operating system files When you install the pre boot operating system files for DOS Linux or W...

Page 289: ...installation CD Floppy Disk Select to format a disk using the Format a s command Copy the required files listed below from an original Microsoft Windows 98 installation CD to the floppy disk Boot disk creator only installs DOS files from the A drive If you select B Floppy Drive from the drop down list Boot Disk Creator still tries to read data from the A Floppy Drive Folder Select to copy the requ...

Page 290: ...the release notes for the current list of supported WinPE versions and for specific installation instructions Set Default Pre boot Operating System While creating an automation partition from the Tools menu on the Boot Disk Creator interface you must select the pre boot operating system that you want to set as the default such as FreeDOS or MS DOS ...

Page 291: ...twork It keeps track of all PXE Server boot menu options and checks if they are Shared or Local PXE Manager also gathers data from all PXE Servers and stores the information in the PXE Manager ini file Whether you are in Use Shared properties or select a server to Customize PXE Server Shared Configuration the changes you make to the properties settings are saved to the PXE Manager ini file when yo...

Page 292: ...erform a PXE boot a menu list appears for you to select a boot menu option The PXE Server downloads the boot image for the boot menu option you select See New Shared Menu Option on page 295 Automation Tasks Only Shared boot menu options can be assigned to a task in a deployment job The tasks that can run in automation are z Run script z Create Disk Image z Distribute Disk Image z Scripted OS Insta...

Page 293: ...e last saved action which could be either Shared Configuration or Custom PXE Server mode The boot menu options listed are for all PXE Servers so the Scope is always Shared The operating system field indicates the type of pre boot operating system files used to create the boot menu option If you select a PXE Server from the File menu a window displays the boot menu option for the selected PXE Serve...

Page 294: ... appears on client computers after a PXE boot operation is performed Scope Shared indicates that the configuration is available on multiple PXE Servers in an environment where they are all serviced by a single Deployment Server Local indicates that the configuration was created for a specific PXE Server OS The operating system that the configuration uses to boot on client computers Up and Down Cli...

Page 295: ...are meant for the PXE Servers and the client computers that use PXE as their primary boot option Menu Item Properties Name This is the name of the PXE configuration that appears as a boot item when the PXE menu downloads to client computers after a PXE boot operation is performed Allow as default PXE boot option Select this option to move the configuration you are creating to the top of the boot m...

Page 296: ...er This field helps you to identify the PXE item you are configuring PXE configurations are stored in the default directory which is C Program Files Altiris eXpress Deployment Server PXE Images MenuOption number The MenuOption number increments each time you create a new configuration Edit Shared Menu Option In the Shared Configuration mode only the Shared configuration appears in the view section...

Page 297: ...ns and boot images You can install all supported pre boot operating system files at the same time or you can install only those pre boot environments that you want to use You can install FreeDOS and MS DOS but you must select which DOS version you want to run since you cannot run both versions at the same time Example You can install the DOS and WinPE pre boot operating system files to start creat...

Page 298: ...h Deployment Solution Hot Fixes or Service Pack releases When you install a new version use the Regenerate Boot Images option on the Boot Menu tab to apply the new version to your existing configurations Note FreeDOS may not support newer motherboard chip sets MS DOS Using an original Microsoft Windows 98 installation CD copy the appropriate files to a system formatted floppy disk a folder that ca...

Page 299: ...ot Disk Creator When you install WinPE you must use one of the following z Altiris WinPE installer z Microsoft WAIK DVD z Import installed WAIK When you install a new version use the Regenerate Boot Images option on the Boot Menu tab to apply the new version to your existing configurations Set Default Pre boot Operating System While creating an automation partition from the Tools menu on the Boot ...

Page 300: ... See Install Pre boot Operating System Files on page 297 File Server Type DOS The Deployment Share stores image files packages and data files By default the Deployment Share is installed on the Deployment Server but you can install it on another server depending on whether you selected the Simple or Custom Deployment Solution installation Field Definitions Microsoft Windows Select this option to s...

Page 301: ...rs See Internet on page 302 The Advanced button lets you further define network adapters and their drivers See Advanced on page 302 Multiple Network Adapters Load Order This option is for DOS and WinPE configurations only This lets you specify the order in which the physical network adapters are detected when the client computer boots Example If most client computers have a Broadcom Ethernet adapt...

Page 302: ...IC_drivers link Download the driver you want and unzip the files to a folder on the hard drive Click Add Driver to add the driver to the Network Adapters list Advanced These options lets you add or change settings for the network adapter cards so they work correctly when using DOS configurations This option is not available when you create a Linux or WinPE configuration In the Network Adapter page...

Page 303: ...ies for the Deployment Server The Deployment Server IP address and Port fields are critical because they define how client computers establish communications with the Deployment Server Example The TCP port on the Deployment Server is set to 402 and the Port field in the Boot Disk configuration is set to 502 These settings prevent client computers from communicating with the Deployment Server becau...

Page 304: ... multicasting See your network adapter documentation call the manufacturer or consult with your IT department for information z Server IP address Enter the IP address of the Deployment Server to access information stored in the Deployment Share If you are using the Intel Universal NIC driver UNDI the IP address is required z Port This option defines the port that the client computers will use to c...

Page 305: ...Path Enter the path for the Deployment Share The path you enter maps to the drive letter you selected in the Drive field You can also click Browse to navigate to the Deployment Share if you are unsure of the directory path or if the image files are stored on a file server Example Windows users server share NetWare users server volume directory Linux users server mount point Create an entry in the ...

Page 306: ...figuration you selected or created is based on the Linux pre boot environment z Red The configuration you selected or created is based on the WinPE pre boot environment To change the configuration settings right click a configuration folder and select Edit Configuration and click Edit until you find the page for the options you want to change You can also make text edits to files selected from the...

Page 307: ...e files from the OS additional files folders to all the corresponding operating system configurations and adds these files to the boot images These folders are considered global because they can affect configurations of the same type Example Using the Windows Copy and Paste command you can add tracert exe to the WinPE additional files folder Each WinPE configuration you create adds the files in th...

Page 308: ...iguration and Customize PXE Server modes are displayed If for some reason you need to change the IP address on a PXE Server enter the same IP address in this field Enter the IP address for the specific PXE Server you selected from the File menu When client computers perform a PXE boot the IP address helps them communicate with the PXE Server Use Shared properties This is selected when you set the ...

Page 309: ...erver must access the Deployment Server and the Deployment Database to retrieve the information required to carry out these tasks on client computers The Deployment Server IP address Engine Port and Data Manager Port are critical fields because they define how the PXE Server establishes communication with the Deployment Server Example The TCP port on the Deployment Server is set to 402 and the Eng...

Page 310: ...E responds immediately but Initial Deployment still waits for 5 minutes before running Wait indefinitely Select this option so that a user must press F8 to start the Initial deployment job Use default timeout Select this option to use the time out value set in the Initial Deployment Advanced Properties page from the Deployment Console Timeout Select this option to enter a time out value The boot m...

Page 311: ...ort text file manually or you can import a file that has previously been exported from any PXE Server on your network When the Windows navigation dialog appears go to the folder or disk drive where the text file is located and click OK Export This option lets you export the MAC address list to a comma separated text file You can use the export feature to save a large MAC address list and import th...

Page 312: ...tion is added and the boot image is created These are the files that a PXE Server downloads when you select a boot menu option from the menu list on a client computer PXE Manager PXE Manager creates a PXE Manager ini file which gathers data from all the PXE Servers on the network The PXE Manager ini file creates and sends a PXE ini file that is specific to each PXE Server Both PXE Manager ini and ...

Page 313: ...ng Multicast Address Enter a multicast address between the range of 224 1 1 0 225 255 255 255 Number of Multicast Addresses Available Enter the number of addresses available for the PXE Server Limit 128 000 Maximum Addresses Available to Single PXE Server Enter the maximum addresses available to a single PXE Server Data Logs Tab This option lets you enable data logs to help you troubleshoot incide...

Page 314: ...er the updates have been applied to the PXE server Remote PXE Installation You can install a PXE Server to any remote location on your network using this feature However all remote installations must be pushed from the Deployment Server Example Your business home office is in Washington and you have two smaller offices in Los Angeles and Australia You can use the Remote PXE Installation Wizard to ...

Page 315: ...ork to select a remote PXE Server 9 Enter the PXE Server IP address 10 Enter the PXE Server install path and click Next 11 On the Gathering Information page enter a User name and Password with administrative rights on the remote computer Click Next 12 On the Installation Information page click Install ...

Page 316: ...he contents of a folder or edit a file using its associated application See also Using ImageExplorer on page 320 ImageExplorer Features z Add new files and folders z Command line mode z Convert images z Create image indexes z Extract files and folders z Exclude or include volumes folders and files from being restored z Find files in an image z Open a file with its associated program and edit z Mak...

Page 317: ... and select Add Folder Convert Image Converts image files from file format 4 to the format most currently used by RapiDeploy See Convert an Image on page 322 Option 1 Ctrl T Option 2 Select File Convert Image Copy Copies a file or folder from one location and lets you paste it to a destination image file Note Copying large amounts of data and large numbers of files between image files can take sev...

Page 318: ...on 3 Right click a container object and select Find Include Lets you include volumes folders and files previously marked Excluded in the image file when deploying the image file to a client computer Note You can also include a previously excluded file by clicking the next to the file in the Details pane A check box reappears Option 1 Insert key Option 2 Select Edit Include Option 3 Right click an ...

Page 319: ...en image files created using IBMaster You need an ImageExplorer version prior to Deployment Solution 6 9 to open these image files You need an ImageExplorer version from Deployment Solution 5 5 or earlier to edit these image files Option 1 Ctrl O Option 2 Select File Open Paste Places a copied file or folder from one location to another Option 1 Ctrl V Option 2 Select Edit Paste Option 3 Right cli...

Page 320: ...roperties or pressing Properties Provides general information about the folder or file such as size modification dates and attributes Properties appear differently for images volumes folders or files See View Properties on page 320 Option 1 Alt Enter Option 2 Select File Properties Option 3 Right click an item and select Properties Replace Files available for files Provides a way to update a file ...

Page 321: ...ng Properties for a selected file in an image click the General tab to view its included files and additional property data such as size location and attributes General Properties for Files This page displays data for files After selecting Properties for a selected folder in an image file click the General tab to view its included files and additional property data such as size location and attrib...

Page 322: ... the same folder Add New Files 1 Open ImageExplorer 2 Select File Open Select an image file 3 Click OK 4 Right click the preferred volume or folder in the image and select Add Files The Select the files to add dialog appears Option 1 Locate a file and click Open The new file appears in the Details pane Option 2 Drag a file from Windows Explorer to the selected folder or volume in an image file dis...

Page 323: ...the image file is displayed New Output Image File Select a folder and filename for the image file you want to convert based on the new segment size New segment size MB From the drop down list select a size for image segments The list of options includes default sizes for CDs zip drives and more When a file segment reaches this limit a new segment is created until the entire image is converted Esti...

Page 324: ...ck File and select Create Image Index 2 In the Image File to Index field browse to a folder and select an image file 3 Optional In the Output Folder for Index optional field browse to a folder for the index file output 4 Click OK Extract a Folder Use this feature to save a folder or file from an image to an external destination folder To extract a folder 1 Open ImageExplorer 2 Select File Open Ima...

Page 325: ...placed See Find Files and Folders on page 324 Field Definitions Find what Enter the string or characters to find files or folders based on system attributes or ImageExplorer attributes of the files or folders Select the Include matching files check box to select files Select the Include matching folders check box to select folders You can also select the Search sub folders check box to include sub...

Page 326: ...ent A 2 GB file takes more time than a 700 MB IMG segment RapiDeploy and only the first segment of the image file IMG are combined to create the executable that restores images However all other segments that make up the entire image including the index IMX are required when restoring an image See also Create an Image Index on page 323 Field Definitions Current self extractor type The image file y...

Page 327: ...ple scripts that let Deployment Solution run ImageX imaging jobs from the Deployment Console These sample scripts include documentation that helps you specify the name and location of the WIM files You can use ImageX to capture several different images into a single WIM file You can open the sample job and specify the location of the WIM file with the correct passwords and network locations You ca...

Page 328: ...age A table is displayed with the details that you selected in the Print Folder Contents dialog See Print Folder Contents on page 327 Field Definitions Lines Displays the number of lines in the report Print Click to print the report Save Click to save the report to a text file Print a File From the ImageExplorer interface you can select and print an actual file using its associated program If your...

Page 329: ... replacing files Paste and Drop Select this option to present a confirmation prompt to the user when dragging a file to a new folder in an image file when using the copy and paste operation to move files to another folder or when using the Add New Files command See Add New Files on page 322 Exclude Select this option to present a confirmation prompt to the user when assigning the Exclude option to...

Page 330: ... format of an image to the current format used by RapiDeploy the Split Image feature maintains the format of the original image but changes the size of its segments See Convert an Image on page 322 Example If you want to split a 2 GB image file so that it fits on CDs you can select 650 MB or 700 MB as the new segment size The result will be one image file with multiple segments You can copy the se...

Page 331: ...e 1 Click File and select Split Image File 2 In the Image File to Split field click Browse to navigate to a folder and select an image file to split 3 In the New Output Image File field click Browse to navigate to a folder Enter a new filename for the image 4 From the New segment size drop down list select a segment size 5 Click OK Command Line Switches This feature lets you create Deployment Serv...

Page 332: ...used accepted options are noted at the end in Options lang lang code Specify the language code for the user interface silent Do not display confirmations or errors password pwd Passwords for image files being opened overwrite When in silent mode do not confirm actions size size in MB Size of the new image segments in MB Indicates the options that can be used with any command Process exit codes 0 S...

Page 333: ... temp folder of the volume in slot 1 of w2k img C Program Files Altiris eXpress Deployment Server imgexpl f w2k img password develop add e txt 1 temp z Extract kernel dll from the Windows folder of the volume sys in w2k img to e dump C Program Files Altiris eXpress Deployment Server imgexpl f w2k img password develop extract sys windows kernel dll e dump z Convert the old format image file w2k img...

Page 334: ...ion laptops LAN and Web servers network switches and so on Windows computers and Linux computers can be managed as a unified environment with each client communicating through its own Deployment agent to update inventory data and react to Deployment Server commands and deployment tasks Select one of the following methods for installing a Deployment Server system z Simple install for Deployment Ser...

Page 335: ...ross the enterprise See Deployment database on page 336 and Connecting to another Deployment Server on page 93 The Deployment Console communicates with the Deployment database and Deployment Server services In a Simple Install for Deployment Server the Deployment Console is installed on the same computer similar to all other components In a Custom Install for Deployment Server you must ensure that...

Page 336: ...can identify a specific instance using this format database instance express Example If you have a clustered Microsoft SQL Server named SQLClusterSvr to manage multiple Deployment Solution systems on different network segments you can enter the name SQLClusterSvr salesSegment or SQLClusterSvr marketingSegment during the Deployment Server setup depending on the previously established database insta...

Page 337: ...ork segments This feature is supported in the silent install INI file and the GUI install executable Deployment Solution also supports a different name for the Deployment Database instead of the default name eXpress See Custom install for Deployment Server on page 343 and Deployment Server components on page 335 Deployment share The Deployment Share is a file server or shared directory where Altir...

Page 338: ...ironment specified by a user who has the permission to create a deployment job Use the boot menu option to request the PXE Server for the boot menu files and download the boot menu files from the PXE Server to the client computer s RAM storage The client computer always boots according to the request and reply communications taking place between the Deployment and PXE Servers Altiris supports DOS ...

Page 339: ...er does not detect the version of MDAC that is installed The Deployment Web console requires MDAC version 2 71 or later to install If the version of MDAC is earlier than 2 71 the Web console displays a Target of Invocation error See Deployment Console on page 335 and Deployment Server components on page 335 Deployment Server system requirements The following are the system requirements for Deploym...

Page 340: ...ver components on page 335 You can install the Deployment Server with a Microsoft Desktop Engine MSDE by using the Simple Install You can install the Deployment Web Console during a Simple Install PXE server Memory 128 MB Disk Space 25 MB for boot files DHCP server must be on the network but does not have to be on the same computer as a PXE Server Windows Server or Advanced Server Deployment datab...

Page 341: ... may have to wait for some time while Altiris Packager extracts files from this archive Note Click Extract Only to only extract the application and execute the application later You must run the axInstall exe file to start the installation 5 Select the Simple Install option from the installation types listed in the Deployment Server Install Configuration dialog 6 Optional Select the Include PXE Se...

Page 342: ...rve the data in your Deployment Database Click Next The Pre boot Operating System page appears 9 Select a default pre boot operating system from any one of the options such as FreeDos MS DOS Linux WinPE or None Browse to locate the FIRM file for FreeDos and Linux operating systems or the operating system files for MS DOS and WinPE Click Next The Installation Information page appears displaying the...

Page 343: ... Deployment Server Components Deployment Server Deployment Console Deployment Share and Deployment Database on different computers You can install Deployment Server with a Microsoft Data Engine MSDE or install it on an existing SQL Server See Deployment Server components on page 335 To run a custom install 1 Start the server and log on as the administrator account you created for the Deployment Se...

Page 344: ...plications The Deployment Share can exist on a Microsoft Windows server or Novell NetWare server Note You can only create the share if it is on a Microsoft Windows Server the Novell share should already be set up See Deployment share on page 337 c Select one of the following options to configure the licensing information If you do not have a license file select the Free 7 day license option The in...

Page 345: ...hentication to be used You must enter the user name and password if you want to use SQL Server authentication Note You cannot use the remote SQL database with NT authentication on a remote computer if you do not have administrative rights on the computer Click Next The Pre boot Operating Systems page appears Note If a previous installation of the Deployment Database is detected an axinstall prompt...

Page 346: ...mary page appears after the installation completes Note If you are upgrading your installation the message Do you want to replace the share appears Click Yes and continue If you click No a message appears stating that the share is already in use and you must manually set the share to point to the correct directory Click OK 17 Optional You can select one of the following options to install agents o...

Page 347: ...Click Extract Only to only extract the application and execute the application later You must run the axInstall exe file to start the installation 5 Select the Thin Client Install option from the installation types listed in the Deployment Server Install Configuration dialog 6 Optional Select the Include PXE Server option to install the PXE Server See PXE server on page 338 Click Install 7 Click Y...

Page 348: ...rosoft Sysprep files Remotely install Deployment Agent Select this option if you want to push the Deployment Agent to computers running Windows operating systems Install add ons to provision server hardware Select this option to install OEM add ons for servers Note This option is enabled only when add ons are present in the oeminstall addons section of the oeminstall ini file which is located in t...

Page 349: ... click Install 6 Click Yes on the Software License Agreement page 7 Enter a path for the Deployment Share and click Next 8 Select the components you want to install and click Next Install an additional Deployment Console Select this option to install another Deployment Console a Windows executable on another computer You can add as many Deployment Consoles as required to manage from multiple conso...

Page 350: ... ini file which is located in the eXpress directory This is the only option available on the Installation Information Summary page when you select Component Install You have successfully completed a Component Install for a Deployment Server system Click the Deployment Console icon on your desktop to view all the computer resources running Deployment Agents configured for your Deployment Server Ins...

Page 351: ... that follow a certain standard Because not all NIC drivers follow that standard you may have to move the files to a different location Ensure that the following files are in the same directory The DOS driver for your card drivername dos The sample protocol ini that comes with your driver protocol ini The OEM setup file that specifies the DOS driver oemsetup inf Example The OEM setup file may cont...

Page 352: ...r Options View tab and clearing the Use simple file sharing check box in the Advanced settings section z Enabled File and printer sharing in the Windows Firewall Windows 2003 Vista 2008 servers and Windows 7 You must enable file and print sharing in the Windows Firewall Enter administrator account information Enter common administrator credentials for all client computers or keep the default crede...

Page 353: ...s the following parameters c computer u username p password i input file The parameters must be entered in this order The password parameter is not required if the administrator account does not have one assigned If you are using the default settings you do not need to specify an input filename Each computer entry must be on a separate line Export You can export the listed computers into an export...

Page 354: ...roperties Select to prohibit users from changing any agent settings Enable changing of Security ID Select to manage the security IDs to run a SID utility as part of an imaging job Advanced Click to open the Computer Configuration Properties dialog and enter the settings for the Deployment agent you are installing See Computer configuration properties on page 101 2 If you have enabled the security ...

Page 355: ...mple To specify an IP address and port number for the client to locate the Deployment Server remove the semicolon from the TcpAddr and TcpPort lines and change the address and port number to the correct values Using remote agent installer You can create a template file when running Remote Agent Installer After modifying agent properties and adding computers to the Selecting Clients window click Ex...

Page 356: ...the adlagent conf file This file is located in the opt altiris deployment adlagent conf directory You can also change the adlagent configuration file settings by executing the configure script from the opt altiris deployment adlagent bin directory To edit the configure file directly open the adlagent conf file located in the opt altiris deployment adlagent conf directory and make the required chan...

Page 357: ...an install an Automation Partition from the Computers pane Here are some other ways to create and install an Automation Agent which is saved in an embedded recommended or hidden partition on the client computer s hard disk z For Deployment Solution systems running the PXE Server create boot menu options from the PXE Configuration Utility using one of the following methods Boot Disk Creator Direct ...

Page 358: ...rotection or AUP lets registered Altiris software users upgrade to any version of the registered product that is released during the coverage period without paying an upgrade charge Regular production licenses never have a license expiration date but always have an AUP date As long as this date does not expire you can use the license to register any version of Deployment Server Licensed Nodes The ...

Page 359: ...l need it when future product updates are released After you receive the key store it in a safe place such as a floppy disk for future reference You can store multiple license activation key files in individual folders on a single disk You can also store multiple license activation key files in the same folder but the file names must be different To apply a regular license file 1 Open the License ...

Page 360: ...57 Adding a license from the Deployment Console on page 360 Rapid Deployment Pack licensing on page 361 Finding the number of used licenses on page 361 Computers not using a regular license on page 361 Detecting an expired license on page 361 and Expired licenses on page 362 Adding a license from the Deployment Console Use this option to install a license to a computer from the Deployment Console ...

Page 361: ...l licenses you have used and the total licenses available You can view the information in the Computers pane to understand for which computers regular licenses have been applied In the Computers pane a clock icon in the lower left corner implies that the computer still has a free license See Managing licenses on page 357 Using the license utility on page 358 Adding a license from the Deployment Co...

Page 362: ...ng on page 361 Finding the number of used licenses on page 361 Computers not using a regular license on page 361 and Expired licenses on page 362 Expired licenses Regular Deployment Server licenses do not expire however the 7 day trial license and the 30 day evaluation licenses do expire and can cause some problems if not replaced properly after adding regular licenses Computers with expired licen...

Page 363: ...Install as well as a Custom Install option A Simple installation lets you install all components on a single computer The Custom installation lets you distribute individual components of a Deployment Server system on multiple computers The Thin Client Install lets you install the Thin Client view of the Deployment Console on your computer The Component Install option lets you install additional co...

Page 364: ... 2003 server 1 Click Start Control Panel Administrative Tools Local Security Policy Local Policies Security Options 2 Locate the Microsoft network server Digitally sign communications always policy setting right click it and select Properties Disabled 3 Disable the Microsoft network server Digitally sign communications if client agrees policy setting as well This is enabled by default Installing D...

Page 365: ...the image files RIPs and other package files are stored Ensure that you have a shared Windows or NetWare directory with available disk space and security rights before installing See Deployment share on page 337 Deployment Server install Install the Deployment Server on a computer The service is identified in the Services section of the Windows Computer Management as Altiris eXpress Server See Dep...

Page 366: ...S DOS DOS requires an original Microsoft Windows installation disk or browse to the system formatted files z Linux Browse to the BDCgpl frm file This is available on the Deployment Solution download site z WinPE Browse to the WinPE files z See Boot Disk Creator Help and PXE Configuration Help Pre boot operating system custom Select a pre boot operating system that the Deployment Server can use as ...

Page 367: ... SQL Port number z You can rename the Deployment Database default name eXpress by entering a different name in the Database Name field However this does not alter the Deployment Share name See Deployment Server components on page 335 PXE server install Select the options to boot locally using the Altiris Automation Partition For PXE compliant computers you can boot across the network using the Int...

Page 368: ...egment or if you are using the PXE Server with an UNDI driver click Connect directly to Deployment Server and enter the IP address of the Deployment Server that the managed computers can connect to Do not change the port number unless the default is already being used Note If you change the port number you must change the client configurations Discover Deployment Server using TCP IP multicast Lets...

Page 369: ...l Deployment Agents enable Sysprep support and download Adobe Acrobat for documentation Enable Microsoft Sysprep support Select this option to enable Sysprep support Provide the location of the Microsoft Sysprep files Remotely install Deployment Agent Select this option to push the Deployment Agent Install add ons to provision server hardware Select this option to install the add ons for Dell comp...

Page 370: ...d Deployment Server you can add components to the existing system Select the type of component you want to add See Deployment Server components on page 335 Console install You can install the Deployment Console either on the local computer or on multiple remote computers Installing the Deployment Console on remote computers lets you manage computers from multiple Deployment Consoles across the Dep...

Page 371: ...Altiris Deployment Solution from Symantec User s Guide 371 ...

Page 372: ...Deployment Solution 372 Part VII Technical Reference This section technical information for command line switches return code values and other detailed information for Deployment Solution components ...

Page 373: ...ple of the format needed There are various command line options available depending on whether the user is in a Trusted or Non Trusted account environment See Import Computer Utility page 378 Each utility connects to the Deployment Server Database to perform specific operations As a result the appropriate ODBC and security rights are required Each job utility supports the o d u p switches The o op...

Page 374: ...Name p DatabaseUserPassword Job Import Utility Syntax axImport filename options Options f folder name Job folder to be exported e job name Job to be exported s Process all subfolders also i Include the Initial Deployment Job y Suppress confirmation prompts dsn odbc dsn name ODBC data source name d db server Database server name u db user Database user name db db databaseName Database name p db pas...

Page 375: ...ce the amount of refreshes performed Example 1 Restore all jobs from a binary backup file axImport r backup dat Example 2 Restore jobs from a backup file into pre created folder named Test Jobs axImport f Test Jobs backup dat Create Job Utility Syntax axEvent job name options task type parameters d db server Database server name u db user Database user name db db databaseName Database name p db pa...

Page 376: ... tcf source dest Copy file tgi Get Inventory tre Restart tsd Shutdown tlo Logoff a Add task to existing job r Replace all tasks within this job x parameters Command line parameters for task f folder name Job folder to be created in i Import script into task definition w Run the script from Windows lnx Run the script in Linux n Don t notify consoles of the changes nc Don t do post image config de A...

Page 377: ...t Win2003 and Office 2003 a tds RIPs off2003 exe To migrate Oscar to Windows 2003 axSched Oscar Win2003 and Off2003 t 2009 12 31 08 00 Schedule Job Utility Syntax axSched computer group job name options OR axSched q filename options Options Note The format for time is yyyy mm dd hh mm If the date is omitted the current date is assumed t yyyy mm dd hh mm Time to schedule n Don t notify servers of t...

Page 378: ...hutDown to run on all computers at tonight at 10 PM axSched All Computers ShutDown t 2010 2 15 22 00 Import Computer Utility Syntax axcomp import file options Options Example 1 Import a computer using trusted account axcomp filename u db user p db password lu login user lp login password Example 2 Import a computer using non trusted account axcomp filename u db user p db password axengine exe The ...

Page 379: ...t file if you want to If you use a script file see the following section on aclient inp for information on using an import file to specify install switches for the Deployment Agent You can use either a forward slash or a dash with the command line options Commands are not case sensitive Switch Details ver Function Shows the version of aclient exe running on the computer install Function Installs t...

Page 380: ...ticast parameters MCastAddr and MCastPort are set Parameters Details ForceReboot Function Specifies how the system should be shut down and rebooted Applications are forced closed and the system shuts down even if programs hang User data could be lost Example To force clients to reboot when a reboot task is assigned type ForceReboot Yes The default is No HardTimeout Function Specifies the length of...

Page 381: ... To lock the settings type Password clientmanager PromptExecute Function Sends output messages to the client when tasks are being executed Options Yes No Examples To allow prompts and messages to be sent to the client type PromptExecute Yes To suppress output type PromptExecute No PromptOverride Function Specifies the default action to take when there is no user response to a restart prompt Option...

Page 382: ...SpeedLimit 7500 TcpAddr Function Specifies the IP address of the Deployment Server that the client will connect to Using this parameter causes the client to use TCP instead of multicasting to connect to the Server Example To have the client connect to a Deployment Server using its IP address type TcpAddr 192 1 2 3 TcpPort Function Specifies the port number of the Deployment Server listening for re...

Page 383: ...the drivers for remote control type UseRCDrivers Yes UserName Function Associates a computer with the primary user or users This is used to target RIP deployments to a specific user or group of users To assign more than one user separate the names with semicolons Examples To associate user Fred with the client being installed type UserName Fred To associate users Fred and Sam with the client type ...

Page 384: ...ies log file path and name Example opt altiris deployment adlagent log adlagent txt LogSize This is the maximum file size for all trace files in bytes optional Example LogSize 409600 IPTrace Specifies whether or not to log messages between the ADLAgent and the Deployment Server Changes to the IPTrace field may not be recognized until the ADLAgent is stopped and restarted Example IPTrace True IPUse...

Page 385: ...rypted session cannot be established Example RequireEncrypt True UseMCast Specifies whether or not to use multicast to find a Deployment server or make a connect directly to the Deployment server using the specified IP port and address Example UseMCast True MCastAddr Specifies the multicast group address to be used to find the Deployment Server Optional Example MCastAddr 225 1 2 3 MCastPort Specif...

Page 386: ...e PTR records this option may delay adlagent connection by as much as a minute or two Example UseFQDN True UseHardTimeout Specifies whether to use the hard time out or not Example UseHardTimeout True HardTimeout Specifies the number of seconds of inactivity the agent will wait before reconnecting to the Deployment Server The default is 12 hours Example HardTimeout 43200 APPEND_HOSTNAME_TO_L OCAL_H...

Page 387: ...t Server Example AUTO_UPDATE True Parameters Details Global MACAddrList Specifies the list of MAC Addresses for every NIC installed on the PC separated by a comma Example MACAddrList 000C29C63002 000C29C6300C Serial Number Specifies the serial number of the PC Example Serial Number VMware 56 4d db 10 9f cd 9d 7e d4 7e 52 4e 88 c6 30 02 Reboot Specifies whether to reboot the computer By default ACl...

Page 388: ...igure License Sysprep2KLicense Specifies the Sysprep License number Example LicenseNumber Specifies the operating system License Key Example LicenseNumber 5274 649 6478953 23135 RegOrganization Specifies the operating system Registered Organization Example RegOrganization Altiris RegUser Specifies the operating system Registered User Example RegUser Altiris Prompt Specifies whether to prompt the u...

Page 389: ... the computer name and whether to join a Workgroup Domain Example Prompt True Netware RunScrits Specifies whether to run NetWare login scripts Example RunScrits True Context Specifies the NDS Context Example Context NDS Context PreferredTree Specifies the preferred Netware tree Example PreferredTree Tree LoginTree Specifies whether to login using the Preferred Tree or Preferred Server Example Logi...

Page 390: ...NS Server Count 2 WINS Enabled Specifies whether the WINS servers are enabled Example WINS Enabled True SetWINSInfo Specifies whether to set the WINS information Example SetWINSInfo True DNS Server2 Specifies the DNS server 2 for TCP IP Example DNS Server2 0 0 0 0 DNS Server1 Specifies the DNS server 1 for TCP IP Example DNS Server1 0 0 0 0 DNS Server0 Specifies DNS server 0 for TCP IP Example DNS...

Page 391: ... State Specifies the state of Interface0 Example State Up Gateway Specifies the gateway of Interface0 Example Gateway 172 17 31 2 Netmask Specifies the netmask of Interface0 Example Netmask 255 255 255 0 IP Address Specifies the IP address for Interface0 Example IP Address 172 17 31 98 DHCP Specifies the DHCP value for Interface0 Example DHCP Yes Name This is the name of Interface0 Example Name et...

Page 392: ...sk Specifies the netmask for NICEntry Example Netmask 255 0 0 0 Address Specifies the address of NICEntry Example Address 10 10 10 10 DHCP Specifies the DHCP value for NICEntry Example DHCP True SetIPInfo Specifies the IP information for NICEntry Example SetIPInfo True WINS Server Count Specifies the number of WINS servers for NICEntry Example WINS Server Count 0 WINS_Enabled Specifies whether the...

Page 393: ...ecifies the maximum size of the log file in bytes UseLogFile must be enabled for this setting to work Example LogSize 4096 LogErrors Specifies the log errors UseLogFile must be enabled for this setting to work Example LogErrors Yes LogInformation Specifies the log informational messages UseLogFile must be enabled for this setting to work Example LogInformation Yes LogDebug Specifies the log debugg...

Page 394: ...ample MCastAddr 225 1 2 3 MCastPort Specifies the multicast port to use to locate a Deployment Server TransportUse must be 0 for this setting to work Example MCastPort 402 TTL Specifies the Multicast Time to Live to use to locate a Deployment Server TransportUse must be 0 for this setting to work Example TTL 32 ConsoleName Specifies the server name to use to locate a Deployment Server via Multicas...

Page 395: ...onnectionParadigm 1 Example ConnectionParadigm 0 or ConnectionParadigm 1 UseHardTimeout Specifies whether to refresh connection after idle time specified in HardTimeout ConnectionParadigm must be 0 for this setting to work Example UseHardTimeout Yes HardTimeout Specifies how frequently to refresh the connection to the server in seconds ConnectionParadigm must be 0 and UseHardTimeout must be Yes fo...

Page 396: ...rom connecting to the Deployment Server between the times specified in ScheduledBlockStart and ScheduledBlockEnd on Mondays Example BlockedDaysMon True BlockedDaysTue Specifies whether to block the client from connecting to the Deployment Server between the times specified in ScheduledBlockStart and ScheduledBlockEnd on Tuesdays Example BlockedDaysTue True BlockedDaysWed Specifies whether to block...

Page 397: ...xyRate 900 BootWorks EnableDirectDiskAccess Specifies whether to enable direct disk access to BootWorks Example EnableDirectDiskAccess Yes UpdateBootworkTransport Specifies whether to synchronize transport IP multicast settings with Bootworks EnableDirectDiskAccess must be enabled for this setting to work Example UpdateBootworkTransport Yes UpdateBootworkIP Specifies whether to synchronize TCP IP ...

Page 398: ...ver Example SyncTimeWithServer Yes SettingsChanged Specifies whether to change the settings Example SettingsChanged Yes RequirePasswordForUserPro p Admin password required to edit admin properties If the value is 0 the password is not required If the value is 1 the password is required Example RequirePasswordForUserProp 0 DownloadWait Specifies in seconds whether and how long to wait for download ...

Page 399: ...n If this is not used the client computer might lock up when it reboots Example Because this is the default you do not need to enter anything ip address Function Specifies the IP address of the Deployment Server you want the client to connect to Use this if the network is not configured for multicasting or if there is more than one Deployment Server on the network Specifying the Server s IP addres...

Page 400: ...the user to enter the name of the client computer This name will be registered in the Console Computers list If no name is specified the client computer s MAC address will be used Example To prompt for a computer name type bootwork name The client computer will prompt you to enter a name The name appears in the Computers list on the Console new Function Runs Initial Deployment Example To run Initi...

Page 401: ...wise if you have more than one Console on the network clients will connect to the first one they find Example If you want a client to connect only to a Deployment Server named ServerOne type bootwork serverone sr Function Specifies a soft reboot when a client computer boots to production Example To reboot a client using a soft reboot instead of the default hard reboot type bootwork sr wb Function ...

Page 402: ...download it to a different drive after BootWorks is installed Example To install a hidden BootWorks partition of 30 MB type bwinst s30 old q Function Runs BootWorks install in quiet mode so no user input is required to complete the install This switch is intended for use with unattended installs so you should use it in conjunction with the f switch to install from a file instead of disks Since the...

Page 403: ...r the commands you want to use You can also add commands to set and clear keyboard and screen locks in multiple places in the batch file This is useful for enabling input when applications are loaded such as the Microsoft client which prompts for a password and then relocking the screen and keyboard to complete the boot processes You can also use KBDSCLK on the command line if you want to temporar...

Page 404: ... keyboard input To allow keyboard input use k To lock the keyboard use k Default Locked s Function Enables disables screen output To allow screen output use s To disable it use s Default Disabled x h Function Displays the wallpaper or graphic and then exits the KBSCLK utility Once the utility has exited no longer running as a TSR the keyboard and screen are not locked Default 3 second graphic wall...

Page 405: ...e ignored regardless of order If the TSR is not loaded w p and b can be used with k and s in any order z The p option can be used on the command line to set a password for unlocking the screen and keyboard Deployment Server Install Switches You can run the Deployment Server installation executable axinstall exe from the command line using these switches Switch Details s Function Runs a Simple inst...

Page 406: ...tInstall group Deployment Solution can identify if its working with an old SILENT INI file or a new file The old file type will be supported for backward compatibility and will continue to function Note The silent ini file cannot have comments or blank lines between the header line and the key value pairs SilentInstall Version 3 SEDataManagerPort WCLocation WCPath i Function Allows you to create a...

Page 407: ...validator inherit its behavior from the validation in the wizard pages of a non silent install If the validation fails an appropriate error message writes to a log file and the installation process is aborted Simple Install Entries If the InstallType is set to Simple the following entries are expected in the SILENT INI file If any of the entries are missing default values are used We do not recomm...

Page 408: ...e Example PBLinuxFileX64 c DSSetup BDCgpl_6 8 8271 frm PBLinuxX64 True For Linux x86 specify the path of the FRM file in PBLinuxFileX86 The PBLinuxX86 field should be True Example PBLinuxFileX86 c DSSetup BDCgpl_6 8 8271 frm PBLinuxX86 True To install WinPE files specify the following fields For WinPE x86 to use an add on file specify the path of the add on file in PBWindowsPEX86AddOnPath The PBWi...

Page 409: ...sk path specify the path in PBWindowsPEIA64 and the operating system path in PBWindowsPEIA64OSPath The PBWindowsPEIA64 field should be True Example PBWindowsPEIA64 TRUE PBWindowsPEWinPEIA64Path c WinPE Disk1 PBWindowsPEIA64OSPath c WinPE Disk2 Custom Install Entries If the InstallType is set to custom the following entries will be expected in the SILENT INI file If any of the entries are missing t...

Page 410: ...cal same remote sqlserver SEDBRemoteComputerName DESKPRO2 SEDBSQLPortNumber Enter SQL Port Number here SEDBEnginePath c mssql7 SEDBDataPath c mssql7 data SQLAuthentication FALSE TRUE SQLMachineUsername administrator SQLMachinePassword password OR SQLEncryptedMachinePassword z l qry w InstallPXE FALSE TRUE PXLocation dos local remote PXRemoteComputerName DESKPRO3 PXMakeMasterServer FALSE TRUE PXIPA...

Page 411: ...omputerName DESKPRO5 WCUsername Administrator WCPassword password WCEncryptedPassword zlq r x y WCConsoleManagerPort 8081 Add Component Entries If the InstallType is set to addcomponent the following entries will be expected in the SILENT INI file If any of the entries are missing then the default values will be used Using default values is not recommended because it may cause the validator functi...

Page 412: ...dPassword zlq r x y WCLocation local remote none WCPath c Program Files Altiris express Deployment Server WCRemoteComputerName DESKPRO5 WCUsername Administrator WCPassword password WCEncryptedPassword zlq r x y WCConsoleManagerPort 8081 Client BIOS Settings for Wake On LAN and PXE Some network cards have their own setup utilities If there is a Wake On LAN option on your NIC enable it If you want t...

Page 413: ... install silent Command line Install Switches for Linux The command line switches used for Linux files are express path where the bootwiz exe is present install os LINUX x86 x64 ia64 path where the FRM file is present The following table lists the Command line Install and Silent Install Switches for Linux and the functions they perform Wake On LAN ON ENABLED Remote Power Up ON ENABLED Power Switch...

Page 414: ...ent Install Switches for WinPE and the functions they perform install os LINUX ia64 e BDCgpl_6 8 8260 frm Installs the Linux agent for ia64 computers install os LINUX x86 e BDCgpl_6 8 8260 frm quiet Silently installs the Linux agent for x86 computers install os LINUX x64 e BDCgpl_6 8 8260 frm quiet Silently installs the Linux agent for x64 computers install os LINUX ia64 e BSCgpl_6 8 8260 frm quie...

Page 415: ...E agent for x86 computers run C Program Files Altiris eXpress Deployment Server Bootwiz bootwiz exe install os WINPE x86 e Altiris_DS_Preboot_WinPE2005_x86 exe quiet Tip You can do the same for x64 and ia64 computers install os WINPE x64 e Altiris_DS_Preboot_WinPE2005_x64 exe quiet Silently installs the WinPE agent for x64 computers install os WINPE ia64 e Altiris_DS_Preboot_WinPE2005_ia64 exe qui...

Page 416: ...d line using switches This is useful if you want to run imaging from a batch file and not use the Rdeploy wizard RapiDeploy Executable Files File Description rdeploy An Altiris program with a graphical wizard like interface When run on a computer rdeploy exe temporarily designates the computer as the RapiDeploy Master PC or as the Client PC The Master PC controls how images are created uploaded an...

Page 417: ...elp align cyl track none Function Sets partition alignment to the provided values None disables partition geometry rounding entirely which very slightly affects the partitions when restoring an image bsl maximum bandwidth Function Determines the maximum bandwidth to be used by the multicasting session Example To limit the bandwidth to 5 Megabits per second type rdeploy bsl 5 c compression mode Fun...

Page 418: ... the option to save settings in the RapiDeploy program a configuration file will be created with the name lastrun cfg You can rename lastrun cfg and specify it in your batch file to apply configuration settings Example If you have run RapiDeploy and have chosen the option to save configuration settings you could rename lastrun cfg to laptop1 cfg and use it in a batch file by typing the following r...

Page 419: ...k 3 destination is disk 2 Linux Software Raid and LVM When using a Linux software raid or LVM a comma specifies the disks in the set rdeploy d1 2 md f filename If using a hardware raid this syntax might not be required if the disk set is recognized as a single drive Use the firm drives command to determine how the drives are recoginized ddio on off Function Causes RDeploy to bypass the operating s...

Page 420: ...stances when you want to keep existing partitions using the kp switch If you are replacing a boot partition use this switch to fix booting If you are replacing a data partition this is not required forcebw Function Forces the automation partition to be restored Use this switch when using PXE or to overwrite an existing automation partition on the hard disk with the automation partition in the imag...

Page 421: ... example you would have two files z The file that includes the copy commands z The file that you want copied to a computer sample cfg Both of these files must be in the RapiDeploy FIRM application folder The FIRM file firm txt could have the following FIRM command copy sample cfg c sample cfg In this example after the image has been received sample cfg is copied from the RapiDeploy application fol...

Page 422: ...you can specify a different multicast IP address for each session to allow the NIC itself to filter out unwanted packets from other sessions This speeds up all sessions involved Important Remember to put the port number at the end of the IP address after a colon Example rdeploy mdb f filename s9 ip 224 2 0 3 401 See also m mode s number of Client PCs f path file name iosize n Function Sets the siz...

Page 423: ... file it will not prompt you to insert any CD more than once Use the makeimx switch when you create an image However no switches are needed when restoring the image Once the split image file has been created and you are ready to burn the image to CDs put the imx file on the CD with the first img split image file Subsequent split image files do not require the imx file to be placed on the CD mcasts...

Page 424: ...ot allow the user to cancel the imaging task nooem Function Makes sure that an OEM partition does not exist in the destination is not on the disk when restoring and is not in the image when creating Example To remove an existing OEM partition from a hard disk and exclude the OEM partition in an images from being restored type rdeploy md f filename nooem See also m mode f path file name noprompt Fu...

Page 425: ...age file type rdeploy mu f filename password Altiris To restore that file type rdeploy md f filename password Altiris See also m mode f path file name postconfig Function Perform postconfig from within RDeploy raid n Function Specify the software raid level raw Function Treats all partitions as raw The Master PC reads and images a partition by sectors rather than by files This switch makes the ima...

Page 426: ...ing preserved on the hard drive when deploying the disk image rscs name Function Create a recovery solution checksum during upload s number of Client PCs Function Specifies the number of Client PCs included in a multicast session When the Master PC detects the specified number of Client PCs it automatically starts the multicast session The number specified does not count the Master PC Example To s...

Page 427: ...of hard disk size for primary partitions or the percentage of the extended partition for logical drives Examples If the size of partition 2 being downloaded is 300 MB and you want it to fit in half of the 500 MB of disk space on the client disk type rdeploy sz2 50p md f filename This resizes the 300 MB partition to 250 MB leaving the other 250 MB unused You can set the target size for multiple par...

Page 428: ... threshold 5 and four or fewer clients connect to the master PC it will have them all do individual downloads of the image If five or more clients connect to that master it will multicast to them This becomes more important when multicasting across subnets with a router that doesn t support multicasting If you start one master and nine clients 10 PC s total three of which are on one side of the ro...

Page 429: ...M FIRM gives you file access to all FAT NTFS and EXT2 file systems on your hard disk from the automation environment This is an advanced feature You do not have to use it to perform normal management tasks ve 31 34 Function Set VESA screen resolution Example To set screen resolution to VESA mode 31 640x480x256 type rdeploy ve 31 w n Function When multicasting specifies the maximum number of minute...

Page 430: ...ootWorks partition is with FIRM Drive letters are assigned according to where the drives physically reside on the disk FIRM uses the following logic to determine which type of drive to use Drives A and B are DOS drives All other drives are assumed FIRM drives unless prepended with the drive type identifier D Example DC indicates DOS drive C If a FIRM drive is not found then a DOS drive is assumed ...

Page 431: ...r FIRM Tokens Token Function auto Function Used in place of the BootWorks partition letter w drive Examples To delete the autoexec bat file from the BootWorks partition type firm delete auto autoexec bat To see a directory list of the BootWorks partition type firm dir auto prod Function Used in place of the production partition letter Example firm c drive Examples To see a directory list of firm d...

Page 432: ...contents of a file called disk32 txt type firm type fc diskfiles data disk32 txt copy Function Copies a file from one directory to another Usage firm copy source file destination file Options source file path and filename to be copied destination file location path and filename file will be copied to Syntax firm copy drive type drive letter or token path filename Examples To copy an autoexec bat f...

Page 433: ... the contents of the TEMP directory on DOS drive c by typing firm dir auto temp To see a list of files and directories in the Windows system directory type firm dir prod windows system delete Function Deletes a file Usage firm delete filename Option filename path name of file to delete Syntax firm delete drive type drive letter or token path filename Always use the full path when deleting a file Y...

Page 434: ... regback lst type firm backupreg c regback lst noprofile To back up registries from FIRM drive e to regback lst type firm backupreg c regback lst e winnt restorereg Function Restores registry files Usage firm restorereg source file local path Options source file source filename must be a DOS filename local path local path to registry files Default source path for Win NT is c winnt system32 config ...

Page 435: ...t and store them in c backup txt type firm backuplist c backup txt c backup lst The backup lst file might contain the following c autoexec bat c config sys prod windows command format com restorelist Function Restores a set of files Usage firm restorelist source file logical drive Options source file source filename must be a DOS filename logical drive drive letter to overwrite default logical dri...

Page 436: ...n ASSETTAG Asset tag from SMBIOS AGENTIPADDR The IP address of the NIC of the client computer connected to the Deployment Server BWIPADDR The IP address of the client computer connected to the Deployment Server This token only works with Bootworks It is deprecated and it is recommended that you use the token AGENTIPADDR instead CALLINGJOBNAME The name of the job that called this job as used when S...

Page 437: ...NICyIPGATEWAY Default gateway for NIC y y 1 8 Example the first NIC would be NIC1IPGATEWAY second NIC2IPGATEWAY NICyIPHOST IP HOst for NIC y y 1 8 Example the first NIC would be NIC1IPHOST the second would be NIC2IPHOST NICyIPNETMASK Netmask for NIC y Example the first NIC would be NIC1IPNETMASK second NIC2IPNETMASK NICyIPWINSx WINS entry x for NIC y Example the third NIC first WINS entry would be...

Page 438: ... y Example the PCI Function number for the third NIC would be NIC3PCIFUNCTIONNUMBER NICyUSEDHCP If you use DHCP the valid values are Yes or No NICyUSEWINS If you use WINS the valid values are Yes or No NODEFULL Complete computer name NODENAME First 8 characters of actual computer name NWCONTEXT NetWare context name NWSERVER NetWare preferred server NWTREE NetWare preferred tree OS Specific operati...

Page 439: ... with the unique entries to the computers being managed without manually visiting each computer and without having to create each file manually To meet the demands of this challenge Deployment Server has the ability to automatically create and distribute a unique text file to meet these needs This process is known as the Token Replacement Process The token replacement process is accomplished using...

Page 440: ... the real Domain name After the tokens have been added as needed this file is saved in the Deployment Server directory structure and becomes the template file After going through the token replacement process the tokens are replaced with unique data from the Deployment Server database and a new file containing that information is created The end result is that the new file created would now have a...

Page 441: ...ng custom tables to store additional computer inventory information This token replacement feature allows you to specify any SQL database look up a specified value and replace the custom token with the value from the selected database whether it resides on the local computer or not Syntax One Alias table name column name Examples Identifies the opening and closing of a variable token in the script...

Page 442: ...ase and table DBAlias table color Syntax Two Alias SQL query statement Examples To return the names of the computer with an SQL statement SELECT computer_name from computer where computer_id 1234567 To return the color column from a custom database and table with a computer_id column DBAlias SELECT color from table where computer_id 1234567 To return the color from the first record from a custom d...

Page 443: ...ated by Deployment Solution They are divided into the following groups z General Error Messages on page 444 z Client Error Messages on page 446 z Communication Error Messages on page 447 z Memory Error Messages on page 449 z Partition Error Messages on page 450 z Installer Return Codes page 451 ...

Page 444: ...s an error converting cylinders heads and sectors to logical blocks or vice versa Possible cause Invalid or corrupt BIOS drive geometry settings No such drive Explanation The specified drive could not be accessed Possible cause An invalid drive letter was entered Error reading drive parameters from BIOS Explanation The program received an error from the BIOS while trying to read disk geometry info...

Page 445: ...g with error code Explanation The program failed Possible causes The operator aborted the program prematurely A serious program error occurred Action A descriptive error message should appear before this message to give you information about the problem that is causing the program to exit If you do not see a preceding descriptive message notify Altiris Technical Support Write down the error code a...

Page 446: ...rams are updated to the same software version Error Received Wrong NetBlock expected Received Wrong segment expected Explanation The Master computer moved on to the next segment in an image transfer before the client successfully received the data in the previous segment Possible cause The client may have lost contact with the Master computer during a download Error Master started before we could ...

Page 447: ...decompression failure Possible causes A decompression failure can be caused by corrupt data in an image file or data accessed across the wire A compression failure is probably caused by a bug in the program Action If you get a compression or decompression failure on a file you know to not corrupted isolate the system from the network and try to reproduce the error This will determine if the error ...

Page 448: ...termine if the error is on the network or in the Altiris program If the problem recurs on the isolated system report the error to Altiris Error Missing chunk number too big Explanation Indicates an internal error in the client Action Isolate the system from the network and try to reproduce the error This will determine if the error is on the network or in the Altiris program If the problem recurs ...

Page 449: ...ror occurred Container segment has invalid Partition table slot Explanation A partition table in an extended partition contains a reference to a nonexistent slot in the partition table Action Please report this error to Altiris Error Message Description Insufficient memory for Ran out of memory while Exception while allocating Explanation The program is out of memory Possible cause The Altiris pro...

Page 450: ...able segment to update Error Expected container segment not found Explanation An extended partition was found that contained no internal partition table or contained no internal definitions Action The invalid configuration can be resolved by removing the invalid partition definition using FDISK or similar utility Not enough free disk space to accept image Underlap error while placing segment Overl...

Page 451: ... cause This may be caused by a BIOS setting that prevents programmatic access to the boot sector see the CMOS setup Return Code ErrorID Error Description 1000 IDS_ERR_SETUP_INSTALL This return code is for the DataStore component This error occurs while setting up the installation on a remote computer This signifies an error in opening the setup INI file 1001 IDS_ERR_COPYING_LICEN SE This return co...

Page 452: ...ccurs while installing the Altiris RemoteInstall service Ensure that the username and password you have supplied has Administrator rights on the remote computer 1007 IDS_ERR_STARTING_SERV ICE This return code is for the Deployment Server component This is an unknown error that occurs while installing the Altiris RemoteInstall service Ensure that the username and password you have supplied has Admi...

Page 453: ...curs while setting up the install on the remote computer This error is usually encountered when there is a problem in opening the setup INI file 1014 IDS_ERR_SETUP_INSTALL This return code is for the Deployment Web Console component This error occurs while setting up the install on the remote computer This error is usually encountered when there is a problem in opening the setup INI file 1015 IDS_...

Page 454: ...nd password Ensure that the username and password you have supplied has Administrator rights on the remote computer 1020 IDS_ERR_SETUP_INSTALL This return code is for a Hotfix installation This error occurs while setting up the install on the remote computer This error is usually encountered when there is a problem in opening the setup INI file 1022 IDS_ERR_CONNECTING This return code is common fo...

Page 455: ...ckage to the remote computer Please ensure the temp directory on the remote computer contains at least 100MB free space 1027 IDS_ERR_COPYING_ISS This return code is common for all the components of Deployment Server This error occurs while copying the setup iss file to the remote computer Please ensure that the system temp directory on the remote computer contains at least 100MB free space 1028 ID...

Page 456: ...files without an asterisk can be used to perform the identified functions without modification However if the job conditions are not met or are not consistent with the computer type then you may get an error Example if the Repair Office XP job runs on a computer without MS Office XP then you will get an error when trying to run the job Note We recommend that you copy the desired sample job and cha...

Page 457: ...commands and install software packages using these jobs DIR Command at DOS page 457 DIR Command at Windows page 457 Distribute RapidInstall Package page 458 DIR Command at DOS Description Runs the DIR command in DOS Additional files required None What this task does This task runs the DIR command at the DOS prompt If the managed computer is running in Windows it will tell the Deployment Agent to r...

Page 458: ...age 459 Capture User Application Settings Description Collects the user s application setting using PC Transplant Additional files required None What this task does This task will use PC Transplant and a supplied PCT template to gather the application settings for all users that exist on the computer The client computer will execute the PC Transplant Wizard using the specified template and create ...

Page 459: ... User Printer Settings Description Collects the user s printer setting using PC Transplant Additional files required None What this task does This task will use PC Transplant and a supplied PCT template to gather the printer settings for all users that exist on the computer The client computer will execute the PC Transplant Wizard using the specified template and create a file computername exe at ...

Page 460: ... deployed The setup should be customized using the proper tools and an administrative install should be performed to place the setup files on the network share For more details consult the Office XP Resource Kit Install Office XP from UNC Source Description This task will install Microsoft Office XP Additional files required Microsoft Office XP setup files located on the network share that will be...

Page 461: ...ient computer using a RapidInstall package then execute an unattended install using the specified silent install script sqlins iss in a post install script Steps to use 1 Start RapidInstall Editor and open the sql2000pkg exe located in the samples misc sql2000 directory 2 Edit the sqlins iss file in the TempPath SQL2000 directory in the RIP To edit the file select the SQL2000 directory in the File...

Page 462: ...crosoft Office XP Professional with Front Page to be repaired on the client computer You can substitute the Product ID of any MSI Windows Installer installed application in this sample Steps to use Assign the job to a computer or computer group Restart Computer Description Restarts the client Additional files required None What this task does Restarts the client if restart is supported Steps to us...

Page 463: ... will force Microsoft Office XP Professional with Front Page to be uninstalled on the client computer You can substitute the Product ID of any MSI Windows Installer installed application in this sample Steps to use Assign the job to a computer or computer group Wake up Computer Description Wake up a computer Additional files required None What this task does Sends a Wake On LAN packet to the compu...

Page 464: ... Windows use the Scripted OS install task type in a job Create W2K Install Disk Image Target HD page 464 W2K Scripted Install Target HD page 466 Create RH7 Install Disk Image Network page 467 Create RH7 Install Disk Image Target HD page 468 RH7 Scripted Install Network page 468 RH7 Scripted Install Target HD page 469 Create RH8 Install Disk Image Network page 470 RH8 Scripted Install Network page ...

Page 465: ...T and install path DEPLOY CDS REDHAT RH71 DOSUTILS directories respectively z DS install path SAMPLES SCRIPT 1 REDHAT RH7SETUP BAT DOS batch file that the job calls to copy the RedHat operating system files needed for the target hard drive install What this task does This job creates a hard drive image that can later be used for installing RedHat Linux v7 1 through the Hard Disk install method It ...

Page 466: ...n It uses a Scripted OS Install task to start the unattended install on the client This task contains the location of the operating system install files located on the FTP server as well as the Kickstart file to be used for the operating system install Steps to use 1 Make a copy of the sample job 2 Edit the Deploy Image task and change the name of the image file to the name you created with the Cr...

Page 467: ...isk Image Network Description Creates a disk image to be used for installing RedHat Linux v8 0 through the Network install method The Network method copies the RedHat files from an FTP NFS or HTTP server during the operating system installation See the RedHat User guide for instructions on setting up a source server for this purpose Additional files required z DS install path IMAGES DOS_ONLY IMG I...

Page 468: ... reboots the client so that DOS will recognize the newly created DOS partition It uses a Scripted OS Install task to start the unattended install on the client This task contains the location of the operating system install files located on the FTP server as well as the Kickstart file to be used for the operating system install Steps to use 1 Make a copy of the sample job 2 Edit the Deploy Image t...

Page 469: ...g a Linux script Additional files required None What this task does This job sends a status message to the console then executes an ls command then sends another message to the console Steps to use Assign the job to a computer or computer group Restart HTTPD Service Linux Description This script will restart the HTTPD service Additional files required None What this task does This script will chec...

Page 470: ...ill send an email specifying that the computer had an error Additional files required None What this task does This script will send an email using the job name and computer name to identify the client that had an error This script is run on the Deployment server and can be used as a job to be run when having a specific error occurs Steps to use 1 Edit the sendmailscript vbs to specify the SMTP se...

Page 471: ... Windows client then sends a status message to the console then executes a dir command then sends another message to the console Steps to use Assign the job to a computer or computer group XP Embedded These jobs are provided to give samples when working with XP embedded that have the Enhanced Write Filter enabled Disable Enhanced Write Filter page 474 Enable Enhanced Write Filter page 474 Distribu...

Page 472: ...omputer name After installing the RIP the Enhanced Write Filter will be enabled Steps to use Assign the job to a computer or computer group Agent Update This folder contains a list of agent update jobs that are generated dynamically during updation These jobs are created whenever an auto update for agents is required The job names can be AClient x64 Update AClient x86 Update and adlagent ia64 upda...

Page 473: ... PXE Client Yes PXE Server Altiris PXE Server 67 UDP PXE Client No Altiris PXE Server 68 UDP PXE Client No Altiris PXE Server 4011 UDP PXE Client No PXE Manager Altiris PXE Manager 405 TCP PXEConfig Yes Altiris PXE Manager 406 TCP PXECfg Service Yes PXECfg Service Altiris PXE Config Helper 407 TCP PXE Server and PXE MTFTP Yes Deployment Web Console Web Console Altiris Deployment Server Console Man...

Page 474: ...ile 6 Restart PXE services PXE Manager and PXECfg Service The Altiris PXE Manager Service controls the data associated with the PXE components that are included in the PXE package The PXE Configuration Utility and PXE Servers use Deployment Server Altiris eXpress Server 402 TCP UDP multicast Agents PXE Server DataManager PXEManager Yes Deployment Console Win32 Console 5001 TCP AClient Yes 5002 TCP...

Page 475: ...r editions in real time with many features present in the Deployment Console The Deployment Web Console can be installed on any computer running Microsoft IIS Server a computer running a Deployment Server or a Notification Server or a remote computer running only Microsoft IIS To configure the 8080 and 8081 ports 1 From the Windows Explorer select My Computer Local Disk C drive 2 Run the axInstall...

Page 476: ...communication between the Console and the Database and the Console and the Server To configure the 505 port 1 Open the Registry Editor 2 In the left pane select HKEY_LOCAL_MACHINE SOFTWARE Altiris Altiris eXpress MMProc Port 505 The Edit DWORD Value dialog appears 3 Set the required value and click OK 4 Restart the Altiris Deployment Server DB Management and the Altiris eXpress Server services aft...

Page 477: ...onnects to the port that is received from the server Deployment Console Win32 Console The Deployment Console is the Win32 user interface for Deployment Solution You can install this Win32 console on computers across the network to view and manage resources from different locations In addition from this console you can access the Deployment Database on other Deployment Server systems to manage site...

Page 478: ... the client computer to the Deployment Server executes deployment tasks sent from the server installs packages and runs management processes as directed from a Deployment Console To configure the 402 port 1 To edit the configure file directly open the adlagent conf file at the following path opt altiris deployment adlagent conf 2 Change the value corresponding to the TCPport if necessary The defau...

Page 479: ... address of the network adapter driver you can enter a range of IP addresses when using the multicasting feature to speed computer deployment and management Deployment Server accesses the range of computers using the defined IP pairs and avoids retrieving the computers through the port and operating system layers However some network adapter cards do not handle multiple multicast addresses In such...

Page 480: ...eployment Agent Authentication This article describes the AClient and the Deployment Server authentication process The authentication process is required to safeguard the use of the AClient from connecting to a malicious Deployment Server ...

Page 481: ...ient Service DSAuthentication The AClient stores the security key at the following location HKEY_LOCAL_MACHINE SOFTWARE Altiris Client Service SecurityKey A random challenge key is generated which is unique to the AClient The AClient encrypts this challenge key and stores the challenge key in the registry using the security key The AClient sends the following connection request to the server in th...

Page 482: ...ment Solution 482 Deployment Agent Authentication authentication as well as in reply authentication because it is altered using random bytes These alterations ensure the safety of the key from malicious users ...

Page 483: ...ileSize Specifies the size of the log file The maximum the file can grow is up to the size specified by this key If the size exceeds this then it starts overwriting the file from the beginning DebugLogFilename Specifies the path and name of the engine log file Used to create the engine log file at the specified path DebugLogging Checks whether to create the engine log file If 1 creates the engine ...

Page 484: ...ntry defines this pause time ResetInactiveClientConnectionsTime If ResetInactiveClientConnectionHo urs is negative this key is activated Stores time as a string in HH MM format where HH can have values 00 23 Hours If the value is 13 25 it means 1 25 PM The Engine will send WACs to inactive clients at 1 25 PM everyday or on a particular day of the week depending upon ResetInactiveClientConnectionWe...

Page 485: ...some time specified by UpdateActiveClientConnectionsRestT ime before processing the next batch of n computers UpdateActiveClientConnectionsRest Time Wait time in seconds between two batches While sending CACKs to active computers the engine processes n computers at a time After processing n computers it pauses before processing the next batch of n computers This entry defines the time of this paus...

Page 486: ...nventoryWeekDay UpdateInventoryWeekDay If UpdateInventoryHours is negative this key is activated If positive indicates the day of the week 1 Sunday 2 Monday A negative value means everyday Engine inventories active computers at a given time everyday or on a specific day of the week UseFD_READ It is related to socket activity This is being used for internal socket communication activity UseResetIna...

Page 487: ...seUpdateInventory 1 if Update inventory for active clients on the General Tab of the Altiris Configuration Utility is enabled otherwise 0 If Update inventory for active clients is enabled the engine periodically inventories the active computers WakeAgentWithPing Not Used AllowJobWOL Not Used Registry Name Description Purpose Key present in Security Folder Server Security Authenticates client to DS...

Page 488: ...adle and synchronize with the host computer using Microsoft ActiveSync Handheld computers connected directly to the network install only the PPC Client software and are managed like any other computer in your Deployment Server system Install from a cradle or cable See Install a Pocket PC Agent from the Deployment Console on page 492 to install to a handheld computer in the cradle attached to a hos...

Page 489: ...isconnect jobs sent to the handheld If the Pocket PC Client on the handheld is present but not started then the agent will start it The Pocket PC Agent also acts as a relay agent to transfer data from the Pocket PC Client on the handheld to the Deployment Server From a Deployment console you can schedule and run a Sample job to install the Pocket PC Agent on a host computer Ensure that the handhel...

Page 490: ...d based on type of processor to the host computer You can then copy the CAB files directly to the handheld using the Explore feature in ActiveSync To install Pocket PC Client directly with ActiveSync 1 Copy the CAB file to the host computer with ActiveSync or to a share where you can copy the file from 2 Connect your device to your desktop computer using a cradle or cable 3 In ActiveSync click Exp...

Page 491: ...nt status sheet by double clicking Altiris Pocket PC Agent icon 2 Click Options Uninstall You can also uninstall the agent by running the ppcagent remove switch from the command line Note There is no uninstall program for the PPC Client To remove the Pocket PC Client you must remove the client file from the My Device Windows ppccInt exe file on the handheld Command Line Switches for the Pocket PC ...

Page 492: ...port that the server is connected to The Deployment Solution Switch Add On allows you to perform the following functions z Discover the LAN switch MIB II system information command line and GUI z Discover the switch ports of a LAN switch command line and GUI z Discover the VLAN setting for each switch port command line and GUI z Modify the VLAN setting of a switch port command line and GUI z Assig...

Page 493: ...ersions 3 1 and later Models WS C2948G WS C2980G and WS C2980GA All operating system versions z Cisco Catalyst 2900 XL 2900 XL LRE series switches Models All models IOS versions 11 2 8 SA3 and later z Cisco Catalyst 3500 XL series switches Models All models IOS versions 12 0 5 XP and later z Cisco Catalyst 4000 series switches Models WS C4003 WS C4006 WS C4912G All operating system versions z Cisc...

Page 494: ... the SNMP communities are correct the application reads the MIB II system information from the device and add the device to the tree view If the device is not available an error message appears Discovering a Device Once a device has been added to the database all properties for that device can be discovered Selecting the device in the tree view and right click it Click Discover Device to discover ...

Page 495: ...ing the appropriate MAC address A menu appears Click Add Edit Host Info to enter the hostname on the dialog Note If the IP address and Hostname columns are blank for a MAC address the application does not have enough information about the global network to display an IP Address Hostname binding to that MAC address You can assign connectivity to a particular switch device by selecting the device or...

Page 496: ...y that the database file SwitchMngtDb txt is located Command line Interface Parameters By executing the switchcfg exe without any arguments you can see the usage of the CLI application as below The following is a description of the available command line arguments and how they are to be used m mode This indicates the mode of the operation to be performed The two possible values are 1 discover and ...

Page 497: ...ion with PXE Configuration Utility 292 modifying settings 277 302 server communication 278 303 starting 274 tool icon 77 toolbar 274 tracking boot menu options 292 boot image about 292 boot image files creating 307 boot menu items identifying 293 boot menu options automation tasks 292 creation methods 292 editing 296 importing 296 tracking 292 BootWorks see Deployment Agent for DOSt BootWorks see ...

Page 498: ...m 367 367 delete history entries 83 Dell server blades 139 250 deployment server deployment 121 Deployment Agent installing 341 settings 109 110 Deployment Agent for Automation see Deployment Agent for DOS Deployment Agent for DOS autoexec bat 404 bootwork exe 399 bwinst exe 401 command line switches 398 399 installation 358 401 settings 116 Deployment Agent for Linux install 357 Deployment Agent ...

Page 499: ...EXT2 429 430 EXT3 430 FAT 429 firm exe 416 tokens 431 flash drive not appearing 285 286 287 folder adding files 282 306 extracting 324 folder property 321 Fujitsu Siemens server blades 251 Fujitsu Siemens server blades 139 G general properties 119 get inventory 183 global options 83 groups 89 adding 90 computer 70 importing 90 selecting with wizard 151 H hardware properties 119 Hewlett Packard ser...

Page 500: ...uilder 65 licenses adding 361 expired 362 finding licenses used 358 replacing 83 lights out 122 Linux 254 agent see Deployment Agent for Linux bootloaders 255 Command line Switches 413 distributing software 254 file location 289 imaging 255 scripted install 175 location properties 121 LogEvent utility 186 logon 266 lookup key primary 84 84 M MAC address adding new 311 servicing 310 managing comput...

Page 501: ... properties application 120 bay 121 computer 119 configuring computer 101 devices 120 drives 119 general 119 321 hardware 119 image 320 location 121 network configuration 120 prompting for 132 RILOE 122 services 120 TCP IP 120 protocol settings setting up 278 303 PXE BIOS settings 412 boot menu tab 293 client BIOS settings 412 configuration tool 77 server 340 server installation 368 PXE Configurat...

Page 502: ...ptions 406 command line switches 406 simple install 341 simple install entries 407 simple tests 457 DIR command at DOS 457 DIR command at Windows 457 Distribute RapidInstall Package 458 software distributing 175 Software Virtualization Solution SVS 78 spanning media 217 split image find 322 open 322 start parameters for axengine 378 status detail 71 Stored Procedures allowed 86 switches axengine e...

Page 503: ...e configured computer account Virtual Bays 138 Vista Sysprep 28 VMware Virtual Center Web services 86 volume property 321 W Wake On LAN BIOS settings 412 warn user 82 Web console see Deployment Web Console Win32 console see Deployment Console window see pane WinPE Command line Switches 414 WinPE Boot Options 281 281 305 wizard bootable media 283 Job Scheduling 151 New Configuration 275 299 New Job...

Search results

Summary of Contents for ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0

Reviews:

Related manuals for ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0

Brands by name

Popular brands

Symantec ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0, Manual

Search results

Summary of Contents for ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0

Reviews:

Related manuals for ALTIRIS DEPLOYMENT SOLUTION 6.9 SP4 - V1.0

Brands by name

Popular brands