Purpose

This article covers information regarding the new Task Status Scrubber.

Available in LDMS 9.6 SP3 and later

Information

In certain circumstances, a task may not complete when running on a client. Depending on what point the task stops, it may not convey the status to the Core, which can cause inconsistent results (i.e. the Core indicates the task is still 'active', but the task is not actually still running on the client).

The Task Status Scrubber was introduced to reduce instances where the status on the Core inaccurately reflects the status of the task on a client.

How it Works

When policysync.exe /enforce is run on a client, policy files are checked and depending on certain criteria, different actions will occur.

Note:Policysync.exe /enforce is scheduled to run hourly on a client

It will check:

• The <Status> from the CP.TaskID.RunNow.stat file (C:\programdata\LANDesk\Policies\CP.3963.RunNow.stat)
• The <Mode> , <Interval>, and <PushTask> from the CP.TaskID.RunNow...xml file (C:\programdata\LANDesk\Policies\CP.3963.RunNow._pNdBhtCzhUV2ft00a51ngW6C86E=.xml)

The following conditions are considered sequentially when Policysync.exe /enforce is ran. This means that it will determine if it should run at all first, if it should run, it will check each policy individually and see if it should be continued or scrubbed.

Conditions where the Scrubber will not run

• Vulscan or SDClient is currently running
  • This will cause the scrubber to skip running against any policies during that run. It will try again the next time policysync.exe /enforce runs.
  • PolicySync.exe log will show:

    PolicyScrubber.ScrubPolicies: sdclient or vulscan is currently running, skipping policy scrub.

Conditions where the task will attempt to be continued

• A .dat file present for the given task in the C:\ProgramData\LANDesk\Policies\RunNow folder
• <PushTask>true AND (<Status>1 or <Status>3 )
  
• <PushTask>false AND<Mode>Required AND<Interval>Once AND<Status>5

Conditions where the Scrubber will run and mark policies as 'Failed'

• <PushTask>true AND <Status>2
  
• <PushTask>false AND<Mode>Required AND (<Status>1 or <Status>2 or <Status>3)

Example: PolicySync.exe.log will show

Policy [C:\ProgramData\LANDesk\Policies\CP.3963.RunNow.stat] needs to be scrubbed, it's current status is [2], setting it to failed and sending task status to the core...

PolicyScrubber.ScrubPolicies: Finished scrubbing policies, [1] policy needed scrubbing. 

Stage: Completed

Status: Failed

Result: Failed to install package

Return code: 16386 

*.Stat file Status Values

• 0 = Unknown
• 1 = Working
• 2 = Downloading
• 3 = Installing
• 4 = Success
• 5 = Failed
• 6 = Canceled
• 7 = Defered

Hello,

Hello, I want to display a customize message when installing software. I tested with HTML tags, but it does not work. As soon as you insert an HTML tag, the message does not appear to users. Here are the negative tests done:

ok without html tag :

test with HTML tag and no display of the message :

Bonjour ;

<br><br>

Nous allons procéder à la mise a jour de Prime EidosMedia Méthode sur votre poste en version 7.0.0.6b

<br><br>

Si vous avez des soucis d'affichage dans Méthode après la mise à jour, il vous faut redémarrer votre poste.

<br><br>

L'installation de Méthode 7.0.0.6b va debuter, fermer l'application avant de continuer, cela dure de 10 à 15 minutes.

<br><br>

Un message final indiquera la fin de l’installation et donc la possibilité de lancer l’outil.

<br><br>

<br><br>

Le support informatique

<p>Bonjour ;</p>

<p><span style="font-size: 0.9em;">Nous allons proc&eacute;der &agrave; la mise a jour de Prime EidosMedia M&eacute;thode sur votre poste en version 7.0.0.6b</span></p>

<p><span style="font-size: 0.9em;">Si vous avez des soucis d'affichage dans M&eacute;thode apr&egrave;s la mise &agrave; jour, il vous faut red&eacute;marrer votre poste.</span></p>

<p><span style="font-size: 0.9em;">L'installation de M&eacute;thode 7.0.0.6b va debuter, fermer l'application avant de continuer, cela dure de 10 &agrave; 15 minutes.</span></p>

<p><span style="font-size: 0.9em;">Un message final indiquera la fin de l&rsquo;installation et donc la possibilit&eacute; de lancer l&rsquo;outil.</span></p>

<p><span style="font-size: 0.9em;">Le support informatique</span></p>

i use this help to test :

Scheduled tasks help

what are the html tag to have carriage return ?

thanks

Joaquin

Is Ampersand an issue for Files in packages?

I was looking around and noticed I was getting errors around some of the new files stored in the preferred servers.

Seems that something can't locate the file even though it is actually there.

Feels like IIS issue...

From the Schedpkdupdate.exe.log

01/09/2018 15:55:35 INFO  12804:1     RollingLog : Calculating hash for http://PreferredServer/LDSHARES/LDPACKAGES/Startrak/Files/A&E Originals.lnk

01/09/2018 15:55:35 INFO  12804:1     RollingLog : ERROR: failed to get the hash for http://PreferredServer/LDSHARES/LDPACKAGES/Startrak/Files/A&E Originals.lnk

01/09/2018 15:55:35 INFO  12804:1     RollingLog : UpdatePackageHash: exception - Failed to get the hash for http://PreferredServer/LDSHARES/LDPACKAGES/Startrak/Files/A&E Originals.lnk : The remote server returned an error: (404) Not Found..

Anyone know how to deal with special characters in filenames in Ivanti Endpoint Management 2017.1?

Thanks

Hello Folks,

Somewhat new.. OK real new to Landesk and Ivanti. I created a dist package to push a shortcut to endusers desktops. It works great, but how do I make that link appear with a specified icon? Right now it appears on the desktop as just a white "placeholder". Sorry if this has been asked before, search results I got didn't reveal anything pertaining to this.

Thanks,

Don

Hello all,

    I have been trying to use InstallEase to create MSI packages for deployment.  I have been unable to create an installer that successfully performs the process. 

I have had a variety of errors in my testing.  One consistent one referenced some registry keys that had no value, and the MSI could not be created.  This persisted no matter how much I removed from the snapshot.  I did an easy one, where I copied files to the Program Files (x86) directory and then created links to those files and placed them on the desktop.  I was able to complete the process and an MSI file was generated.  After reverting the changes I made so I could test the installer, I attempted to use this MSI.  The "Gathering required Information" part takes longer that I have seen on other MSI installers.  I am not sure if that is related.  I get an error that it could not write a value to a key in the registry.  That I should check if I have sufficient privileges.

For reference, the details of this test environment are.  The OS is Windows 10 (latest build and updates) running as a VM (hyper-V).  Using a local user account that has admin privileges.  The Host OS is also a Windows 10 (latest build and updates) running on a Workstation laptop (Xeon processor, ECC RAM, etc).

Any thoughts are appreciated.

Sincerely,

  Pat

Hello,

We would like to deploy Adobe reader in MSI with MSP but how can i do that with Software Distribution ?

Adobe reader want a command like that :

msiexec /I "AcrobRead.msi" /Update "Acrobatreader2018xxxxxx.msp"

But in Ivanti i have something like that :

I try to add /Update with msp but that not working (In Extra files tab i added all files)

Regards

Is It possible to create automatically tasks ? than mean if I am going to install two different packages(Package 1 and Package 2)  to 500 machines  but  first is necessary to install the package 1 to 500 machines if the package 1 was installed successfully in the machine continue to install the package 2 if the package 1 was not installed successfully  in the machine it has not installed the package 2 in the machine.

Than you in advance

My organization got Landesk, currently on 2016.3 and about to make the upgrade to 2017.3. It has been pretty good and a nice learning curve for things, especially packaging. While packaging and the multiple ways of doing it I feel is a strong aspect of LANDesk the support for it wanes. Documentation while there is can sometimes be confusing or irritating, and the webinars are great but packaging is such a monster that you could have people just dedicated to it and still it not be enough.

My request to the forum admins is to create or allow creation of a subforum dedicated to allowing users to share their validated working Packages (like through the export import feature you already have) or different ways of doing packages; does not appear that there is not one dedicated place for it now. There are multiple forums and places I reference like PDQDeploy or ITNinja or WPKG for the general arguments but that doesn't always translate into a single easy LANDesk package. It makes little sense to me for multiple people to use the same tool and spend time on recreating packages that others have already done and not offer a "Template" for those that might not have the time or skills to do it themselves. Understanding that each environment is different, just having a point of reference from confirmed working packages could help a person. Multiple different ways to install office with multiple uninstallers, I created a package that uses the offscrubs for each version for example, and it could help those trying to do the same but not get buried in a post.

My two cents, thanks for a great product to play with.

Purpose

This article discusses an issue where the client cache location is not updated on a Client/Preferred Server after a change.

Issue

After updating the Client Cache Location (via Client Connectivity Settings) files downloaded to a Device or Preferred Server still revert to SDMcache.

Cause

After updating the Client Cache Location within Client Connectivity Settings (seen below), the downloadmulticastconf.xml file on the Client is not updated properly.

Verification

Verification can be done by opening the downloadermulticastconf XML file (located at \ProgramData\LANDesk\TMCdownload on the client), and seeing one of two things:

1. The XML file shows the following line:

Original

<CacheDirectory>C:\ProgramData\LANDesk\ManagementSuite\sdmcache</CacheDirectory>

This line shows that the sdmcache is still the primary Client Cache location.

2. The XML file will be completely blank upon opening.

Resolution

Delete the existing XML file from the \TMCDownload\ directory.

From the client device open a run prompt and enter the following:

Once the update has completed, verify the <CacheDirectory> line within the downloadmulticastconf.xml file (this will be re-written with the changesettings task) to verify the updated location of your Client Cache.

Description

Targeting machines through Active Directory is a very useful and convenient way to manage software deployments.

Ivanti EPM Software Distribution allows you to target an LDAP container or LDAP group.

This document outlines the steps that you need to complete to get this working.

Steps to Configure LDAP Policies

1.  Enable LDAP enumeration on the agents

The LDAP Enumeration registry setting instructs the agent to gather the current LDAP location and report this in the inventory of the machine.

The registry key which controls LDAP group enumeration behavior for Software Distribution is:

HKLM\Software\LANDesk\ManagementSuite\WinClient

DWORD: DisableLdapGroupEnumeration

0(default) - feature is disabled

1 - feature is enabled

To make this configuration a permanent part of the default Agent configuration, do the following.

Browse to the LDLOGON share on the core server.  Open the ntstacfg.in# file with notepad.exe.  Search for ldap, which should take you to this section:

; LDAP groups can be enumerated on the client, this provides more information in the inventory
; database and faster targeting of LDAP groups.  This also generates network traffic between the
; client and the LDAP server, the following registry value can be used to disable this option

REG54=HKEY_LOCAL_MACHINE, SOFTWARE\LANDesk\ManagementSuite\WinClient\DisableLdapGroupEnumeration, 0, , REG_DWORD

The default value is 0 which is Disabled.  Change this to 1, and save the file.

On the Ivanti EPM Core server, go to Configure | Services | Inventory and restart the Inventory Service.  This will run stamper.exe, which builds the ntstacfg.ini file from the ntstacfg.in# file.

Next, in the Ivanti EPM Console, go to Tools | Configuration | Agent Configuration and click the "Rebuild All" button.  This will rebuild the Agent_Name.ini file from the ntstacfg.in# file.

After doing this all of the Ivanti EPM Windows Agents will have LDAP enumeration enabled when the agent is installed.

2. Configure the Directory Manager plugin

In the Ivanti EPM Console, go to Tools | Distribution | Directory Manager.  Click the Key icon, and then the Add button.  Enter the credentials of a domain administrator or a user that can browse the domain.

After successfully authenticating to the Active Directory domain, the domain structure should be browsable.

3.Create the scheduled task that will target the LDAP objects.  For this example, the scheduled task is a Required Policy.

Save the policy after adding the software package and the delivery method.

  Note:  At this point, the policy has no targeted devices.

4.To target the LDAP group or Active Directory OU, from Directory Manager drag the group or OU down onto the scheduled task.

Browse to the desired OU in Directory Manager and highlight it.

Drag and drop the OU to the Scheduled Task that was created.

The following window will come up, prompting for the kind of LDAP objects to find.  Depending on the type of query and what is going to be targeted (users or machines), this will change.  For this example, both types are selected.

Another window will come up to save the query.  The query must be saved.

After saving the query, the LDAP OU will be targeted in the scheduled task.  To see the LDAP target, see the scheduled task under Target Devices.

I want to deploy an application to some HP thin clients.

These thin clients have a write filter enabled.

If i distribute the application to the thin client it doesn't work unless I first disable the write filter.

When I push the Ivanti Agent out to the thin clients it first disables the write filter, reboots, then installs the Agent before enabling the filter again.

How do I configure the application so it too does this so i can install it on the thin clients?

Thanks.

Hi All,

finally am able to resolve all my agent and policy issues with clients after updating to 2017.3 SU1.

now am able to deploy single packages with the clients.

usually we will do *yum update* when we want to do full system update in Linux environment and this same i want to do from landesk as well.

i followed repair task like this.

operating system is running with centos 6.8 and now plan to upgrade to 6.9 ( with all packages).

- I have filtered all centos packages and added to one custom  group

- After that i repaired task with selecting target

- Task completed successfully with out any errors.

with this all should be upgraded.

after this when am doing yum update and its showing as

###### when am seeing detected for one client in iv anti console am seeing only below:

#### its have much difference.

is am missing any thing while doing repair? please let me know

thanks

Hi,

I'm trying to run a batch file that will remove Office 2013 from our machines. However, I have encountered an issue where the batch file doesn't get applied on the client PC (it gets stuck at the Core initiated stage).

Here is what I have done so far:

1) Created a batch file that will use an XML file to silently uninstall Office:

@ECHO OFF

IF EXIST "%CommonProgramFiles%\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" (

   "%CommonProgramFiles%\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall STANDARD /dll OSETUP.DLL /config "C:\Silent Uninstall Config\SilentUninstallConfig.xml"

    )

2) On the scheduled task properties, I have set the task to run as LocalSystem and added the SilentUninstallConfig.xml file and the entire Office folder as additional files. The folders that contain all of the relevant files have read permissions for the 'Everybody' group

3) I check Event Viewer on the targeted machine but no entries appear. I have also checked the LD logs and this is what appears:

PolicyTaskHandler.exe.log

10/17/2017 12:27:05 INFO  12992:1     RollingLog : Calculating hash for \\server\c$\SilentUninstallConfig.xml

10/17/2017 12:27:05 INFO  12992:1     RollingLog : Hasherize: failed to calculate hash for file '\\server\c$\SilentUninstallConfig.xml'

10/17/2017 12:27:06 INFO  12992:1     MDMConsole.MDMTaskHandler : MDMTaskHandler.FilterNodesAndProcess(): Called with 1 computer IDs, Task ID 1183

10/17/2017 12:27:06 INFO  12992:1     MDMConsole.MDMTaskHandler : Queueing 0 devices to notify pipe.

10/17/2017 12:29:50 INFO  12992:1     RollingLog : [Task: Batch - Office2k13 Uninstall - 17/10/2017 12:24:33, TaskID: 1183, ProcID: 12992] : PolicyTaskHandler finished processing task, setting task status to [PULL_AVAILABLE]...

LANDesk.Scheduler.GlobalScheduler.exe.log

10/17/2017 12:29:27 INFO  25364:1     RollingLog : Hasherize: failed to calculate hash for file '\\server\c$\SilentUninstallConfig.xml'

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : Updating allowed machines if needed.

10/17/2017 12:29:28 INFO  25364:1     RollingLog : AllowedMachines.UpdateAllowedMachines2: Updating allowed machines for task:[1183]

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : Calling method to perform remote operations.

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : Before hasherize of C:\Program Files\LANDesk\ManagementSuite\landesk\files\LDN-LDSK-001-task-1183.pmf

10/17/2017 12:29:28 INFO  25364:1     RollingLog :         1183 : After hasherize

10/17/2017 12:29:28 INFO  25364:6     RollingLog :         1183 : Troubleshooting guidelines

The global scheduler has delegated task 1183.

  The task was delegated by (source): <server>

  This task was delegated to (dest) : <server>

  Using GlobalTask_Idn              : 315

This delegation was done by creating an entry in the GlobalTask table on the destination core (the task id is provided above).

The Entry in the GlobalTask should have set to state column to 1 to indicate that it is a new task and should be processed.

The scheduler service should detect and process this delegated task, please check scheduler service log on the destination core to see if it successfully detected the GlobalTask entry.

10/17/2017 12:29:28 INFO  25364:6     RollingLog :         1183 : Waiting for task 1183 from <server> to complete on <server>.  Checking every 10 seconds, inactivity timeout after 1200 seconds.

10/17/2017 12:29:48 INFO  25364:6     RollingLog :         1183 : <server> has completed task with status 5 (Delegated task complete.)

10/17/2017 12:29:48 INFO  25364:6     RollingLog :         1183 : Proxy work thread for core <server> is complete.

10/17/2017 12:29:48 INFO  25364:1     RollingLog :         1183 : Thread is complete, synchronizing status information.

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog :         1183 : Remote operations complete, synchronizing status information.

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog : No link entries were returned.  No tasks will be synchronized

10/17/2017 12:29:48 INFO  25364:1     RollingLog :         1183 : Task complete, returning status 12

schedpkgupdate.exe.log

10/17/2017 12:47:37 INFO  8328:1     RollingLog : Calculating hash for \\<server>\c$\SilentUninstallConfig.xml

10/17/2017 12:47:37 INFO  8328:1     RollingLog : Hasherize: failed to calculate hash for file '\\<server>\c$\SilentUninstallConfig.xml'

10/17/2017 12:47:37 INFO  8328:1     RollingLog : [Stop] Republishing complete.

10/17/2017 12:48:04 INFO  27716:1     RollingLog : [Start] Republishing policies...

10/17/2017 12:48:04 INFO  27716:1     RollingLog : Performing policy update...

10/17/2017 12:48:04 INFO  27716:1     RollingLog : Core has changed, resetting the core language cache

10/17/2017 12:48:04 INFO  27716:1     RollingLog : Getting core language for Key:CurrentLanguage Language:ENU

No entries on the SDClient log file exist.

If anybody has any idea on what is going wrong then the help would be appreciated!

Thanks in advance

Hello to all,

We are about to use the Portal Manager with Landesk Management Suite 2016 but I have a doubt due to my inexperience ..

Instead of using a scheduled task to make the new application available to clients, is it possible to make it available in another way?

My idea was to make available for a group of clients and possibly in the future remove it from the list without performing scheduled tasks ..

Thanks to those who will answer my question

This document will walk you through manually editing the registry keys on a system to enable additional logging - How to enable Xtrace Diagnostic Logging

Using Windows Actions you can deploy these registry settings to your end points through a scheduled task.

1. Download and unzip Ivanti Distribution Package (xTrace Logging.zip)
2. Import into your Distribution Packages - How to Import/Export Software Distribution Packages
3. Scheduled the appropriate Distribution Package to enable/disable the Additional Logging.
4. You can verify by checking the registry of the remote system and confirm if the logging has been enabled/disabled.

I have run into this problem a few times and haven't been able to figure out a fix.  Here is the example scenario...

I create a task that needs to be run on an endpoint but I want to notify the user before I run the task.

I created a Distribution and Patch setting within the "Agent settings" of the task and selected to Automatically download, and to notify user before installing/removing.

I then filled in the user message window with what I want the user to see.

I save the task, target the endpoint, schedule it and start it.  When the endpoint receives the task, the user notification window does show up, however it is very small and needs to be dragged by the corner to be expanded so that you can read anything in the window.

Is there a way to make the notification box large enough so that it accommodates all the text in the box?

Any help would be appreciated.

   1）门户管理推送后，很多卡在安装节点中，如上周推送的，有的好了（响应慢），有的仍然显示安装，速度非常慢，当前用户没有推送其它的任务，终止不了；

   2）推送软件安装包的时候，用指定用户推送时，经常失败，不知设置是否错误；

    3）推送软件时，到底是否需要代理，自己测试没用代理的时候容易失败，有代理还成功过，代理的作用是？；

    4）软件打包工具的使用，打包成静默安装模式；

Landesk Management Suite 2016 - Version 10.1.0.168

System I'm using - WIndows 10 , systems task being pushed to - Windows 7

I have a provisioning task that I created and has been working until last few days, I schedule it for 8pm and it looks like it starts but goes right back to pending. There is no log file where it starts and in provisioning history no details in there. Basically the tasks consists of - Rebooting the systems, removing Office, reboot, copying files and installing Office 2016, reboot . Some of the systems are getting the provisioning screen but it doesn't start. Other tasks on the same machine can run 3 hours later and complete successfully. Is there anywhere else I can look for details on why the task isn't starting ?

I am wanting to install some software on thin clients.

Ideally this will be done out of hours so I want to wake the thin clients up first.

If i right click on a device in the console and choose to Wake Up On LAN (see below) it wakes up.

But if i create a scheduled task to deploy the software and choose the "Wake Up devices (not applicable to unmanaged devices)" in the Additional Push options (see below) the device doesnt wake up and the task fails.

Can someone enlighten me as to why this is happening?

Many thanks

When I use HTML tags in the Distribution and Patch settings User Message the formatting for the tags I presented.

I wrapped it entire dialog with

<Center>YOUR WINDOWS 10

UPGRADE IS READY TO BEGIN</center>

but when I do that I get a dialog with the name of that task listed twice and a large blank space before the text.