Release Notes Available
Here:
Altiris Forum Topic
Here:
Section 3 –
New Features in this Release
3.1 Notification Server
3.1.1 Proxy Mode Registry Setting
A new Registry setting, Proxy Mode, has been created that, when set to 0, forces the Altiris
Agent to use proxy only. If set to 1, the Altiris Agent will first try to connect directly to the
Notification Server and if it gets the WSAEHOSTUNREACH error, it will try to use the proxy.
3.1.2 Agent Locale Display feature on Altiris Agent Settings Policy
page
The new
Agent Locale Display setting on the Interaction tab in the Altiris Agent Settings
Policy page, lets you select a particular language that forces the Altiris Agent to always display
the chosen language regardless of the operating system locale.
To access this page
1. In the Altiris Console, select the
Configuration tab.
2. In the left pane, navigate to Configuration > Altiris Agent > Altiris Agent
Configuration.
3. Select an Altiris Agent Settings policy from one of the following;
•
All Desktop computers (excluding ‘Package Servers’)
•
All Package Servers
Release Notes Notification Server 6.0 SP 3 Page 7 of 57
•
All Windows Mobile
•
All Windows Servers (excluding ‘Package Servers’)
1. Click the Interaction tab.
3.1.3 Add Report feature on the Altiris Agent Installation page
Click
Select Computers on the Altiris Agent Installation page. On the Pick Resources from
Report dialog, to add custom reports to the drop-down list, click Add Report. Custom reports
can be removed by clicking the Remove Report button.
3.1.4 View Shortcut Tab Global Privilege
A new Altiris Console Privilege,
View Shortcuts Tab, has been added to the list of Global
Privileges on the Security Role Management page, on the Configuration tab.
Note
: Upon upgrade to SP3, if you are not a member of a core Altiris role, you will not
automatically see the View Shortcuts tab as access is only given to core role members.
3.1.5 /reinstall AeXNSC Command Line Argument
Previously, if you attempted to install the Altiris Agent on an existing installation of the Altiris
Agent and the versions were the same, the install would abort. A new AeXNSC Command Line
Argument has been created to enable the user to Push install the Altiris Agent on a computer
with Altiris Agent already installed. If the Altiris Agent becomes corrupted, a complete re-install
can be carried out with the same Altiris Agent version.
3.1.6 Purging Maintenance
The
Purging Maintenance page on the Configuration tab has been developed to improve
purging with the addition of the Resource Event Data Purge Settings tab. It is represented in
the Help as follows:
Purging Maintenance
This page lets you set the period for which saved reports, captured events, and managed
computers remain in the Notification Database before deletion.
To access this page
1. In the Altiris Console, select the
Configuration tab.
2. In the left pane, navigate to Configuration > Server Settings > Notification Server
Settings and select Purging Maintenance.
All saved reports and events belonging to policies older than the period you specify are
automatically purged from the database on a daily basis.
Note
: If you’re having difficulty running your reports (if they are slow), try purging your events
or set the purge of events to happen more often.
WARNING
: Purging of managed computers will cause the history of assets to be deleted (if you
have Asset Control installed). This information is very important when tracking details, such as
the cost details of assets. Enabling purging of managed computers will cause Asset data to be
lost with potential loss to financial information.
Purging Maintenance Tab
Item Description
Purge Saved Reports
Delete saved reports older
than
Purge all saved reports belonging to policies older than the period
you specify.
Purge managed
computers reporting to
Automatically remove all computers (including their inventory and
events) from the database that have not responded to the
Page 8 of 57 Notification Server 6.0 SP 3 Release Notes
Item Description
this NS, which have not
reported data for
Notification Server since the period you specified.
Also, choose to delete the computers and all associated data from the
database or retire the computers, while keeping all associated data in
the database.
Purge Now Click to immediately purge old data from the Notification Database
Apply Click to save all changes. The old data is then purged from the
Notification Database according to the schedule (if set).
Cancel Click to cancel changes.
Resource Event Data Purge Settings Tab
Computer Events
To enable purging on the entire Computer Event class, select the Data Class checkbox and
configure the Event data retention period and Max rows options, as required. Alternatively, you
can configure the data class individually by event.
By clearing any of these checkboxes, Notification Server will not enable computer event purging.
Notification Server Events
To enable purging on the entire Notification Server event class, select the Data Class checkbox
and configure the Event data retention period and Max rows options, as required. Alternatively,
you can configure the data class individually by event.
By clearing any of these checkboxes, Notification Server will not enable Notification Server event
purging.
To enable or change the purging of saved reports or events
1. In the Altiris Console, select the
Configuration tab.
2. In the left pane, navigate to Configuration > Server Settings > Notification Server
Settings and select Purging Maintenance.
3. In the content pane, click the Purging Maintenance tab.
4. Select Delete saved reports older than. Select the time period (Days, Weeks, Months, or
Years) and enter the corresponding number for your time period.
5. Select Purge managed computers reporting to this NS, which have not reported
data for. Select the time period (Days, Weeks, Months, or Years) and enter the
corresponding number for your time period.
6. In the content pane, click the Resource Event Data Purge Settings tab.
7. Configure resource event purging per data class, as required.
8. Click Purge Now on the Purging Maintenance tab.
To disable the purging of saved reports or events for this solution
1. In the Altiris Console, select the
Configuration tab.
2. In the left pane, navigate to Configuration > Server Settings > Notification Server
Settings and select Purging Maintenance.
3. In the content pane, on the Purging Maintenance tab, clear the Delete saved reports
older than checkbox.
4. Clear the Purge managed computers reporting to this NS, which have not reported
data for checkbox.
5. On the Resource Event Data Purge Settings tab, clear the Computer Events and
Notification Server Events Data Class checkboxes.
6. Click Apply.
Release Notes Notification Server 6.0 SP 3 Page 9 of 57
3.1.7 Resource Discovery link on Altiris Agent Installation page
A link has been added to the
Altiris Agent Installation page that lets you access the
Resource Discovery
page. This page lets you discover resources on the network you can install
the Altiris Agent on.
3.1.8 SMTP Port Setting
Specify an alternate port for SMTP outgoing notifications in the
E-mail Settings page of the
Setup Wizard or in the E-mail Configuration page. The default TCP port for the SMTP server is
25.
3.1.9 Disable generation of HTTP/HTTPS codebases
A setting, GenerateNSHTTPPackageCodebases, has been added to the coresettings.config file.
This setting lets you disable the generation of HTTP/HTTPS codebases for the Notification Server.
It is set to 1, by default, and HTTPS codebases are generated.
Note
: An error will be displayed in the log if the user disables both UNC and HTTP/HTTPS
codebases.
3.1.10 Enable Package Server downloading from Notification Server
only
A registry setting, PkgSvrDownloadFromNSOnly, has been added to the coresettings.config file.
It replaces the
Package Servers download packages from the Notification Server only
option on the
Status tab of the Package Servers page, which has been removed.
It is set to 0 (disabled), by default, allowing Package Servers to download from other Package
Servers and the Notification Server. Set to 1 (enabled), Package Servers will only download from
Notification Server.
Note
: If enabled before SP3 upgrade, the core setting will be set to 1 (enabled) after upgrade.
3.1.11 Global Altiris Agent Settings page
Two new tabs have been added to the Global Altiris Agent Settings page: Authentication, and
Events.
Authentication tab
This tab replaces the Package Access Credential feature, previously located on
the Package
Servers page. Specify the username and password used by the Altiris Agent to connect to a
secured resource. Also, it is the credential used by the Package Server to add file-based security
to download package files, if so configured.
Events tab
Configure individual Notification Server Event Captures, previously done on the
Advanced
Settings page. By clearing any of the checkboxes on the Notification Server Event Capture grid,
the corresponding events will no longer be sent to the Notification Server after the next Altiris
Agent setting policy request.
3.1.12 Distribution Point Credential
This feature has been added to the
Advanced Settings page on the Configuration tab. It
replaces the Package Service Access tab that was configured on the Package Servers page.
This feature is used in the creation of virtual HTTP directories when the source of packages is not
on a Notification Server. These virtual directories are called distribution points.
3.1.13 Constrained Package Servers
A new column name, Constrained, has been added to Package Server tab of the Site
Maintenance page and a checkbox has been added for each Package Server that can be enabled
or disabled.
Disabled = Unconstrained. The Package Server is allowed to download packages it requires from
the Notification Server and Package Servers within its own site.
Page 10 of 57 Notification Server 6.0 SP 3 Release Notes
Enabled = Constrained. This Package Server can’t download packages it requires from the
Notification Server, they will only download from Unconstrained Package Servers in the same
site that have the required package downloaded and ready.
For a site to function, you must have at least one unconstrained Package Server per site to
download new packages from the Notification Server. Constrained Package Servers download the
package from the unconstrained Package Server. Constraining other Package Servers in the site
will ensure one Package Server is downloading the package from the Notification Server, saving
unnecessary traffic.
If a constrained Package Server requests a package, and there are no unconstrained Package
Servers with the package ready for distribution, it won’t receive package sources to download
from. It will enter a backoff retry mode until the assigned unconstrained Package Server in the
site has downloaded the package from the Notification Server.
All instruction covering the new features is covered in Notification Server Help.
3.1.14 Site reports
To view the new Site reports navigate to
Notification Server Infrastructure > Server > Site
Reports on the Reports tab.
Site Reports Report Description
Sites without unconstrained
package servers
This report lists all sites without unconstrained package
Servers.
Subnets without unconstrained
package servers
Lists all subnets without unconstrained package Servers.
3.1.15 Manual Assignment of Package Servers to Sites
Previously, when a Package Server was assigned to a site on the
Package Server tab of the
Site Maintenance
page, it caused all subnets the Package Server was a member of, to be
assigned to the selected site.
Now, when assigning a Package Server to a site, the Package Server will only be assigned to the
selected site, not the subnet the Package Server belongs to. This means a Package Server can
be assigned to multiple sites at once.
Note:
You can assign subnets to a site on the Subnets tab of the Site Maintenance page.
To manually assign a Package Server to a site
1. Click the
Package Server tab on the Site Maintenance page.
2. Select a Package Server.
3. Click Assign to site.
4. Select the checkox of the site you want to assign the Package Server to, in the Select a
Site dialog and click OK.
The following reports identify sites and subnets in your environment without unconstrained
package servers:
•
Sites that do not have unconstrained Package Servers.
•
Subnets that do not have unconstrained Package Servers.
3.1.16 Package Server tab on the Altiris Agent Package page
A new tab, that lets you specify Package Servers to host packages, has been added to
Altiris
Agent Package page on the Configuration tab. This Package Server tab will also appear on
any Solution Agent Package page also installed on Notification Server.
Note:
Software Delivery solution does not yet contain this feature.
New Page Items
Release Notes Notification Server 6.0 SP 3 Page 11 of 57
Item Description
Assign package to Select the destination Package Server from one of the following:
All Package Servers
- Assign the package to all Package Servers.
Package Servers Individually
- Assign the package to selected
Package Servers.
Package Servers by site
- Manually assign Sites to packages from
a list of Sites configured in the Site Maintenance page. When a site is
assigned to a package all Package Servers within the selected site will
host the package.
Package Servers automatically with manual prestaging
- Sites
will be automatically assigned to packages according to the Agents
and Package Servers requirement for that package. Example: An
administrator creates a task, associates it with a package assigned to
Package Servers automatically with manual prestaging, and also
assigns a Collection to the task. Now, all members of this collection
require the package, and need to download it.
The next time Package Refresh runs, or the Update Distribution
Points button is clicked, the package is assigned to sites according to
the collection members.
So, if ClientA is a member of the collection assigned to the task, and
ClientA is a member of SiteA, then SiteA will get assigned to the
package.
When SiteA is assigned to the package it means all Package Servers
within SiteA will host the package. So, when ClientA needs to
download the package, all the Package Servers within its own site will
have already downloaded and prepared the package, or be in the
process of doing it.
This option also lets you manually assign packages to sites as
desired. So, if a site has not been automatically assigned to the
package, the user can potentially assign it to a number of other sites
manually.
3.1.17 Package Servers page
The
Package Servers Access tab has been removed from the Package Servers page. It has
been replaced by the Settings tab which contains new Security Settings features. The Package
Server Summary table on the Status tab has also been enhanced.
New Features on Status Tab
Item Description
Package Server
Summary Table
Unconstrained Package Server
- Number of unconstrained Package
Servers that download new packages from the Notification Server.
Constrained Package Servers then download the package from the
unconstrained Package Server.
New Features on Settings Tab
Item Description
Remove automatic
site assignments if
they are unused for
Remove automatic site assignments for any package that are unused for
the time specified in the drop down list box.
This feature is activated when you assign packages to
Package Servers
automatically with manual prestaging on the Package Servers tab
Page 12 of 57 Notification Server 6.0 SP 3 Release Notes
Item Description
on
the Altiris Agent Package page.
When sites are unassigned from a package, they will not be reassigned at
the next Package Refresh interval, even if there is an enabled task
associated with the package.
A package will be reassigned to the unassigned sites if an Altiris Agent in
these sites requests the package.
Published Codebase Types
Publish UNC codebase Enable Package Servers to create UNC codebases
Publish HTTP
codebase
Enable Package Servers to create HTTP codebases
Publish HTTPS
codebase
Package Servers to create HTTPS codebase.
Note
: will automatically revert back to HTTP codebase if the Package
Server does not have appropriate SSL certificate installed.
Security Settings
Allow anonymous
access to package
codebases
Enable all packages downloaded to Package Servers to have anonymous
access to the directories containing the package files. Anonymous access
will also be enabled for the directory security inside IIS for the hosted
Package Server packages.
Create the Agent
Connectivity
Credential on Package
Servers (provided the
ACC is not a domain
account)
Enable creation of the ACC (configured on the
Global Altiris Agent
Settings page > Authentication tab) on the Package Server.
Note:
This will not create the account if the Package Server is a domain
controller.
Re-enable the created local account if it has been locked out
- Allow the local account to be reactivated if it has been locked out
Create the ACC even if the Package Server is also a Domain
Controller
- Allow the ACC account to be created on all Package Servers even if it is
a Domain Controller.
3.1.18 Package Server Status reports
To view the new Package Server Status reports navigate to
Notification Server
Infrastructure > Server > Package Server Status on the Reports tab.
Package Server Status Report Report Description
Package Server password expiry Lists Package Servers with local ACC passwords due.
Package Server account creation
failure
List of Package Servers that failed to create a local ACC
account.
Package Server DC account
creation failure
List of Package Servers with local ACC accounts created on a
DC when the
Create Account option is disabled.
Package Server account locked List of Package Servers with locked out local ACC account.
Release Notes Notification Server 6.0 SP 3 Page 13 of 57
3.1.19 Notification Policies
To view the new notification policies navigate to
Server Settings > Notification Policies on
the Configuration tab.
Notification Policy Report Description
Package Server password expiry Creates a report and sends e-mail whenever there are
Package Servers with local ACC accounts with passwords
that will retire shortly.
Package Server account creation
failure
Creates a report and sends e-mail whenever Package
Servers fail to create local ACC account.
Package Server DC account
creation failure
Creates a report and sends e-mail when Package Servers
with local ACC accounts created on a DC have the
Create
Account option disabled.
Package Server account locked Creates a report and sends e-mail when Package Servers are
locked out from their local ACC account.
3.1.20 Server Performance report
A
Server Performance report has been added to Reports > Notification Server
Infrastructure > Server > Server Performance Reports. This report provides information
on Scheduled Tasks, Client Config Requests, Message Processing, and Report Execution.
3.1.21 Notification Policies for Constrained Package Servers
To view the new notification policies navigate to
Server Settings > Notification Policies on
the Configuration tab.
Notification Policy Report Description
Sites without unconstrained
Package Servers
Creates a report and sends e-mail when a site doesn’t have
an unconstrained package Server.
Subnets without unconstrained
Package Servers
Creates a report and sends e-mail when a subnet doesn’t
have an unconstrained package Server.
3.1.22 Altiris Agent Installation Option
A new feature,
Download agent package from closest Package Server, has been added to
the Altiris Agent Installation Options dialog. Select this option to download the agent
package from a local Package Server during Push Installation. This option only functions if the
closest Package Server has IIS installed and is publishing HTTP codebases for packages. UNC
codebases are not utilised.
Before the push occurs, the subnet details of the computer are discovered, and from this
information the site in which this Agent resides is determined.
Package Server selection logic
Sites defined on Notification Server
•
Package Servers from the same site as the Agent will be
returned.
•
If no ready Package Servers exist in the same site as the
Agent the Notification Server will be used.
No sites defined on Notification
Server
•
Package Servers from the same site as the Agent will be
returned
•
If no ready Package Servers exist in the same site as the
Agent the Notification Server will be used.
Page 14 of 57 Notification Server 6.0 SP 3 Release Notes
Note:
The Altiris Agent Package must be considered 'Ready' on Package Servers if they are to
be returned to the Altiris Agent. The feature does not function when performing a Pull
Installation
To access this feature
1. In the Altiris Console, select the
Configuration tab.
2. In the left pane, navigate to Configuration > Altiris Agent > Altiris Agent Rollout and
select Altiris Agent Installation.
3. Click Installation Settings.
3.1.23 Resource Association Diagram limit
The
Resource Association Diagram feature in Resource Manager has been re-designed to
show the first 20 items in an association before adding a Grouping item that contains the rest of
the associated items.
3.1.24 Security Role Management
The Altiris Console features used to manage security roles have been re-designed to help you
configure security in the Notification Server. The new
Security Role Manager console displays
information from the Notification Server database about role permissions for any given filter. The
new features also include:
•
New, open role-focussed security user interface
•
Easier role creation and modification
•
See the left pane as it appears for any given role
Previously, roles were accessed on the Security Role Management page on the Configuration tab.
This page has been removed and the Security Roles folder on the left pane has been added. It
contains the default 5 security roles, roles installed by solutions, and any roles you have created.
The Security Role Manager is accessed by the left pane or page of a selected security role as
defined below.
Security Role Manager
Console item
Description
Role: Select the role you want to configure in the
Role drop-down list.
Filter: Your choice of filter determines what items you see in the left pane and
what permissions are available in the content pane. Choose from:
•
All Collections
•
All Data Classes
•
All Items
•
All Notification Policies
•
All Resource Selector
•
All Resources
•
Tree > Configuration
•
Tree > Reports
•
Tree > Resources
•
Tree > Shortcuts
•
Tree > Tasks
Inherited Permissions View the Inherited Permissions for the role and filter selected.
Noninherited Select the permissions you want for the role and filter you have
selected. Each filter has a different set of Noninherited permissions. Use
Release Notes Notification Server 6.0 SP 3 Page 15 of 57
Security Role Manager
Console item
Description
the
Check All and Clear All options for faster configuration if you want.
Show Permissions Restrict the permissions displayed to:
•
All available permissions
•
All permissions selected
•
All permissions not selected
Advanced Click to view the Security tab, in the Properties dialog, for the item
selected in the tree. This shows permissions for all roles for the selected
item.
Note
: If you clear the Inherit the permission entries from parent
object that apply to child objects option you will break inheritance
for the item in all roles, not just the selected one.
To access Security Roles and open the Security Role Manager console
1. In the Altiris Console, select the
Configuration tab.
2. In the left pane, navigate to Configuration > Server Settings > Notification Server
Settings > Security Roles.
3. Select the desired Security Role.
4. On the selected Security Role, click Show Security Role Manager Console on the
General
tab, or right-click the Security Role in the left pane, and select Security Role
Manager in the pop-up menu.
To create a Security Role
1. In the left pane, navigate to
Configuration > Server Settings > Notification Server
Settings.
2. Right-click the Security Roles folder and select New > Security Role in the pop-up menu.
3. Enter the new role name in the pop-up dialog box.
4. On the General tab, enter a role description of the New Role page.
5. On the Membership tab, click Add new members.
6. Select users or groups for the role in the pop-up dialog and click OK.
7. On the Privileges tab select all if the privileges you want to associate with this role, and
then click Apply.
3.1.25 Notification Server Configurator
The Notification Server Configurator is a plugin that lets you modify commonly-used Notification
Server settings. Previously, these settings could only be modified manually by editing the
coresettings.config file, or changing the Windows registry settings. The Notification Server
Configurator provides a single point of access to all of these settings, showing default and
recommended values with a description of each setting. A function is also provided to help
search for a particular setting. Settings include Database Settings, Events Settings, Inventory
Forwarding and Power Management.
To install the Altiris NS Configurator
Run NSConfiguratorSetup_6_0.msi which is located at C:\Program Files\Altiris\Notification
Server\NSCAP\Bin\win32\X86\NSConfigurator.
NS Configurator page items
Page 16 of 57 Notification Server 6.0 SP 3 Release Notes
Item Description
Setting Name Core setting name.
Description Brief description of its purpose.
Type Type of setting. Example: registry or local.
Default Value Its default value at install.
Value Enter the value you want, if applicable.
Open the NS Configurator and edit a core setting
1. On the
Start menu, navigate to Programs > Altiris > Tools > NS Configurator.
2. In the left pane select the core setting you want.
3. In the Value text box enter the setting you want.
4. Click Apply to finish.