Quantcast
Channel: Ivanti User Community : Document List - Inventory
Viewing all 397 articles
Browse latest View live

ERROR: "DBRepair.exe - Common Language Runtime Debugging Services"

$
0
0

Description When running the database repair utility, the following error message occurs:

 

"DBRepair.exe - Common Language Runtime Debugging Services

 

Application has generated an exception that could not be handled

Process id=0xb14 (2836), Thread id=0x2cc (716)"

 

Cause dbrepair.exe is not saved in \Program Files\LANDesk\ManagementSuite\ directory

 

-or-

 

Attempting to execute dbrepair.exe from the \[corename]\ldmain network share

 

Resolution Make sure to save dbrepair.exe to the core server's \Program Files\LANDesk\ManagementSuite\ directory and to execute the application from that same location.


Inventory scans get rejected with Error committing on table SYSTEM_CAPABILITY: VIOLATION OF PRIMARY KEY CONSTRAINT 'XPK_SYSTEM_CAPABILITY'. CANNOT INSERT DUPLICATE KEY IN OBJECT 'DBO.SYSTEM_CAPABILITY'.

$
0
0

Description

Inventory scans get rejected with Error committing on table SYSTEM_CAPABILITY: VIOLATION OF PRIMARY KEY CONSTRAINT 'XPK_SYSTEM_CAPABILITY'. CANNOT INSERT DUPLICATE KEY IN OBJECT 'DBO.SYSTEM_CAPABILITY'.

 

Cause

This is due to a problem with some clients that report different capabilities via inventory than what is stored within the database.

 

This issue can be triggered by an in-place upgrade of devices from WinXP to Win7. In some cases the device on Win7 sends a different List of capabilities for the same Device.

Solution

The issue with System Capability constraint has been resolved in the upcoming new installs of LDMS 9.5. Existing (upgraded) Databases may still have the constraint in which case if the problem exists follow the resolution below.

 

The resolution was dropping the constraint XPK_System_Capability, so that the database will no longer raise an error if a device sends a scan with different capabilities.

 

Product support agrees that this workaround should be safe for production systems.

In any case! Please backup your database and STOP the Inventory Server service

- Run the following SQL command against your LANDesk database

"alter table system_capability drop constraint XPK_System_Capability "

Commit the change then restart the Inventory Service.

How to extend the Inventory Scanner capabilities

$
0
0
Introduction

 

The LANDesk Inventory Scanner (LDISCN32.EXE) is able to scan and report back to the Core Server a huge amount of information but time to time collect some more, specific, information from the client is required.

There are basically three different approaches:

 

Scan for a specific value of the registry

 

for example this is useful if we know exactly the name and location of the registry value we want to scan for.

The procedure to instruct the Inventory Scanner to retrieve it is quite simple and well covered in the article DOC-1089

 

Scan for something that is not in the registry

 

If the value we need to scan for is not directly available in the registry or some manipulations to it are necessary before to acquire it we need to use a different approach.

The idea is to write a script or a program that will run periodically on the device. The program will collect the data and put the result of the execution in a specific registry key of the client.

Then we can use the  DOC-1089 to retrieve the values and store them in the inventory.

 

Scan for information that are not contained in specific registry value and that cannot fit in a single registry value

 

In some specific cases we need to grab some information that is complex and the result of our script elaboration cannot fit in a single registry value.

A good example for this situation is how to retrieve the all the registry values that are under the Run registry key ( HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ).

How to scan for the full registry key is explained in the article DOC-5709

 

How can we generalize the method used by the article DOC-5709 ?

 

To do this we need some background information before to start.


In the client folder directory ( C:\Program Files\LANDesk\LDClient for English OS ) there is the file LDSCNHLP.INI.

This file will tell to the Inventory Scanner two things:

  • A program to execute before to start the scan of the device
  • Where to catch the output that my program will generate

 

The file contains generally three sections:

[EXECUTE WIN16]

Not so much used in these days:

In this section we need to list all the programs we want to start on a 16bit platform

 

[EXECUTE WIN32]

In this section we need to list all the programs we want to start on a 32bit platform


The syntax to use in the EXECUTE section is:

LAUNCH<n>=<compete path of the program to launch>

Where <n> is a sequence number starting from 1

Example:

LAUNCH1=C:\Program Files\LANDesk\LDClient\ldcstm32.exe /s

LAUNCH2=C:\Program Files\LANDesk\LDClient\myPersonalScan.exe

 

Optionally is possible to add the statement TIMEOUT<n>=millisecond to wait before to give up:

Example:

LAUNCH1=C:\Program Files\LANDesk\LDClient\ldcstm32.exe /s

TIMEOUT1=600

LAUNCH2=C:\Program Files\LANDesk\LDClient\myPersonalScan.exe

TIMEOUT2=600

 

[DATA FILES]
In this section we need to specify the name of the file(s) where our program(s) will write the output information

The data needs to be in a particular format that we will cover in the next point.

The syntax to use to specify the files is:

 

DATA<n>=<compete path of the file that contains the information to add to the inventory>

Where <n> is a sequence number starting from 1

 

Example:

DATA1=C:\PROGRA~1\LANDesk\LDClient\LDCUSTOM.DAT

DATA2=C:\PROGRA~1\LANDesk\LDClient\MyStuff.DAT

 

The data gathered from the data files needs to be Custom Data and will be stored under the Custom Data node of the inventory

If we want to store the data in other part of the Inventory (for example under the OS node) we need to use the keyword

DataNoPrepend<n>=<compete path of the file that contains the information to add to the inventory>

Where <n> is a sequence number starting from 1.

 

Format of the data files

 

The format of the data files is quite simple and resemble the format used in the LDAPPL3.TEMPLATE to scan for registry keys.

The format is:

<node of the inventory> - <node of the inventory> - ..... - <value name> = <the value>

Example:

 

We want to store the information under Custom Data -> My Special node -> Is Working and the value is YES. The file need to contain this line:

Custom Data - My Special node - Is Working = YES

 

If we want to store something under OS -> RegistryKey -> RunCount and the value of RunCount is 100 we need to have a line like this one:

OS - RegistryKey - RunCount = 100

 

Note that in this case the file that contains this line needs to be referenced with the keyword DataNoPrepend<n> in the LDSCNHLP.INI file.

Note, if you use DataNoPrepend<n> to read a .DAT file, make sure you press the Enter key to move the cursor to the next line in the .DAT file. Failing to do so will result in the text being only 11 characters long in the inventory scan.

 

Example:

MyAttribute == this is the attribute in the database that I want to populate with a value of 012345678901. This will look like below in my .DAT file

 

MyAttribute = 012345678901

 

Without an empty line in the .DAT file, MyAttribute will have only 01234567890

 

Considerations

 

The usage of LDSCNHLP.INI extends incredibly the potentiality of the Inventory Scanner but there are some important considerations to keep in mind before to use it:

 

  • Make sure that the program you are calling will not impact too much the CPU of the machine and will not produce any visible output:
    If a VbScript or JScript is used, call it with CSCRIPT to be sure that eventually present PRINT calls will not be displayed as modal message boxes.
  • Make sure that the program is not asking for any form of input or interaction.
  • The program will be executed in the context of the user that is launching the Inventory Scanner.

How To Enable Device ID Logging

$
0
0

Description

Within LDMS 2016.3 SU 4 and EPM 2017.1 there have been improvements made with the way Device ID communication is logged on the core server. This newly logged information is useful in tracking down issues related to the Device ID assignment and restoration process.

 

Resolution

In order to enable the logging please follow the process outlined below:

 

1. On the core server navigate to Configure > Services and select the 'Inventory' tab.

 

2. Click on the 'Advanced Settings' button and within the new window navigate to the 'Use Rolling Log' option. Alter the value from a '1' to a '0', click 'Set' and apply the changes.

 

Note: As seen in the example graphic below, this will result in a restart of the Landesk Inventory Service.

 

deviceid1.gif

 

3. Enabling rolling logs allows the Device ID actions to be logged in two places:

  • One the core server within the LDINv32.exexxxx.log in the C:\Program Files\LANDesk\ManagementSuite\log directory
  • On the client device within the changeslog.xml located in the C:\Program Files (x86)\LANDesk\LDClient\Data

 

Below are examples of data that will be collected within each log:

 

LDInv32.exexxxx.log - 09/01/2017 06:36:29: 0x2340: Removing this computer from the restore device ID map

06/01/2017 06:36:29: 0x2340: Device ID '{DE5EB4CC-D7E2-7749-B666-81F950A68834}' has been successfully restored to '{0367DB89-F2E1-4749-BA07-C2C4AA061234}'

 

ChangesLog.xml - <change timestamp="2017-09-01T07:36:25-7:00" bnf="Device ID" oldvalue="{DE5EB4CC-D7E2-7749-B666-81F950A68834}" newvalue="{0367DB89-F2E1-4749-BA07-C2C4AA061234}"/>

 

This information will be helpful in determining where the issue is occurring with the Device ID assignment or restoration process.

 

Note: Please remember to disable the 'Rolling Logs' option once troubleshooting has been completed to avoid unnecessarily filling up drive space on the core server. 

 

Additional Information

How Restore old Device IDs works.

Explanation of how to use the "Devices" and "Duplicate ID's" option for Inventory, and how they work.

Inventory Scanner sits at "Communicating with core over TCP/IP"

$
0
0

Overview

 

On new versions of LDMS, you may notice that the inventory scanner sits at "Communicating with core over TCP/IP" for a long time, seemingly doing nothing, when launched manually.

 

Screenshot_150.png

 

This is due to addition made to WMIRulesScan.exe, a new process that integrates with data analytics to run extra WMI scanning rules.

 

Note: If you rename the WMIRulesScan.exe you may experience an issue in seeing uninstalled software within a device's inventory record. For more information please see this article: Uninstalled Software Appears in Inventory

 

Resolution

 

If you're licensed for Data Analytics, this has been fixed in a DA Content update on LDMS 2016.3 SU4, and EPM 2017.1 SU1.

 

If you aren't licensed for data analytics, the below steps are a workaround to remove the rules:

 

  1. Head to %LDMS_HOME%ldlogon
  2. Find WMIRulesScan.xml
  3. Open the file
  4. Hit CTRL + A and then delete
  5. Save the file
  6. Open the file properties and set the file to Read Only.

 

Next time you run an inventory scan, the inventory scanner will download the cleared WMIRulesScan.xml and inventory should start scanning Hardware much faster.

 

Additional

If you wish to disable the WMI Rules Scanner within 2017.x please visit the following article: Disable WMI Scanner Rules from the Landesk Scanner Group

Uninstalled Software Appears in Inventory

$
0
0

Description

Within a device's inventory record under the Software > Add or Remove Programs > Program tree there appears to be software that was previously uninstalled on the device.

 

Cause

The root cause of this issue is an out of date WMIRulesScan.dat file located within the C:\ProgramData\LANDesk\Data directory on the device.

 

Resolution

This issue can occur if the WMIRulesScan.exe file was renamed on the core to disable WMIRulesScan from running within your environment. It is recommended that you undo this action to avoid this issue. If you wish to disable the WMIRulesScan process please follow the process outlined in the documentation below:

 

Disable WMI Scanner Rules from the Landesk Scanner Group

 

Alternately you can delete the WMIRulesScan.dat file located within the C:\ProgramData\LANDesk\Data directory and re-run the inventory scanner. However, this will only alleviate this issue for a single device.

 

Additional Information

Inventory Scanner sits at "Communicating with core over TCP/IP" 

Database Repair Utility (DBRepair.exe download)

$
0
0

Download


Download dbrepair06022011.zip for LANDESK 9.0 and 9.5 databases. Compatible with 9.0 supported Core OS's: Windows Server 2003 32 bit and Windows Server 2008 R2x64. This dbrepair includes the new snapshot function as described in UsingSnapshotInDbrepairRev1.pdf.

 

Download DBRepair9.5 For Landesk9.5

 

Download 96DBRepair.zip for LANDESK 9.6

 

Download 9.6SP1dbrepair.zip for LANDESK 9.6 SP1, SP2 & SP3

 

Download DBRepairLDMS2016.0.zip for LANDESK Management & Security 2016.0

 

Download DBRepairLDMS2016.3.zip for LANDESK Management & Security 2016.3

 

Download DBRepairEPM2017.1.zip for Ivanti Endpoint Manager 2017.1

 

Download DBRepairEPM2017.3.zip for Ivanti Endpoint Manager 2017.3

 

DISCLAIMER

USE OF THE DBRepair.EXE APPLICATION SOFTWARE IS SOLELY AT THE USER’S AND/OR COMPANY’S OWN RISK.  THIS SOFTWARE APPLICATION IS AVAILABLE “AS IS,” AND LANDESK SPECIFICALLY DISCLAIMS ALL WARRANTIES INCLUDING ANY IMPLIED WARRANTIES.

 

For LDMS 9 it should only need to be run initially after upgrading because 9.0 doesn't allow client scanner corruption to enter the database unless configured otherwise. See DOC-7456 for more information on how this is accomplished and how to allow custom unmodeled data into the database. In some circumstances it may be necessary to allow unknown items, in those cases using snapshot and a scheduled dbrepair is useful. This is also described in the UsingSnapshotInDbrepair pdf.

 

Download the appropriate attachment and extract dbrepair.exe to the ManagementSuite directory on the core server. The path to the ManagementSuite directory is by default C:\Program Files\LANDesk\ManagementSuite.

 

Instructions for Use

1. Stop the inventory server service on the core server before running DBRepair.

 

2. Verify that DBRepair.exe is in the ManagementSuite directory.

 

3. Double click DBRepair.exe to run it.

 

Note: Once DBRepair.exe opens, anything that appears in the tree is unmodeleddata. This includes either custom data that you have deliberately added (via a custom data form or by modifying ldappl3.ini) or data corruption.

 

4. Delete database corruption if if is present as it can cause various issues.

 

Note: If you have no custom data that you want to keep, then click on Computer at the top of the window and click the 'clean' button. If you have some custom data that you want to keep, then individually click on the items that are not custom data and click the 'clean' button.

 

5. Close DBrepair.exe.

 

6. Restart the Inventory Server service.

Example

If an item in the DBRepair.exe tree list appears to be a valid

part of the inventory tree, it's not. Keep in mind that everything

listed is unmodeleddata, so it can be safely removed. You only need to

keep the items that you have added specifically as Custom Data.

 

DBRepair.exe that looks like this:

 

Computer

-Custom Data

-Motherboard

-Loftwa6re

 

Normally there is no such value as Loftwa6re. Clearly, the Loftwa6re item represents database corruption. However, even though Motherboard looks valid, by virtue of it being in this list, it is not valid and it should be removed.

Error: GPMM has stopped working

$
0
0

Symptom:

 

Users are experiencing the following persistent pop-up error message:

 

Capture.PNG

 

What is GPMM?

 

The GPMM.exe is part of the GPS Tracking\Find my device feature. This is the middle man executable which handles the calls into MBBScanner in generating the miniscan that contains GPS data. Based on the logged on user we prompt for credentials, enroll users and store them in registry.

 

 

Issue:

 

If the user does not have full read/write permission to folder: Program Data/LANDesk/Log

GPMM crashes and displays the above error.

 

Solution:

 

Grant user read/write permissions to: ProgramData/LANDesk/Log


How Login Name, FullName, and Primary Owner are gathered by Inventory

$
0
0

Primary owner - This is a dynamic setting that is determined by taking the last X number of logins, and seeing which user account has the most in that number.  That will be the Primary Owner attribute.  This is set in the inventory settings under Configure Services on the core.

 

Primary Owner.jpg

 

The primary owner is the user who has logged on the most times to the workstation.  If you are interested, you can see the history used by the inventory scanner to calculate this by looking in a workstations registry, here:

 

HKLM\SOFTWARE\LANDesk\Inventory\LogonHistory\Logons

 

The value names are unix time (c time). You can use the URL below can be used to translate them.

 

http://www.onlineconversion.com/unix_time.htm

 

Login Name - In the inventory of a client, "Login Name" provides the last user which was logged on the client during the last inventory scan.  If the inventory scan is initiated from a Console when nobody is currently logged on the client, the information that is provided comes from the registry key on the client computer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultUserName.

 

FullName– This field shows the Display Name field for the user that is logged into the domain.

 

Screenshot of the user in active directory.

 

Administrator Display Name.jpg

 

Inventory Shown

Yo Whats up.jpg

For Active Directory accounts the field queried is Display name from the AD user properties.

 

It is not gathered with scanner subprocess ldapwhoami.exe, it is actually the inventory scanner that gets this.  Ldapwhomami.exe gets the “ldap user – “  and location fields for inventory.

 

If the account is a valid AD account that the machine is logged in with or was previously, the fullname will will appear in the inventory scan. This is based on the machine currently being joined to the domain.

 

Machines in a Workgroup but logging in with domain credentials

The following situation to machines that were joined to a domain and logged into with domain users, however have since joined a workgroup or left that domain. The domain login will still work because it still exists on the machine.  However, this will impact the ability of the inventory scanner to retrieve the FullName attribute.

 

The fullname field is still pulled from AD in the display name field as shown above if the scan is run while the user is logged in.

 

If the domain logged in user reboots or logs out and doesn’t log back in the fullname value will be null’d / removed the next time the local scheduler inventory runs. 

Custom Data is not Entered - Using the Unknown Items Inventory Tool

$
0
0

Description: Adding custom data forms that are scanning in or custom data being pulled from clients registry through the LDAppl3 are blocked from being added to the database.

 

Cause: This is caused by a feature that is added to version 9.0 designed to protect the inventory tree in the database. You can allow custom data to be entered into the database.

 

Resolution: The attached Document shows when and how to use the Unknown Inventory section of the Inventory service for LDMS 9. Here are some quick steps to allow the data.

 

*NOTE* If this document does not resolve your issue please follow the steps in Custom Data Registry Scan Not Working: How To Pull Registry Information Using The Manage Software List to confirm your custom data is set up correctly.

 

On the Core Server

1) Open the 32 bit console

2) Go to Configure | Services

3) Click on the Inventory tab

4) Click on the button labeled Unknown Items

1-UnknownItems.JPG

5) Select an item on the list and click Allow

2-Allow.JPG

NOTE: Please do not disable blocking unknown inventory items. This feature is very important to protecting the inventory tree from corruption. Allowing the unknown item allows it for all computers. This is not something that is has to be done when each computer scans in.

SQL Script To Clean The EPM Database

$
0
0

Overview

 

The attached SQL Script is intended to help optimize the EPM database and improve performance of processes that rely heavily on it, like Inventory. Below details what specific portions of this script does.

 

This script IS NOT officially supported by Ivanti. Ivanti is not responsible for any damages, direct or incidental, caused by running this script. RUN AT YOUR OWN RISK!

ALWAYS take a FULL backup of your database before making any modifications to the database, including, but not limited to, running this SQL Script.

 

What it does

 

  • Clears Patch History
  • Clears Auditing History
  • Clears EPS Logging History
  • Cleans unnecessary files from file information tables
  • Rebuilds indexes
  • Runs CHECKDB
  • Creates a SQL checkpoint

 

Options

 

The below lines in the SQL script should be edited to better match your company's needs.

 

SET @DaysToKeepPatchHistory = 90 --Change 90 to how many days of patching history you want

SET @DaysToKeepAuditing = 90 --Change 90 to how many days of auditing history you want

SET @DaysToKeepSecurityAction = 90 --Change 90 to how many days of security actions from EPS you want

 

The value of 90 means the script will retain 90 days of the affected data (Patch history, auditing, EPS history). This should be changed to reflect your company's data retention and reporting needs/policies.

Database Exception: Error Committing on Table...Increased column size might be necessary (Event ID 4100)

$
0
0

Description:

 

This document describes how to resolve "Database Exception" errors found in a core servers Event Viewer.  Event ID 4100 and sourced from the "Landesk Inventory Server".

 

Database exception: EXAMPLE.scn, LDInv.dll

-2147467259

Data provider or other service returned an E_FAIL status.

 

Error committing on table :   DATA PROVIDER OR OTHER SERVICE RETURNED AN E_FAIL STATUS.

     Increased column size might be necessary, Thread ID:

 

Cause:

 

Inventory scans sent to the core server contain attributes whose values exceed the amount of characters allowed in database schema of the attributes associated column.

 

Resolution:

 

In order to resolve these error we must increase the column size(VARCHAR) for the effected attributes. This must be adjusted in the core servers database schema configuration file (Datamart.xml) otherwise your changes may be overwritten by "CoreDBUtil.exe"

 

Databases hosted in an SQL Cluster will require manually updating the columns (See "Manually Updating the Database Table Schema" below).

 

Updating database schema

 

The database schema is configured in DataMart.xml. After modifying this configuration you can apply the changes to the database using CoreDBUtil.exe . Both "Datamart.xml" and "CoreDBUtil.exe" can be found in the core servers installation directory. (Program Files\LANDesk\ManagementSuite)

 

Modifying the Database Schema Configuration:

 

        1. Open "Datamart.xml" in notepad or your preferred text editor
        2. Modify the "Varchar" value of all the effected columns to "Varchar(MAX)"
            • Effected Tables/Columns

              TablesColumnsModifications
              BiosSettingsCurrentSetting
              BiosSettingsPossibleValues
              EnvironSettingsName
              EnvironSettingsValueString
              PeripheralAdapters Type
              PrinterVersion
              ServicesPath
              ServicesDescription
              VideoDriverName

              Drivername.png

        3. Save Datamart.xml
        4. Apply Configuration changes to the Database

     

    Apply Configuration Changes

        1. Stop the "LANDesk Inventory Server" service.
        2. Navigate to Program Files\LANDesk\ManagementSuite
        3. Launch CoreDBUtil.exeas administrator
        4. Click "Build Components"
        5. Click OK when complete
        6. Restart the "LANDesk Inventory Server" service
        7. Confirm resolution by reprocessing scans

     

     

    If you have ever used your database in SQL replication then CoreDBUtil.exe will not complete successfully. Please contact support for further assistance

     

     

    Manually Updating the Database Table Schema

     

    If a database is hosted in an SQL Cluster or if "CoreDBUtil.exe" fails to commit the changes for any reason you will need to update the effected tables in your LDMS Database manually using SQL Management Studio.

     

        1. Allow saving changes to the DB tables.
          • Navigate to "Tools > Options > Designers" and Uncheck "Prevent saving changes that require table re-creation"
          • 2015-12-08_11-12-08.png2015-12-08_11-14-02.png
        2. To increase this value, run the following in a new SQL query:

     

    alter tableBiosSettingsalter column CurrentSettingnvarchar(max);

    alter tableBiosSettingsalter column PossibleValuesnvarchar(max);

    alter table environsettingsalter column namenvarchar(max);

    alter table environsettingsalter column valuestringnvarchar(max);

    alter tableperipheraladaptersalter columntypenvarchar(max);

    alter tableprinteralter columnversionnvarchar(max);

    alter tableservices alter column path nvarchar(max);

    alter tableservices alter column description nvarchar(max);

    alter tablevideoalter column drivernamenvarchar(max);

     

     

    Changes made to the schema manually must also configured in "Datamart.xml" as described above otherwise they may be overwritten by "CoreDBUtile.exe"

     

    Confirm resolution by reprocessing scans

     

    Confirm Resolution

     

    To validate that the changes were applied as expected you can "re-process" your failed scans

        1. Navigate to Program Files\LANDesk\ManagementSuite\ldscan\ErrorScan Your
        2. Move all files that have been modified within the last 24 hours to Program Files\LANDesk\ManagementSuite\ldscan\ the
        • It is common for scans to become out of sync after recovering from errors. If your scans return to "ErrorScan" you should review the Event Viewer to validate the cause.
        • Out of Sync Scans are moved to "ErrorScan" and log as Warnings in the Event Viewer

     

    If your scans continue to fail with the same errors in event viewer after performing these steps you should review "\Program Files\LANDesk\ManagementSuite\log\CoreDbUtil.exe.log" for errors.

    Database exception errors - Deadlocks

    $
    0
    0

    Description

    After upgrading to LANDesk Management Suite 8.7, the core server's Application Event Log is getting a lot of error entries similar to this one:

     

    Database exception:

    SCAEDFE.SCN

    LDInv.dll

    -2147467259

    Transaction (Process ID 51) was deadlocked on  resources with another process and has been chosen as the deadlock victim. Rerun the transaction.

     

    DELETE (1688): UNMODELEDDATA.UNMODELEDDATA_Idn in (1870110)

    Thread ID: 1688.

    or

    DELETE (11768): ENVIRONSETTINGS.ENVIRONSETTINGS_Idn in (3645691,3646107,3645692,3645693,3645694,3645695,3645696,3645697,3645698,3645699,3645700,3645701,3645702)

    Thread ID: 11768.

    or

    DELETE (8472): SERVICES.SERVICES_Idn in (2074082,2074083)

    Thread ID: 8472.

     

    Cause

    The core server is set to run multiple DB Threads, but the hardware cannot handle multi-threading.

     

    The Core Server may not be optimized and may be executing writes slower than it could if it were optimized.

     

    Resolution

     

    1. Lower the inventory threads.

        a. Stop the inventory service

        b. On you core server access the Managementsuite directory

        c. Make a back up and then open the DATAMART.XML

        d. Go to table USBMonAlert

        e. Provide a higher figure for the size of ProfileCol column

         f. Launch the CoreDbUtil.exe selecting the option "Build components" (it is in the managementsuite directory)

        g. Restart the inventory service

     

    *If multi-threading is not supported by the hardware, this may need to be changed back to its default value of 1.

     

     

     

     

    2. Index the database, or the specific table. To find to table, look in the Application log to find the Table and Column that the deadlock is occurring on.

     

    Note: Look at the SQL statements below and find the line below that matched the deadlock and run it in SQL Query Analyzer.

     

    Create index Fileinfoinstance_IDN on Fileinfoinstance (Fileinfoinstance_idn);

    Create index CODECS_Idn on CODECS (CODECS_Idn);

    Create index PARTITIONS_Idn on PARTITIONS (PARTITIONS_Idn);

    Create index LD_SCHEDULED_TASKS_Idn on LD_SCHEDULED_TASKS (LD_SCHEDULED_TASKS_Idn);

    Create index ENVIRONSETTINGS_Idn on ENVIRONSETTINGS (ENVIRONSETTINGS_Idn);

    Create index OSRESOURCE_Idn on OSRESOURCE (OSRESOURCE_Idn);

    Create index Printer_Idn on Printer (Printer_Idn);

    Create index Usbdevice_Idn on Usbdevice (Usbdevice_Idn);

    Create index Logicaldrives_Idn on Logicaldrives (Logicaldrives_Idn);

    Create index Computer_Idn on Motherboard (Computer_Idn);

    CREATE INDEX UNMODELEDDATA_IDN ON UNMODELEDDATA (UNMODELEDDATA_Idn);

     

     

     

    Note: If the deadlock is different that any of the lines listed above, modify one of the lines with the information in the deadlock error and run the line in SQL Query Analyzer.

     

    3. Implement a database maintenance plan, to keep the database optimized.

    .MINI Scan Files In LDSCAN Folder

    $
    0
    0

    Issue

     

    Under Program Files\ManagementSuite\ldscan, there are many .mini scans that aren't being processed. This may impact other features that rely on inventory data, such as OS Provisioning

     

    Workaround

     

    Below is a powershell script that can be run on the Core. This script needs to be run in an elevated powershell session. After running this script once, an event subscriber is created that watches the ldscan folder and automatically renames all .mini files to .miniscn. This will only run as long as the powershell session remains active.

    This script will not retroactively rename existing .mini files. For that, you can use this command in a command window, launched in the ldscan directory: ren *.mini *.miniscn

    You can run this command to verify the subscriber was created: Get-EventSubscriber

     

    You should see a result like below:

     

    Screenshot_162.png

     

    You can remove this subscriber by running this command: Unregister-Event -SourceIdentifier OnMiniScanStored

     

    Ivanti is not responsible for any damages caused by this script, direct or otherwise. This is NOT an official Ivanti script, and is not supported. This script is provided as-is, with no guarantee or warranty of any kind.

     

    Link: LDMSPowershellTools/RenameMiniFiles.ps1 at master · b1kjsh/LDMSPowershellTools · GitHub

     

    Script is also attached.

    How to generate inventory scan files mannually

    $
    0
    0

    Description:

     

      We need to generate scan files manually sometimes, so we can identify if the scan files is consistent with the inventory information on the core server.

     

    Resolution:

    On the client machine, run below steps to generate inventory scan files manually:

    1. Click Start-All Programs-LANDesk Management-Inventory Scan
    2. Right click on Inventory scan, click on Properties

      inventoryscn1.jpg
    3. Select all the content in the Target, click copy

      inventoryscn2.jpg
    4. Open CMC window, paste the content into CMD window
    5. Add parameter at the tail of command line: /O=c: \test.scn
      inventoryscn.jpg
      Note: /f is Force a full scan, /SYNC is to Synchronize data to the core, /O= is to provide an output log file of what the agent collects,then the path and file name of the text log file.
    6. Open window browser, open c drive,check if c:\test.scn scan file is generated on c drive

      scn.jpg

    Ivanti Endpoint Manager and Endpoint Security - Inventory Frequently Asked Questions

    $
    0
    0

    Inventory for Ivanti Endpoint Manager and Endpoint Security

    Product Help Files

    IEM 2017 / LDMS 2016 | LDMS 9.6

     

    To review additional content regarding this component, please use Documents or Discussions buttons on the overview page.

     

    FundamentalsTroubleshooting

     

    ConfigurationTips & Tricks

    NOTE: This article is not a full list of all documents and issues. You can continue to search the rest of the community or the portion specific to Inventory if this page hasn't helped.

    How to Run Inventory Scanner on Devices Without an Agent

    $
    0
    0

    Description

    The attached document provides information on performing an inventory scan on a device without an agent installed on the device or self-electing agentless scanning enabled on the network.

     

    Note: We recommend utilizing the agentless scanner if you are able. For steps to enable the Agentless Scanner within LDMS 2016.3.x please see the article below:

    Steps To Enable The Agentless Scanner in LDMS 2016.3 and Beyond

     

    Core Access Resolution

    Note: This resolution assumes that the device needing to run the scan has the ability to establish a connection with the core server.

     

    1. Connect to the core server's \ldlogon share and run the following command from an administrator command prompt:

     

    Note: The most simple way to achieve this would be to map a network drive to the <core server>\ldlogon location

     

    Ldiscn32.exe /NTT=%coresevername% /s=%coreservername% /f /i=%coreservername%\ldlogon\LdAppl3.ini /sync /V

     

    No Core Access Resolution

    Note: This resolution assumes that no network connectivity can be made to the core and therefore all scanning files will need to be relocated to the device in which needs to be scanned.

     

    1. In order to scan a device in which has no access to the core server as well as no agent installed the following files will need to be copied the devices local hard drive. Below is the list of files required to get obtain a scan:

     

    • AMTScanner.exe
    • ClientRollingLog.dll
    • ClientRollingLog.log4net
    • elogapi.dll
    • GatherProducts.exe
    • GPMM.exe
    • HPScanner.exe
    • Lclxclnt.dll
    • ldaccount.dll
    • ldapinfo.dll
    • ldappl3.ini
    • ldapwhoami.exe
    • ldavhlpr.dll
    • LDISCN32.exe
    • LDServerRoles.exe
    • LDMBBApi.dll
    • LDProfile.exe
    • libhttp.dll
    • loc32vc0.dll
    • LocalPrtInfo.exe
    • log4net.dll
    • ltapi.dll
    • processrunner.dll
    • psapi.dll
    • ServerScanner.exe
    • ThinClientScanner.exe
    • vulscan.dll
    • WMIRulesScan.exe

     

    2. In order to run the scan, open an administrator command prompt window and run the following command:

     

    Ldiscn32.exe /l- /o=scan.txt /f /i=LdAppl3.ini /sync /noui

     

    Additional Information

     

    Inventory Scanner Switches

    How to run Inventory Scanner on devices with no LDMS agent (Performing an Agentless Scan)

     

    Docx and PDF files outlining the process have been attached to this document for easy access.

    "Unable to find an active License" : The Inventory Server fails to process scans

    $
    0
    0

    Description

     

    • It has been found in some instances that the Inventory Server gets into a state where it accepts scans, but does not process them.
    • Thus scans build up in the ldmain\ldscan folder.
    • There have also been a few cases where instead of hanging, the service would instead crash with an event 1000.
    • In other cases, the SCN files are moved to the errorscan folder reporting in the event viewer: Unable to find an active license
    • Another symptom can be, starting an inventory from the Management Console, the error message: Input string was not in correct format

     

    Cause

     

    This can be caused by the Inventory Server throwing application event "Unable to find an active license".
    By design the Inventory Server will accept scans but will not process them if it is not able to find an active license.

    2392.JPG

     

    Solution

     

    LANDESK Management Suite 9.6 and later

     

    1. Re-run the core server activation.
    2. Ensure other processes can find the license by running the console and scheduling tasks.
    3. If it still fails to find a license then ensure that reg key HKLM\Software\LANDesk\ManagementSuite OR HKLM\Software\Wow6432Node\LANDesk\ManagementSuite - CoreServer is the server's hostname. The CoreServer flag will be present in one or the other of these key paths. This is how it is set during install by design and must remain that way. For example, if the FQDN of the core is specified, revert it back to the Core's hostname.  Restart LANDesk Inventory Server service after changing the registry key entry.
    4. Clean up the %windir%\temp directory.
    5. Turn on Rolling Log - remember to turn this off when done (Configure Services - Inventory - Advanced). Open up the appropriate ldinv32XXXX.log file from ldmain\log\ which will be 3-8k.
    • Logging will show if the machinename doesn't match the registry key, if they don't match then fix the registry key. (Example of what it should look like: CheckforLicenseEx(); CoreServer: SLCBHILLNINER ; Upper[CoreServer]: SLCBHILLNINER ; LocalName: SLCBHILLNINER ; Upper[LocalName]: SLCBHILLNINER)
    • Check for logging as follows: ReloadDeltaIDs :  Not enough storage is available to process this command  (Exception from HRESULT: 0x80070008) This is an OS level problem interfering with inventory starting up:
      1. Check the following folders, ensure they aren't full of Tens of Thousands of files: c:\windows\temp  c:\users\USERNAME\AppData\Local\Temp
      2. Ensure there are no processes consuming too many handles or memory.
      3. Check for duplicate processes in large number.
      4. Check drive space on core and database.
      5. Most importantly reboot the core server after checking the above.

    You receive the message 'ESXiScan.sig not found' in the AGLSManager.log during an Agentless Scan on an ESXi Server

    $
    0
    0

    Description

    When using agentless scanning to scan an ESXi server, the following line may be seen within the AGLSManager.log:

     

    Sat,  Oct 1985 01:20:00 IsProcessSigned - SIG file 'C:\Program Files (x86)\LANDesk\LDClient\ESXiScan.sig' not found

     

    Resolution

    The message that is logged is purely informational and is not indicative of an issue in scanning an ESXi server. This message occurs due to AGLSManager.exe attempting to authenticate using a .sig file prior to using the embedded signature. Since the process does not rely on the .sig file but rather utilizes an embedded signature this error is logged as a result. The agentless scan should continue as normal.

    Error: CBA 8, no certificates were found on the core server while attempting to run inventory scan

    $
    0
    0

    Description:


    When attempting to perform an Inventory scan or Patch and Compliancescan request from Windows Console the Status of requested actions returns the Results seen below. Although this indicates that CBA is malfunctioning you can see in the image below that the Agent Status icons will often report correctly.

     

    CBA 8, no certificates were found on the core server

     

    Cause:

     

         Most commonly presented on Core servers recently upgraded with an inline methodology. The Core server is using an old certificate that does not exist on the client when requesting connections.

     

    Resolution:

     

      1. Validate that the HTTPS bindings of the Default Web Siteare configured to use the LANDesk Secure Token Serveras seen in the image to the right:
      2. Move all but the latest modified *.cer, *.crt, *.key and *.0 files from LANDesk\Shared Files\Keys  to new folder called Backup Keys

        • Note: The remaining .0 file should match the certificate found on the client

      3. Flush all temporary ASP.NET files like so:

        1. Stop IIS (IISRESET /Stop)

        2. Delete all files and folders from C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files
        3. Start IIS (IISRESET /Start)

      4. Restart all LANDesk and Managed Planet services with the following command in an elevated powershell:

        • Stop-Service -DisplayName LANDesk*,Managed* -Verbose -Force;  Start-Service -DisplayName LANDesk*,Managed* -Verbose

    Viewing all 397 articles
    Browse latest View live


    <script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>