Quantcast
Channel: Ivanti User Community : Document List - Inventory
Viewing all 397 articles
Browse latest View live

How to configure the inventory scanner to scan for files with extensions other than .EXE[1]

$
0
0

Description

By default the LANDesk inventory scanner (ldiscn32.exe) will scan for files with extensions of *.EXE. However, the scanner is capable of scanning for any file type with an extension.

 

(This information applies to the Windows inventory scanner.) Scan for custom information. Scan for .DLL files. Scan for EXE files. Scan for custom files. Change ldappl file to scan for other files.

Resolution

To search for one specific file that you know the name of, follow these steps.

  1. Edit the LDAPPL3.template file on your core server. Open up the file and go to the section that looks like this:

    ; extensions, only the first 40 will be used.
    ScanExtensions=.exe
    ;ScanExtensions=.exe .com .sys .nlm .lan .dll .hlp .lvl .crh .lib .run .jar .dat

    Change the ScanExtensions= line to include the filetype of the file you want to search for. For example, if you want to search for a .pst file, it should look like this:

    ScanExtensions=.exe .pst




  2. Go to the section of the ldappl3.template file that looks like this:
    ;Mode=Unlisted
    ;Mode=All
    Mode=Listed

    Ensure that it is set to Mode=Listed. If it is set to Mode=All, it will search for all files of the extension types you specified above. This can kill performance, so if they know the name of the exact file, leave it on Listed.





  3. Make sure that the folder that the file is in on the device you want to search is not in the Excluded Folders section. If it is, you will never find it on a computer. If the folder is listed, just put a ; in front of the line.




  4. For version 8.8, Open Software License Monitoring and go into Inventory>Files. Right click on To Be Scanned, and click New File. Enter the file information in the screen. If you do not know the exact size, or do not want to specify a size, enter 1, which is the wildcard for size. If you do not know what the Product Name, Vendor, or Version is, you can enter an X, which is the wildcard for any of these character strings.




  5. For version 9.0, Open Reporting/Monitoring and select 'Manage Software List', > Right click on To Be Scanned, and click New File. Enter the file information in the screen. If you do not know the exact size, or do not want to specify a size, enter 1, which is the wildcard for size. If you do not know what the Product Name, Vendor, or Version is, you can enter an X, which is the wildcard for any of these character strings.




  6. Click Make available to clients icon.



  7. Run two full inventory scans with /f /sync switch on the clients. This command should be like follow: "C:\ProgramFiles\LANDesk\LDClient\LDISCN32.EXE"/NTT=[CORE_SERVER]:5007 /S=[CORE_SERVER] /I=HTTP://[CORE_SERVER]/ldlogon/ldappl3.ldz /V /f /sync

    NOTE: replace [CORE_SERVER] with your core server's name.
  8. Once you have scanned machines that have the files, go back in to step 4 or 5, (depending on LDMS version) to where you created the wild card file, but this time find the new files in To Be Dispositioned, and move them to the To Be Scanned folder and run the Make available to clients.

 

You can now write a query to search for the file, something like this would work:

"Computer"."Software"."Package"."File Name" Like "msdia80.dll"

  1. Right-click on inventoryscanner and select 'Schedule'.
  2. Drag all the desired devices from the Network View down to the newly-created Scheduled Task.
  3. Right-click on the new task and select 'Start Now'.

New Inventory Features 2018.1

$
0
0

The attached document details the new changes to Inventory in Ivanti Management Suite.

 

The notable additions include:

  • Windows 10 optional features gathered
    • Installation date of optional features
    • Install status of optional feature
    • Description of optional features
  • Embedded OS names correctly gathered
  • Dedicated thread within the inventory service for mini-scans

Custom Data Registry Scan Not Working: How To Pull Registry Information Using The Manage Software List

$
0
0

Problem:

Custom Data is not being sent in inventory or you would like to start pulling registry information using the Custom Data registry pulls.

 

Cause:

There are a number of different problems that can cause this issue. See solution below for further troubleshooting

 

Solution:

First, let's take a look at the formatting of the the Custom Data to better understand how that data is being saved and how the data is pulled. Most issues with Custom Data come down to a configuration issue. This could be a misspelled path, a trailing space or \ at the end of the path, not selecting "Make Available To Clients" on the Custom Data window, and some other issues that will be explained in this document.

 

First we will breakdown the different sections of the Registry Items. Use this image below and numbers for references

CustomData.png

 

Section 1 - Root Key: This will usually be set to HKLM (HKEY_LOCAL_MACHINE). If you need to pull registry information from HKCU please follow this document: How Can I Get Data from the HKEY_CURRENT_USER (HKCU) registry root?

 

Section 2 - Key: This is the path that follows HKLM. In this example we are pulling the information from the key SOFTWARE\CustomData. This is how that path looks like in Regedit:

 

CustomData.png

 

Once you know where the data is located in Regedit, you can easily copy the path from Regedit by highlighting the data you want to pull, selecting Edit - Copy Key Name, and then entering that path into the Key Value in Custom Data:

 

CustomData.png

 

Copying the path this way helps alleviate any issues caused by misspelling for incorrectly entering the path in Custom Data.

 

Once copied, you need to remove the "HKEY_LOCAL_MACHINE\ " from the copied path since that is already selected in the drop down menu from section one:

CustomData.png

Now that we know the path is valid lets continue on to value.

 

Section 3 - Value: This is the name of the value in Regedit. In this example, the name is TestMe. Make sure when you enter this value it is spelled exactly how it is seen in Regedit and has no trailing spaces when entered:

 

CustomData.png

Now for the last section, Attribute Name.

 

Section 4 - Attribute Name: This is how the data will show in inventory. This path can be named however you would like. We recommend keeping the attribute name Custom Data as the top of the tree just for organizational purposes. You can use a more detailed tree but make sure each section is denoted by a hyphen ( - ) and a space on both sides of the hyphen like so:

 

CustomData.png

 

 

The last step is the publish the list. In the toolbar for the Manage Software List is computer with a green arrow(CustomData3.png) this is how the devices get updated on what registry items to scan for. If you haven't already pressed the button, the window will show "(Unpublished)" like so:

 

CustomData2.PNG

 

Once you are confident that the custom data has been entered correctly and the attribute name has been set up how you would like, press the "Make Available To Clients" button to let the devices know there is an update to the registry list. The registry information will now be scanned on the next inventory scan. You can expedite this process by requesting an inventory scan from a device that has the previously set up registry key to confirm that everything is working. This is how my custom data shows in Inventory:

 

CustomData.png

 

NOTE: If you have followed all of the previous steps and your registry data is still not coming in, please review the following document to make sure the data isn't being blocked: Custom Data is not Entered - Using the Unknown Items Inventory Tool

Database Exception: Error Committing on Table...Increased column size might be necessary (Event ID 4100)

$
0
0

Description:

 

This document describes how to resolve "Database Exception" errors found in a core servers Event Viewer.  Event ID 4100 and sourced from the "Landesk Inventory Server".

 

Database exception: EXAMPLE.scn, LDInv.dll

-2147467259

Data provider or other service returned an E_FAIL status.

 

Error committing on table :   DATA PROVIDER OR OTHER SERVICE RETURNED AN E_FAIL STATUS.

     Increased column size might be necessary, Thread ID:

 

Cause:

 

Inventory scans sent to the core server contain attributes whose values exceed the amount of characters allowed in database schema of the attributes associated column.

 

Resolution:

 

In order to resolve these error we must increase the column size(VARCHAR) for the effected attributes. This must be adjusted in the core servers database schema configuration file (Datamart.xml) otherwise your changes may be overwritten by "CoreDBUtil.exe"

 

Databases hosted in an SQL Cluster will require manually updating the columns (See "Manually Updating the Database Table Schema" below).

 

Updating database schema

 

The database schema is configured in DataMart.xml. After modifying this configuration you can apply the changes to the database using CoreDBUtil.exe . Both "Datamart.xml" and "CoreDBUtil.exe" can be found in the core servers installation directory. (Program Files\LANDesk\ManagementSuite)

 

Modifying the Database Schema Configuration:

 

        1. Open "Datamart.xml" in notepad or your preferred text editor
        2. Modify the "Varchar" value of all the effected columns to "Varchar(MAX)"
            • Effected Tables/Columns

              TablesColumnsModifications
              BiosSettingsCurrentSetting
              BiosSettingsPossibleValues
              EnvironSettingsName
              EnvironSettingsValueString
              PeripheralAdaptersType
              PrinterVersion
              ServicesPath
              ServicesDescription
              VideoDriverName

              Drivername.png

        3. Save Datamart.xml
        4. Apply Configuration changes to the Database

     

    Apply Configuration Changes

        1. Stop the "LANDesk Inventory Server" service.
        2. Navigate to Program Files\LANDesk\ManagementSuite
        3. Launch CoreDBUtil.exeas administrator
        4. Click "Build Components"
        5. Click OK when complete
        6. Restart the "LANDesk Inventory Server" service
        7. Confirm resolution by reprocessing scans

     

     

    If you have ever used your database in SQL replication then CoreDBUtil.exe will not complete successfully. Please contact support for further assistance

     

     

    Manually Updating the Database Table Schema

     

    If a database is hosted in an SQL Cluster or if "CoreDBUtil.exe" fails to commit the changes for any reason you will need to update the effected tables in your LDMS Database manually using SQL Management Studio.

     

        1. Allow saving changes to the DB tables.
          • Navigate to "Tools > Options > Designers" and Uncheck "Prevent saving changes that require table re-creation"
          • 2015-12-08_11-12-08.png2015-12-08_11-14-02.png
        2. To increase this value, run the following in a new SQL query:

     

    alter tableBiosSettingsalter column CurrentSettingnvarchar(max);

    alter tableBiosSettingsalter column PossibleValuesnvarchar(max);

    alter table environsettingsalter column namenvarchar(max);

    alter table environsettingsalter column valuestringnvarchar(max);

    alter tableperipheraladaptersalter columntypenvarchar(max);

    alter tableprinteralter columnversionnvarchar(max);

    alter tableservices alter column path nvarchar(max);

    alter tableservices alter column description nvarchar(max);

    alter tablevideoalter column drivernamenvarchar(max);

     

     

    Changes made to the schema manually must also configured in "Datamart.xml" as described above otherwise they may be overwritten by "CoreDBUtile.exe"

     

    Confirm resolution by reprocessing scans

     

    Confirm Resolution

     

    To validate that the changes were applied as expected you can "re-process" your failed scans

        1. Navigate to Program Files\LANDesk\ManagementSuite\ldscan\ErrorScan Your
        2. Move all files that have been modified within the last 24 hours to Program Files\LANDesk\ManagementSuite\ldscan\ the
        • It is common for scans to become out of sync after recovering from errors. If your scans return to "ErrorScan" you should review the Event Viewer to validate the cause.
        • Out of Sync Scans are moved to "ErrorScan" and log as Warnings in the Event Viewer

     

    If your scans continue to fail with the same errors in event viewer after performing these steps you should review "\Program Files\LANDesk\ManagementSuite\log\CoreDbUtil.exe.log" for errors.

    Discovering VMWare ESXi virtual hosts using Ivanti Endpoint Manager ( EPM ) version 2017.x

    $
    0
    0

    Discovering VMWare ESXi virtual hosts using Ivanti Endpoint Manager ( EPM ) version 2017.x

     

    In order to discover VMWare ESXi hosts using Ivanti Endpoint Manager ( EPM ) version 2017.x you will need to

    1. Enable Agentless scanning -- please see https://help.ivanti.com/ld/help/en_US/LDMS/11.0/Windows/inv-c-agentless-scanner.htm

     

    2. Within the Management Console > Tools > Configuration > Self-electing subnet services > Agentless Scanner Settings -> Enable ESXi scan

     

    screenshot epm 2017.3 su3 agentless scanner settings enable esxi.PNG

     

    3. Within the Management Console > Tools > Configuration > Credential manager > ESXi servers enter credentials for the VMWare ESXi host(s)

     

    screenshot epm 2017.3 su3 credentials manager esxi.PNG

     

     

    Within the Management Console > Tools > Configuration > Self-elected subnet services > Agentless scanner there is a tab "ESX Scan" where you will / should see "Enabled" if everything is configured and working properly

     

    screenshot epm 2017.3 su3 sess agentless scanner.png

     

    Within 24 hours within the Management Console > Network View > Virtual OS Hosts > All virtual OS hosts you will / should see VMWare ESXi host(s)

     

    screenshot epm 2017.3 su3 virtual os hosts.png

    Database Repair Utility (DBRepair.exe download)

    $
    0
    0

    Download


    Download dbrepair06022011.zip for LANDESK 9.0 and 9.5 databases. Compatible with 9.0 supported Core OS's: Windows Server 2003 32 bit and Windows Server 2008 R2x64. This dbrepair includes the new snapshot function as described in UsingSnapshotInDbrepairRev1.pdf.

     

    Download DBRepair9.5 For Landesk9.5

     

    Download 96DBRepair.zip for LANDESK 9.6

     

    Download 9.6SP1dbrepair.zip for LANDESK 9.6 SP1, SP2 & SP3

     

    Download DBRepairLDMS2016.0.zip for LANDESK Management & Security 2016.0

     

    Download DBRepairLDMS2016.3.zip for LANDESK Management & Security 2016.3

     

    Download DBRepairEPM2017.1.zip for Ivanti Endpoint Manager 2017.1

     

    Download DBRepairEPM2017.3.zip for Ivanti Endpoint Manager 2017.3

     

    DISCLAIMER

    USE OF THE DBRepair.EXE APPLICATION SOFTWARE IS SOLELY AT THE USER’S AND/OR COMPANY’S OWN RISK.  THIS SOFTWARE APPLICATION IS AVAILABLE “AS IS,” AND LANDESK SPECIFICALLY DISCLAIMS ALL WARRANTIES INCLUDING ANY IMPLIED WARRANTIES.

     

    For LDMS 9 it should only need to be run initially after upgrading because 9.0 doesn't allow client scanner corruption to enter the database unless configured otherwise. See DOC-7456 for more information on how this is accomplished and how to allow custom unmodeled data into the database. In some circumstances it may be necessary to allow unknown items, in those cases using snapshot and a scheduled dbrepair is useful. This is also described in the UsingSnapshotInDbrepair pdf.

     

    Download the appropriate attachment and extract dbrepair.exe to the ManagementSuite directory on the core server. The path to the ManagementSuite directory is by default C:\Program Files\LANDesk\ManagementSuite.

     

    Instructions for Use

    1. Stop the inventory server service on the core server before running DBRepair.

     

    2. Verify that DBRepair.exe is in the ManagementSuite directory.

     

    3. Double click DBRepair.exe to run it.

     

    Note: Once DBRepair.exe opens, anything that appears in the tree is unmodeleddata. This includes either custom data that you have deliberately added (via a custom data form or by modifying ldappl3.ini) or data corruption.

     

    4. Delete database corruption if if is present as it can cause various issues.

     

    Note: If you have no custom data that you want to keep, then click on Computer at the top of the window and click the 'clean' button. If you have some custom data that you want to keep, click on the data you do  *NOT* want to keep, and click the 'clean' button.  You will need to remove (clean) each unwanted item individually.

     

    5. Close DBrepair.exe.

     

    6. Restart the Inventory Server service.

    Example

    If an item in the DBRepair.exe tree list appears to be a valid

    part of the inventory tree, it's not. Keep in mind that everything

    listed is unmodeleddata, so it can be safely removed. You only need to

    keep the items that you have added specifically as Custom Data.

     

    DBRepair.exe that looks like this:

     

    Computer

    -Custom Data

    -Motherboard

    -Loftwa6re

     

    Normally there is no such value as Loftwa6re. Clearly, the Loftwa6re item represents database corruption. However, even though Motherboard looks valid, by virtue of it being in this list, it is not valid and it should be removed.

    Duplicate Device IDs overwriting Inventory records in Endpoint Manager

    $
    0
    0

    This article addresses how to resolve a specific issue with inventory records being overwritten due to duplicate device IDs in your environment caused by a misconfigured image or an imaging process that was done without correctly following your internal imaging process. Most likely the LANDesk agent was added to the image or was installed to a machine out of order during a new build.

     

    How to determine if you are having a duplicate device ID issue resulting from the imaging process already including a LANDesk agent

     

    Unfortunately, some of this is going to be you, your admin, or other console users saying that devices are just missing or not displaying in the network view. Noticing this issue may be occurring requires more detective work than a distinct and clear error.

    If you are seeing weird behaviors with a batch of similar machines disappearing/reappearing in Inventory, review your Core server ldscan folder

     

    [COREPATH]\Program Files\LANDesk\ManagementSuite\ldscan\ErrorScan

     

    When opening the various .scn files (.scn file extension is the OOTB default for EPM, your environment may be configured differently), you will be looking for the following information:

    Device ID ={***************************************}

    Device Name =***********

    Network - TCPIP - Host Name =************.domain

     

    If you see multiple files with matching device IDs but different device name/hostname then you probably have an issue with how the machine was imaged

     

    The reason these items are showing up in ErrorScan is because the core doesn't recognize the information even though it thinks it already has a matching device ID. Prove this by looking at the LANDesk Inventory Server warnings in the Application section of Event Viewer on the core

     

    Run eventvwr.msc

    Expand Windows Logs

    Click Application

    You can filter or sort by Source (this may take a few minutes)

     

     

    How to resolve duplicate device IDs overwriting inventory records caused by an image with the LANDesk agent

     

    NOTE: As a user with Administrative privileges on the client device

     

    1. STOP all LANDESK related services

     

    2. Delete the following Registry Keys for 32bit clients:

              HKLM\SOFTWARE\Intel\LANDesk\Common Api\UniqueID

              HKLM\SOFTWARE\LANDesk\Common Api\UniqueID

              HKLM\SOFTWARE\LANDesk\Inventory\LogonHistory\Logons

              HKLM\SOFTWARE\LANDesk\ManagementSuite\WinClient\SoftwareMonitoring\MonitorLog contents

     

              Delete the following Registry Keys for 64 bit clients:

              HKLM\SOFTWARE\Wow6432Node\Intel\LANDesk\Common Api\UniqueID

              HKLM\SOFTWARE\Wow6432Node\LANDesk\Common Api\UniqueID

              HKLM\SOFTWARE\Wow6432Node\LANDesk\Inventory\LogonHistory\Logons

              HKLM\SOFTWARE\Wow6432Node\LANDesk\ManagementSuite\WinClient\SoftwareMonitoring\MonitorLog contents

     

    3. C:\ProgramData\LANDesk (delete the entire directory and subdirectories, this is a hidden directory)

     

    4. Run Security Scan - look for this line "Sending current settings information to core. Failed: Core has no inventory data for this computer" (this is important to make the inventory scan work, otherwise it will fail and you will see the entry in Event Viewer)

        Without this step, I was encountering an error stating "LDISCN32: The inventory server [CORE] did not respond"

     

    5. Open command prompt and run C:\"Program Files (x86)"\LANDesk\LDClient\LDISCN32.EXE /V /F /SYNC

    You do not have to wait for Security Scan to finish, it will probably fail anyways until it can properly sync up with the right inventory information

    Inventory Flow-Chart

    $
    0
    0

    Description:

     

    This Document contains an inventory process flowchart from Agent to Core to Database.

     


    How to scan for custom registry information using LANDesk

    $
    0
    0

    Description

     

    Need to configure LANDesk to scan for a new registry value and include that value as part of the LANDesk Client device's inventory.

    Resolution

    LDMS 9.0 and older

     

    1.     On the core server, modify the following file with a text editor: (ie. notepad)

     

         C:\Program Files\LANDesk\ManagementSuite\ldlogon\ldappl3.template

     

                        (samples attached)


    2.     Scroll down to the section called Registry Info

    3.     Add a new line following this syntax:

     

         KEY='VALUE PATH', 'VALUE', 'INVENTORY BRANCH'

     

    where 'VALUE PATH' is the path where the registry value is located (i.e. HKLM\Software); 'VALUE' is the name of the value that you would like LANDesk to scan (i.e. MyValue); 'INVENTORY BRANCH' is the branch in the LANDesk inventory tree where this new value needs to be saved (i.e. CUSTOM DATA.)

     

    4.     Save the LDAPPL3.TEMPLATEfile and close the text editor.

    5.     Open the LANDesk Management Suite Console.

    6.     Go to Tools | Reporting/Monitoring | Manage Software List

    7.     Click on 'Make Available to Clients'

    8.     Clients will start sending the custom registry information along with their next full inventory scan.

    9.     Go to Configure | Services | Inventory and select the 'Unknown Items' Button. Here you need to finfd the item you are scanning for and allow it.

    10.   Run the full inventory again and the item will appear in the inventory of the device.

     

    The registry value being scanned must have a value. For example, a zero-length binary value with no value will not scan.

     

    This topic is also covered in the User's Guide's page number 454. Attached are a sample LdAppl3.template file and a word document with more details.

     

    Note: In order to be able to read this registry value, appropriate security settings must be in place.

     

     

    LDMS 9.5 and newer

     

    With the 9.5 version you have two choices, follow the same steps as for 9.0 or use the Core Console.

     

    To access the GUI in the console as below, go to Reporting / Monitoring > Manage Software List > Right click on Registry Items > Add

     

    1.PNG

     

    Once you have configured your inventory scanner using the Core Console you will then want to select the Make Available To Clients button (ss (2014-02-04 at 10.24.39).png) in the Manage Software List Menu and this will distrubute your changes to your devices. Then you can submit inventory on various machines to test your new changes.

     

     

     

    Create Reports on new Custom Data

    The following steps will help you create a report to view the newly created custom registry key.

     

    1.     Go to Tools> Reporting/Monitoring

    2.     Right click on My Reports and select New Custom Report

    3.     Give the report a name and description

    4.     Click the New button under the Query section

    5.     Select the Custom Data inventory value and insert it with an Exists function

    6.     Select the Select Columns button

    7.     Add the Custom Data value into the viewable column information to see the value of the key

    8.     Click Save and OK and then run the report.

    How to Troubleshoot Inventory

    $
    0
    0

    This article details the troubleshooting steps for Inventory

     


     

    General Information

     

    Inventory Installation

    Inventory is installed as a result of the agent installation and includes and/or uses the following files:

     

    Installation files

    • LDIScn32.exe
    • ldapwhoami.exe
    • AMTScanner.exe
    • ClientRollingLog.dll
    • ClientRollingLog.log4net
    • elogapi.dll
    • GatherProducts.exe
    • GPMM.exe
    • HPScanner.exe
    • Lclxclnt.dll
    • ldaccount.dll
    • ldapinfo.dll
    • ldappl3.ini
    • ldapwhoami.exe
    • ldavhlpr.dll
    • LDISCN32.exe
    • LDServerRoles.exe
    • LDMBBApi.dll
    • LDProfile.exe
    • libhttp.dll
    • loc32vc0.dll
    • LocalPrtInfo.exe
    • log4net.dll
    • ltapi.dll
    • processrunner.dll
    • psapi.dll
    • ServerScanner.exe
    • ThinClientScanner.exe
    • vulscan.dll
    • WMIRulesScan.exe

    Possible Installation issues

     

    If the following option is checked within the agent configuration when the agent is deployed, you could possibly see a delay in the installation completing and the first inventory scan being sent:

     

    agntconfig.png

     

    Inventory Service Settings

    Settings for the inventory service can be found on the core server by opening the 'Ivanti Configure Services' (SvcCfg.exe) application from the Start Menu, from the \Program Files\LANDesk\ManagementSuite\ directory, or by navigating to Configure > Services > Inventory.

     

    invserv.png

     

    For additional information on these settings as well as the Advanced Settings please click here.

     

    Inventory Client Settings

    Client inventory settings can be found within the agent configuration or agent settings options within the 'Configuration' menu in EPM.

     

    agntinv.png

     

    For additional information on the client settings please click here.

     

    Tasks

    Inventory is run based upon the criteria inventory settings criteria within the agent configuration. You can view the scheduler tasks through the local scheduler on the device by following the documentation below:

    How To: View Local Scheduler Tasks on a Client

     

    When running a task from the core server you may encounter various Status messages as the scan progresses,

     

    Directories

     

    LocationDescription
    \Program Files (x86)\LANDesk\LDClient\DataClient - Inventory Data Files
    \Program Files (x86)\LANDesk\LDClient\Client - Inventory installation files/exes
    \Program Files\LANDesk\ManagementSuite\ldlogonServer - Inventory Data Files

     

     

    Registry Keys

     

    Key nameDescription
    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Intel\LANDesk\LDWMCore Server Communication

    HKEY_LOCAL_MACHINE\SOFTWARE\LANDesk\Common Api

    Device ID (x32)
    HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\Common ApiDevice ID (x32)
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LANDesk\Common ApiDevice ID (x64)
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Intel\LANDesk\Common ApiDevice ID (x64)

     

    Database Tables and Inventory Information

    Quick SQL Script to find all of your Inventory Attributes in your LANDesk Database

    How to determine the table size of a Microsoft SQL Server database

    How to find out Database information for Inventory Items by the Object or Attribute name

     

    Gathering logging information for Ivanti support
    Inventory Scanner Switches

    How to generate an inventory output file from client machine for LANDESK support to do further troubleshooting?

    How To: Enable XTrace Diagnostic Logging for the LANDESK Core and Clients

     

    Standard Log Files

    Windows Application Event Viewer - Most LANDesk Inventory Server errors or exceptions are logged to the Application Log

    Gatherproducts.log - \Program Files (x86)\LANDesk\LDClient\Data

    ldiscn32.log - \ProgramData\LANDesk\Log

    LDInv32.exe.log - \Program Files\LANDesk\ManagementSuite\log\

     

    Trace Log Files

    ldapwhoamixtrace logging - ldapwhoami.log - \ProgramData\LANDesk\Log

    Note: This log file will only be created if xtrace in enabled.

     

    Debug Logging

    Debug Scanner log - ldiscn32.log - \Program Files (x86)\LANDesk\LDClient\Data
    Inventory Server Service log - ldinv32.exexxxxx_xxxxx.log - \Program Files\LANDesk\ManagementSuite\log\LDInv32.exexxxxx_xxxxx.log

    Note: This is the rolling log and must be manually enabled in Configure | Services | Inventory | Advanced Settings | Use Rolling Log = 1 on the core server.

     

    Common Issues and Troubleshooting

    10 simple checks to Troubleshoot Inventory - Devices not updating, Duplicated or Missing Scans

    Database Exception: Error Committing on Table...Increased column size might be necessary (Event ID 4100)

    Custom Data Registry Scan Not Working: How To Pull Registry Information Using The Manage Software List

    Memory leak in Microsoft ADO code on Windows 2008 64-bit affecting ldinv32 for LDMS 9.

    $
    0
    0

    Applies to

    LDMS 9.0

    Duplicates on Windows Server 2008 R2 64bit

    Has not duplicated on Windows Server 2003 32bit however MS will still provide a fix for this OS if a user is affected.


    Description

    In working with Microsoft we have found there is a memory leak in the ADO code which directly affects the Inventory Server on the Windows 2008 R2 64-bit OS Core.

     

    Microsoft has now released the hot patch for general use.

    Microsoft's page detects the users OS when visiting the site, for optimal results navigate to the download page from the core or a machine of simlar OS.

    http://support.microsoft.com/kb/978155

    After reviewing the KB notes click the link at the top of the page called "View  and request hotfix downloads".

     

    For any questions, Microsoft can be contacted by calling 1-800-936-3100 or visit http://support.microsoft.com

    Error: Could not allocate space for object 'objectname' in database 'databasename' because the 'PRIMARY' filegroup is full.

    $
    0
    0

    Description: In the event viewer the following error is recorded under the application log -

     

    Source: LANDesk Inventory Server Service

    Type: Error

    Event ID: 4100

    Description:

    Database exception: SCA759.SCN, LDInv.dll

    -2147217900

    Could not allocate space for object 'OSUpdates' in database 'lddb' because the 'PRIMARY' filegroup is full.

     

    Commit, Thread ID: 5492.

     

    Cause: The 2 major causes of this error are either the MSDE or SQL Express database has reached their respective 2GB and 5GB limit or the partition where the database and logfies are stored is full.

    Note: MSDE database size limit is 2GB. SQL Express database size limit is 5GB.

     

    Resolution:

    1) If you are using MSDE and have reached the 2GB limit you can download and install SQL Express for free from Microsoft to expand the limit to 5GB. This would not be an upgrade of the MSDE instance but an installation of an instance of SQL Express then a backup and restore of the database to the new instance.

     

    2) If you are using SQL Express and have reached the 5GB limit you will need to move to a licensed SQL 2000 or SQL 2005 instance. You can install SQL 2000 or SQL 2005 on the core server then backup and restore the LDMS database to it. If you already have a SQL server you can use it but please be sure that there are adaquate resources on the server to support the LANDesk database (1MB of RAM per node for example but a full list can be found in the LDMS installation guide).

     

    3) If the partition housing the database is full move the database to a larger partition. If the database is 30GB or larger you may want to consult with LANDesk Support to identify if there are better practices to avoid this much database usage.

     

    How to install Microsoft SQL Management Studio Express

    http://community.landesk.com/support/docs/DOC-5764

    Article on moving the LDMS database (backup and restore of the SQL database).

    http://community.landesk.com/support/docs/DOC-2177

    How to troubleshoot Database Corruption

    $
    0
    0

    Applies to

    LDMS 8.7 and 8.8

    This document assumes the user has intermediate level SQL Management Studio & LANDesk Management Suite skills.

    The corruption referred to in this article is invalid objects and characters which are found in Inventory, the query editor and in dbrepair.exe outside of the Custom Data section.

    LANDesk and the article contributes are not responsible for any data lost when running dbrepair.exe. As always backup your database before making any data modifications.

     

    Note: There is a known issue with the LDMS 8.8 SP2 inventory scanner where a carriage return characterset in a registry key will be interpreted by ldiscn32 and it will put a carriage return in the scan file; creating what appears to be corruption. While this isnt overly common, it has been seen in a few environments. Upgrade the Core and the agents to 8.8 SP3, or contact support for hotfix INV-2415688.2-2 (8.8 post SP2 patch). This patch must also be applied to agents, or the agent must be redeployed as the fix is within the Inventory Scanner.

     

    Overview

    Corruption has two primary sources: Client and Core.

    Client side corruption can take place when there is corruption during the inventory scan process and some invalid characters are sent up to the core. Because clients send delta's and also sync their records, then the unmodeled records will often be removed on the next scan. However the attributes are left in the meta tables (the core considers this data unmodeled or custom data and not corruption).

    Core side corruption can occur when queries are run or evaluated that contain invalid or corrupt attributes. If a query contains corrupt attributes, then the corruption will be re-added every time this query is run, or evaluated.

     

    It can be difficult to tell which of the two sources the corruption is coming from without some investigation. However a good starting point is if the exact same corruption is occurring regularly, but querying for computers with these attributes returns no computers then it is more likely Core side. (LDMS Query: "computer.corruption - exists")

    Client Troubleshooting

    If there are suspect characters showing up in the inventory tree after processing inventory scans, it is more effective to troubleshoot the problem at the source (computer) than running dbrepair constantly. In some cases computers will send the same values again repopulating the unmodeled data and or meta tables with bad data.

     

    Example:

    bill.JPG

     

    From the query editor expand the corrupt tree, select an attribute and choose exists, Insert and save the query. Normally this will give the results needed however sometimes a precise database query is needed.

     

    Here is a query that will find out the computer_idn(s) for the offending machines. This query assumes that a record has been entered into unmodeled data. There are two configurable options in the query. Oracle users: see attachment oraquery.txt, remember to replace the value in the last line 'Profile Size' with the suspect object found in the query window.

     

    select distinct a.computer_idn

    from computer as a

    Inner Join unmodeleddata as b

    on a.computer_idn=b.computer_idn

    Inner Join metaobjattrrelations as c

    on b.metaobjattrrelations_idn=c.metaobjattrrelations_idn

    Inner Join metaobjrelations as d

    on c.metaobjrelations_idn=d.metaobjrelations_idn

    Inner Join metaobjects as e

    on d.metaobjects_idn=e.metaobjects_idn

    where e.ENU = ')Bill'

     

    1) There are different options available where ENU is used. "OBJECTNAME"," DEF",  or the appropriate language such as "ENU"

    The above query uses the language column because that contains the value which will appear in the console. If the query isn't returning expected results then try OBJECTNAME or DEF. This is an unlikely scenario as generally the value will be the same for all three columns.

     

    2) Replace )Bill with the corruption found in the query window.

     

    The query will return the computer_idn(s) from unmodeled data that have a relationship to the object in question. If no rows are returned from a properly formatted query then it means there is no entry made in the unmodeled data table for the computer and the metaobject(object that appears in the query window). If this happens then troubleshooting by client is less feasible. Either the corruption is from the core, or the client has since sent a delta deleting the corruption.

     

    Once computer IDN's are returned a user can run the following SQL query to get more info about the machine. Replace 1 with the idn(s) returned in the query.

    select * from computer where computer_idn = 1

     

    The computer_idn is also an inventory item and can be queried off of in LDMS.

    computerid.JPG

     

    Once a list of computers is compiled then there are a few main causes to corruption.

     

    • Old Inventory scanner - Schedule an agent deployment to the client.
    • Bad WMI or information returned by WMI - attempt a repair of the WMI.
    • Machine software or driver returning the corruption is out of date - try the same software/driver on a different machine or even a reinstall.
    • Incorrectly formatted registry key - reinstall the application/driver in question.
    • A carriage return in the registry as described at the beginning of this article - upgrade to 8.8 SP3.

     

    In some cases an update is needed to the inventory scanner from LANDesk so it can scan certain values. This is generally only the case when the scanner always returns incorrect data on a certain field across multiple machines.


    Core Troubleshooting

    Troubleshooting on the core is recommended to be done during a maintenance window or low usage time where only one console(Win or Web consoles) is being used. This is because dbrepair.exe (attached) will be used repeatedly to clean data and many queries will be run in an attempt to reveal the source of corruption. If others are using consoles or running queries, the tests will not be accurate.

     

    1) Close all consoles and Create a backup of the database.

    2) Open dbrepair.exe -attached (from the ManagementSuite folder on the core).

    3) Click on and clean the child folders of computer except custom data. Also, do not click on computer and clean, this will remove all custom data.

    Once done the window should look like so:

    CleanedMeta1.JPG

    4) Next open the console and begin running queries. In order to run all of the queries, log in as a LANDesk administrator and run through the user queries.

    5) Periodically open dbrepair.exe to determine if the corruption has returned.

    6) Run through every (user) and (public) query in the console, also restart the scheduler service (causes target evaluation) and finally run all of the queries under the Users tool for scopes.

    7) If any of those queries had corrupt attributes then the corruption will return in dbrepair like so:

    NewCorruption.JPG

    8) Now it is just a matter of finding the query(s) responsible by opeing them and viewing them or process of elimination.

    9) Remove and rebuild any queries causing corruption including Scope queries.

     

    Additional notes

    If it is still unknown where the source of corruption is but it still keeps coming back then do the following.

    1) Back up the database or create a copy.

    2) Restore it for lab use. Use dbrepair.exe and clean out everything except custom data.

    3) Connect a lab core server to the database copy/backup. This lab core should not receive any client traffic.

    4) Do not import any scans or send any new traffic to this core. Simply attach it to the database leave it in a running state, and only do console actions which do not request any type of scans from clients.

    5) If the corruption is client side, then it will not appear in this lab instance. If it is core side, then most likely it will as long as the function that creates it has been run. There are other Core functions that may generate metadata outside of the inventory process which have not been included in the scope of this document.

    Using Software License Monitoring on a Roll-up Core

    $
    0
    0

    Overview

     

    Applies to LANDesk Management Suite 8.8

     

    In enterprise or multi-core environments a Roll-up Core is a useful tool to gather information and report on a large scale.

     

    Some users may find it helpful to gather compliance and manage licenses without being limited to one core at a time.

     

    Note: This document is designed to give a general overview of how Software License Monitoring works on a Roll-up Core. It assumes the user is already familiar with configuring Software License Monitoring on LANDesk Management Suite Cores. It also assumes the rollup database is populated by core data by one or more successful roll-ups.

     

     

    Obstacles

     

     

    Products, compliance groups, and licenses are not standardized across the cores, not all data is rolled up.

     

    Examples:

    Core 1 has a product definition called Microsoft Office. The files in this definition are Office Standard files. Core 2 also has a product definition called Microsoft Office. The files in Core 2’s product are Office Enterprise files. There would only be a single Microsoft Office product allowed in the Roll-up database because the Product Name must be unique. Because product standardization and uniqueness cannot be guarenteed between child cores, then these product definitions are not rolled up.

    Compliance groups are also not standardized as well as the associated licenses,  so that data also is not rolled up.

     

    Caveats

     

    Because the product, compliance group, and license configurations are not rolled up, then configuring SLM must be done from the ground up. This is not as difficult as it may seem, however having the correct expectation up front gives better perspective to the project.
    Automatically discovered products are also not rolled up. All products must be explicitly configured.

    Adding SLM Products in the Roll-up Core Web Console

     

    Open the Web Console on the Roll-up Core.
    In the Software Licenses tool create new product(s) under the All products section.
    Give the product a name and only check the match all files if a machine must have all files in order to have this product.

     

    Picture1.png

     

    Expand the added product under All products, click the files.
    Click the Add button above.
    Use the filter box to narrow down the files to include in the product.
    Left click on the one(s) to be included. Hold CTRL for multiple select.
    Click OK at the bottom when finished.

    Picture2.png

     

    The result is shown below. The product can be refined by adding or deleting more files using the add or delete buttons.

    Picture3.png

     

    Compliance Groups

     

    Click on Compliance and then click New to create a new Compliance Group.
    Give the group a name and click OK.

    Picture4.png

     

    Expand Compliance and select the newly created Compliance Group.
    Click the New button to add products.
    Select the appropriate existing product from the dropdown. Click OK when finished.

    Picture5.png

     

    Managing Licenses

     

    Expand the Product under the compliance menu.
    Select License and choose New to add licenses for the product.
    Enter the license information and click OK.
    Once Added they can be edited as well.

    Picture6.png

     

    Compliance Report

     

    Click Compliance Report to view the Overall Compliance. This will return data on multiple groups.

    Picture7.png

     

    Group Compliance

     

    Under the Reports Section, expand Software Licensing. Double Click on Group Compliance. Double Click the desired group. This report will return more detailed information for the selected group.

    Picture8.png

     

    Usage Report

     

    Under the Reports Section, expand Software Licensing.
    Double Click on Usage report. Select the appropriate core name. This will provide execution information by Computer.

    Picture9.png

    How to get the overwrite policy of the system event logs in the LANDesk inventory

    $
    0
    0

    Currently no information about the event logs of the devices are reported in the inventory of the device.

    Running the simple script attached on the devices you can retreive the overwrite policy of the system event logs and store them in the registy.

    Then modifying the LDAPPL3.TEMPLATE on the core you can tell the Inventory Scanner to retreive these values and add them as custom values to the Inventory.

    The script can be easly re-adapted to retreive other properties of the event log files.

    It is possible to find more information about the event logs properties at this url on the Microsoft site: http://www.microsoft.com/technet/scriptcenter/guide/sas_log_iwbi.mspx?mfr=true

     

    How to use the script

     

    1. Modify the LDAPPL3.TEMPLATE that is in \\<coreserver>\ldlogon and add in the [Registry Info] section these lines:

      ;Event Log parameters
      KEY=HKLM,Software\EventsLogs,Application Policy,Custom Data - OS - Event Logs - Application Log Policy
      KEY=HKLM,Software\EventsLogs,Application Size,Custom Data - OS - Event Logs - Application Log Size

      KEY=HKLM,Software\EventsLogs,Security Policy,Custom Data - OS - Event Logs - Security Log Policy
      KEY=HKLM,Software\EventsLogs,Security Size,Custom Data - OS - Event Logs - Security Log Size

      KEY=HKLM,Software\EventsLogs,System Policy,Custom Data - OS - Event Logs - System Log Policy
      KEY=HKLM,Software\EventsLogs,System Size,Custom Data - OS - Event Logs - System Log Size

    2. Press the button "Make available to Clients" in the Software Licese Monitoring window.
    3. Run periodically the script EventLogInfo.vbs on the devices
    4. The event logs parameters will be available in the inventory under the Custom Data - OS - Event Logs node.

     

    Click on the link below to download the script

    http://community.landesk.com/support/servlet/JiveServlet/download/5697-2-20921/EventLogInfo.vbs


    How to limit or prevent software scanning on specific devices or drives.

    $
    0
    0

    How to limit or prevent software scanning on specific devices or drives.

     

    Description

    This article is for LANDesk Administrators that have file servers or other devices where running a full software Inventory scan is utilizing resources and is not necessary. Where a LANDesk agent is used to manage the device but scanning all the software on the entire machine or certain drives is not desired.

     

     

    Resolution 1

    Limit the software scanning by drive or directory.

     

    Doing this will have the following affect:
    The Inventory Scanner will still gather Application Suites and OS Updates (from the uninstall key) and the associated installed packages and their usage data (from the registry). Removing items from the [Applications] section of the ldappl3.ini does not have an effect on the end result of the scan when drives are already excluded.
    Making this change decreases the inventory scan time but does not completely cut out looking at apps and packages.

     

    Excluding Drives or Directories in the LDAPPL3.INI

    1) To exclude a drive or directory from inventory scan, modify the LDAPPL3.INI on the affected client.

    C:\Program Files\LANDesk\LDClient\Data\LDAPPL3.INI

    2) Page down a couple of times to the [Exclude Folders] section. To exclude drive C from being software scanned add the following  ExcludeDir=c:\ as the first line in the section.

    3) Or to exclude specific directorys add a line by the following format into the same section ExcludeDir=\LDCLIENT\SDMCACHE\.

    ldappl3b.JPG

    9.6 SP1 Update: This can be done in the Managed Software List as shown below:

    Exclude.png

     

     

    Modifying the local scheduler tasks and shortcuts

    Because the ldappl3.ini is customized on the client, the inventory scanner switches and tasks will need to be modified so it does not download the ldappl3.ini from the core or peers.

    1) From a command prompt browse to Drive:\Program Files\LANDesk\LDClient.

    2) Once there run the commandlocalsch.exe /tasks |more to find the different tasks that call ldiscn32.exe. Note the handle for the tasks that ldiscn32.exe is called in.

    cmd1.JPG

    3) Next delete those local scheduler tasks with the following command: localsch.exe /del /taskid=777            (replace 777 with the appropriate task handle(s))

    4) Finally add the modified tasks without the /I= switch using the following sample command: LOCALSCH.EXE /taskid=777 /exe="c:\program files\landesk\LDCLIENT\LDIScn32.EXE" /cmd="/NTT=CoreFQDN:5007 /S=CoreFQDN /NOUI" /freq=86400

    For more help with local scheduler see Localsch.exe command line parameters

    5) After all of the local scheduler tasks have been modified to remove the /I= command line, the same needs to be done for any start menu shortcuts to the Inventory scanner.

     

    Note: The client will now scan according to the changes made above, however if a new ldappl3.ini is copied down, then the changes may be lost. This can happen due to an agent install or running an inventory scan with the /I= switch.

     

    --------------------------------------------------------------------------------------------------------------------

    Resolution 2

    Removing software scan all together.


    The inventory scanner has a /F- switch that can be used. When this switch is used then the inventory scanner does not do any software scan. It will not pull Application Suites, OS Updates, usage, or packages associated with Application Suites.

     

    If software scanning is not desired however information from the uninstall key is needed then use the /RSS switch after the /F-. This will return the application suites.

     

    The implimentation does not require modification of the ldappl3.ini file.

    1) Instead only modify the localscheduler tasks and shortcuts following instructions above but using a command line based on this sample: LOCALSCH.EXE /taskid=777 /exe="c:\program files\landesk\LDCLIENT\LDIScn32.EXE" /cmd="/NTT=CoreFQDN:5007 /S=CoreFQDN /F- /NOUI" /freq=86400

    2) After changing the local scheduler tasks, add the /F- to the inventory scanner shortcut.

     

    Note: The client will now scan according to the changes made, however an agent re-install would overwrite these changes.

    What information Application Suites is designed to return.

    $
    0
    0

    Update: As of 9.0 SP2 the inventory object is called "Add or Remove Programs" instead of Application Suites. The scanner uses the same logic and criteria as listed below to gather that data.

     

    What information Application Suites is designed to return.

     

    Applies to LDMS 8.8 SP2 or later.

     

    The design is to show suites of applications that are installed on a device. Application Suites returns information from the uninstall key in the registry, similar to Add Remove Programs however there is different criteria for each.

    Sample path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

     

    Criteria for the inventory scanner to capture this information from the Uninstall key.

     

    1)The LANDesk inventory process requires that an Uninstall Key have a DisplayName string in order to capture it.*

    2) The Uninstall record will not be returned to Application Suites if the Keyname is in the format of KBxxxxxx (even if it has a DisplayName string). Those Uninstall records are instead returned to the "Computer - OS - Updates - Update" section created just for these updates.*

    RegDisplay1.JPG

     

    3) If there are two registry keys in the uninstall key that contain the same value for "DisplayName" where one key is a GUID key and the other is a named key then LANDesk will capture the data from the GUID key.*

    RegDisplay2.JPG

    Criteria difference between LDMS Application Suites and Microsoft Add Remove Programs

     

    Microsoft additionaly filters what Add Remove Programs will display from the Uninstall key. Add Remove Programs will not display programs that contain a "SystemCompnent" DWORD with the value of 1.

    RegDisplay3.JPG

     

    This translates into having more entries in the LANDesk Application Suites than in Add Remove Programs. This additional information captured by LANDesk can be used to gather all the Suites together. Thus giving additional data to the LANDesk user all in one location which can be used for queries etc.

     

    Example of an Application Suite that is not displayed in Add Remove Programs due to having a SystemComponent DWORD with a value of 1:

    AppSuite1.JPG

    How to Manually Purge the Inventory Attribute Change History

    $
    0
    0

    Description

    When the Inventory History feature is used (Configure > Inventory History) every change of the monitored attributes is logged in the History table of the LANDesk database.

     

    Resolution

    To purge partially or completely the collected data it is possible to use the following SQL statement. The sample SQL statement will delete from history for records older than 90 days but can be altered to fit the specific needs of your environment.

     

    Note: Prior to running SQL statements or operations that will alter the Landesk database we highly recommend creating a backup of the database.

     

    DELETE FROM History WHERE ChangeDate <= GetDate()-90

    Create a query to show computers that haven't scanned in for x days

    $
    0
    0

    You can use some sql statements when creating a query to make them more dynamic.  One example is to create a query showing machines that haven't scanned in for more than x days.

     

    So choose Computer item on the left side and Last Updated by Inventory server on the right side.

    Next choose the < in the middle field.  Finally, type the following into the field that lets you specify a value:    GetDate()-30

    Add this to the query and it should look like:

    "Computer"."Last Updated by Inventory Server" &lt;"GetDate()-30"

     

    Note: For Oracle databases, replace GetDate() with SYSDATE.

     

    Save the query and each time that you run it you will computers that haven't scanned in for more than 30 days.

     

    NOTE: Here is an article with screenshots that will also show how to create a report from the data and send the report in an e-mail:

    http://community.landesk.com/support/docs/DOC-5788

    When running ldiscn32 on a client get an error popup "Unable to launch custom inventory application" appname.exe

    $
    0
    0

    Description

    When running ldiscn32.exe (inventory scan) on a client get an error popup "Unable to launch custom inventory application" appname.exe

    Where appname is the name of a custom application being called.

     

    Cause

    The custom application being called by ldsnhlp.ini does not exist or is corrupt on the client.

     

    Resolution

    The file that launches custom inventory applications is ldsnhlp.ini on the core it is found in ldlogon, on the client it is found in ldlclient.

    Modify the ldsnhlp.ini so it is either not calling an unusable application or so it calls the correct custom application. If the modifications are done on the core, then a new agent needs to be built and or deployed.

    Viewing all 397 articles
    Browse latest View live


    <script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>