IT Management Suite

 View Only
  • 1.  Filters: "New Computers" and "Installed Agent"

    Posted Jun 07, 2022 11:15 AM
    Hello,

    We are having many issues with the two filters under Favorites folder (Filters View). Would be possible to remove those filters from such folder and this way, avoid that users could use those filters to be added to other filters? Would be possible to reduce the righst / scope of those filters to administrators? Or at least to hide the filters to everyone?



    Thanks a lot in advance.


  • 2.  RE: Filters: "New Computers" and "Installed Agent"

    Posted Jun 13, 2022 06:47 AM
    Hello,

    Any clue here? Any way to hide these filters? or at least any way to rename them?

    It is causing us a lot of headaches, because the local country admins, sometimes are using them adding any of those filters to one local filter that install/uninstall software, and they are not aware that using those filters all computers under the same NS are included in the filter, even when they are not seeing them because are out of their scope, i.e, they cannot see them.

    It is very critical for us. Thanks.


  • 3.  RE: Filters: "New Computers" and "Installed Agent"

    Posted Jun 14, 2022 02:00 AM
    Hi Pablo.
    You need to change the attributes value on the filters that you want to hide.

    Forum Thread

    The "Attribues" is available in the item table in the DB.  (update item set Attribute ='[Value]' where guid = '[Filterguid]'), Before updating/changing the attributes it might be a good idea to note what the value where before changing it. 

    Normal,0
    Hidden,1
    NoModify,2
    Hidden, NoModify,3
    NoReplication,4
    Hidden, NoReplication,5
    NoModify, NoReplication,6
    Hidden, NoModify, NoReplication,7
    NoDelete,16
    Hidden, NoDelete,17
    NoModify, NoDelete,18
    Hidden, NoModify, NoDelete,19
    NoReplication, NoDelete,20
    Hidden, NoReplication, NoDelete,21
    NoModify, NoReplication, NoDelete,22
    Hidden, NoModify, NoReplication, NoDelete,23
    NoModify, RunTimeLocalized, NoDelete,26
    Hidden, NoModify, RunTimeLocalized, NoDelete,27
    NoReplication, RunTimeLocalized, NoDelete,28
    NoModify, NoReplication, RunTimeLocalized, NoDelete,30
    NoClone,32
    Hidden, NoClone,33
    NoModify, NoClone,34
    NoReplication, NoClone,36
    NoModify, NoReplication, NoClone,38
    NoDelete, NoClone,48
    Hidden, NoDelete, NoClone,49
    NoModify, NoDelete, NoClone,50
    Hidden, NoModify, NoDelete, NoClone,51
    NoReplication, NoDelete, NoClone,52
    NoModify, NoReplication, NoDelete, NoClone,54
    Hidden, NoModify, NoReplication, NoDelete, NoClone,55
    HiddenOnEmpty,64
    NoModify, HiddenOnEmpty,66
    NoModify, NoReplication, HiddenOnEmpty,70
    NoDelete, HiddenOnEmpty,80
    NoModify, NoDelete, HiddenOnEmpty,82
    NoReplication, NoDelete, HiddenOnEmpty,84
    NoModify, NoReplication, NoDelete, HiddenOnEmpty,86
    NoModify, RunTimeLocalized, NoDelete, HiddenOnEmpty,90
    NoModify, NoReplication, RunTimeLocalized, NoDelete, HiddenOnEmpty,94
    NoReplication, NoClone, HiddenOnEmpty,100
    NoModify, NoDelete, NoClone, HiddenOnEmpty,114
    NoModify, NoReplication, NoDelete, NoClone, HiddenOnEmpty,118
    NoModify, NoDelete, NoExport,146
    NoModify, NoReplication, NoDelete, NoExport,150
    Hidden, NoModify, NoReplication, NoDelete, NoExport,151
    NoModify, NoReplication, NoDelete, HiddenOnEmpty, NoExport,214
    System,256
    Hidden, System,257
    NoModify, System,258
    NoReplication, System,260
    NoDelete, System,272
    Hidden, NoDelete, System,273
    NoModify, NoDelete, System,274
    Hidden, NoModify, NoDelete, System,275
    NoReplication, NoDelete, System,276
    NoModify, NoReplication, NoDelete, System,278
    Hidden, NoModify, NoReplication, NoDelete, System,279
    RunTimeLocalized, NoDelete, System,280
    NoClone, System,288
    NoDelete, NoClone, System,304
    Hidden, NoDelete, NoClone, System,305
    NoModify, NoDelete, NoClone, System,306
    Hidden, NoModify, NoDelete, NoClone, System,307
    NoReplication, NoDelete, NoClone, System,308
    NoModify, NoReplication, NoDelete, NoClone, System,310
    NoModify, NoDelete, HiddenOnEmpty, System,338
    NoReplication, NoDelete, HiddenOnEmpty, System,340
    NoModify, NoReplication, NoDelete, HiddenOnEmpty, System,342
    NoModify, NoDelete, NoClone, NoExport, System,434
    Hidden, NoModify, NoDelete, NoClone, NoExport, System,435
    NoModify, NoReplication, NoDelete, NoClone, NoExport, System,438
    Hidden, NoModify, NoReplication, NoDelete, NoClone, NoExport, System,439
    0,512




  • 4.  RE: Filters: "New Computers" and "Installed Agent"

    Posted Jun 14, 2022 03:20 AM
    Thanks a lot Martin!

    The attribute is 278 and I have updated the value to 279, just making it
    Hidden, but I am still able to see it in the console.

    Do you know if I should reboot the NS (IIS or SQL service) after applying
    the change?


    Thanks!



    Best Regards / Saludos
    ___________________________

    PABLO LLORENTE ABAD
    EMEA Workplace Services , Workplace Specialist

    Calle Albasanz 14, 4th floor
    Madrid , Spain
    Mobile +34 672746460
    *pablo.llorente@holcim.com


  • 5.  RE: Filters: "New Computers" and "Installed Agent"

    Posted Jun 14, 2022 04:05 AM
    Hi Pablo
    It seems to be something specific with the "Favorites" filters.... It appears that the attribues somehow is ignored on the specific filters...

    No need to reboot NS/IS or SQL, since the change is be done directly on the item. When doing the attribues change on other filters that the favorites, the change is applied as soon as the item change has been made...

    Not sure what else to change, to block the build-in/default filters under favorites.... Maybe the favorites has inherited some permissions from the folder... but again... not sure..

    Best Regards

    Martin


  • 6.  RE: Filters: "New Computers" and "Installed Agent"

    Posted Jun 14, 2022 04:06 PM
    create a custom security role - remove ability to create filters - or remove those filters from that security role 


    ------------------------------
    Altiris Admin since 2002
    ------------------------------



  • 7.  RE: Filters: "New Computers" and "Installed Agent"

    Posted Jun 14, 2022 04:34 PM
    Thanks Shawn,

    Unfortunately those solutions have been already explored and it
    didn't work.

    We already have custom security roles and I tried to remove read access
    over such folder where those filters are included, giving then read access
    to all filters except to the conflict ones, but other collateral problems
    appeared...

    To remove the create filter permissions is not possible as it would mean a
    huge workload for our team as we have more than 45 different countirs
    around the region and we should manage all filters that they have. Removing
    "create Filters" means that they cannot edit those filters.

    Best Regards / Saludos
    ___________________________

    PABLO LLORENTE ABAD
    EMEA Workplace Services , Workplace Specialist

    Calle Albasanz 14, 4th floor
    Madrid , Spain
    Mobile +34 672746460
    *pablo.llorente@holcim.com


  • 8.  RE: Filters: "New Computers" and "Installed Agent"
    Best Answer

    Broadcom Employee
    Posted Jun 27, 2022 04:23 AM

    Hello Pablo Llorente!

    1. Open "Security Role Manager"


    2.
    Choose Role: "NT Authority\Authenticated Users" role
    Choose View: "Resources"
    Click on "Glasses" to see hidden items

    Uncheck "Read" permissions for "Installed Agent" and "New Computers" filters > save changes

    3. Now only "Symantec Administrators" role can see these "Saved Searches - filters" in Console and their output but other roles will see an error in UI on attempt to open them


    Now all other roles excluding "Symantec Administrators" role, will not be able to use these filters for resource target creation

    4. If you are logged in "Symantec Administrators" role in SMP Console, then will be possible to check which "Resource Target" is built using "Installed Agent" or "New Computers" filter. Just right click on required filter and open "Dependencies" 



    Best regards,
    IP.



    ------------------------------
    [JobTitle]
    [CompanyName]
    [State]
    ------------------------------



  • 9.  RE: Filters: "New Computers" and "Installed Agent"

    Posted Jun 28, 2022 05:14 PM
    Thanks a lot Igor, this solution is very very significant for us!!

    Once again, thanks for your help and support, you never fail!


    Best Regards / Saludos
    ___________________________

    PABLO LLORENTE ABAD
    EMEA Workplace Services , Workplace Specialist

    Calle Albasanz 14, 4th floor
    Madrid , Spain
    Mobile +34 672746460
    *pablo.llorente@holcim.com