Filters: "New Computers" and "Installed Agent"

[Pablo Llorente]

Hello,

We are having many issues with the two filters under Favorites folder (Filters View). Would be possible to remove those filters from such folder and this way, avoid that users could use those filters to be added to other filters? Would be possible to reduce the righst / scope of those filters to administrators? Or at least to hide the filters to everyone?



Thanks a lot in advance.

[Pablo Llorente]

Hello,

Any clue here? Any way to hide these filters? or at least any way to rename them?

It is causing us a lot of headaches, because the local country admins, sometimes are using them adding any of those filters to one local filter that install/uninstall software, and they are not aware that using those filters all computers under the same NS are included in the filter, even when they are not seeing them because are out of their scope, i.e, they cannot see them.

It is very critical for us. Thanks.

[Martin C. M. Dhiin]

Hi Pablo.
You need to change the attributes value on the filters that you want to hide.

Forum Thread

The "Attribues" is available in the item table in the DB.  (update item set Attribute ='[Value]' where guid = '[Filterguid]'), Before updating/changing the attributes it might be a good idea to note what the value where before changing it. 

Normal,0
Hidden,1
NoModify,2
Hidden, NoModify,3
NoReplication,4
Hidden, NoReplication,5
NoModify, NoReplication,6
Hidden, NoModify, NoReplication,7
NoDelete,16
Hidden, NoDelete,17
NoModify, NoDelete,18
Hidden, NoModify, NoDelete,19
NoReplication, NoDelete,20
Hidden, NoReplication, NoDelete,21
NoModify, NoReplication, NoDelete,22
Hidden, NoModify, NoReplication, NoDelete,23
NoModify, RunTimeLocalized, NoDelete,26
Hidden, NoModify, RunTimeLocalized, NoDelete,27
NoReplication, RunTimeLocalized, NoDelete,28
NoModify, NoReplication, RunTimeLocalized, NoDelete,30
NoClone,32
Hidden, NoClone,33
NoModify, NoClone,34
NoReplication, NoClone,36
NoModify, NoReplication, NoClone,38
NoDelete, NoClone,48
Hidden, NoDelete, NoClone,49
NoModify, NoDelete, NoClone,50
Hidden, NoModify, NoDelete, NoClone,51
NoReplication, NoDelete, NoClone,52
NoModify, NoReplication, NoDelete, NoClone,54
Hidden, NoModify, NoReplication, NoDelete, NoClone,55
HiddenOnEmpty,64
NoModify, HiddenOnEmpty,66
NoModify, NoReplication, HiddenOnEmpty,70
NoDelete, HiddenOnEmpty,80
NoModify, NoDelete, HiddenOnEmpty,82
NoReplication, NoDelete, HiddenOnEmpty,84
NoModify, NoReplication, NoDelete, HiddenOnEmpty,86
NoModify, RunTimeLocalized, NoDelete, HiddenOnEmpty,90
NoModify, NoReplication, RunTimeLocalized, NoDelete, HiddenOnEmpty,94
NoReplication, NoClone, HiddenOnEmpty,100
NoModify, NoDelete, NoClone, HiddenOnEmpty,114
NoModify, NoReplication, NoDelete, NoClone, HiddenOnEmpty,118
NoModify, NoDelete, NoExport,146
NoModify, NoReplication, NoDelete, NoExport,150
Hidden, NoModify, NoReplication, NoDelete, NoExport,151
NoModify, NoReplication, NoDelete, HiddenOnEmpty, NoExport,214
System,256
Hidden, System,257
NoModify, System,258
NoReplication, System,260
NoDelete, System,272
Hidden, NoDelete, System,273
NoModify, NoDelete, System,274
Hidden, NoModify, NoDelete, System,275
NoReplication, NoDelete, System,276
NoModify, NoReplication, NoDelete, System,278
Hidden, NoModify, NoReplication, NoDelete, System,279
RunTimeLocalized, NoDelete, System,280
NoClone, System,288
NoDelete, NoClone, System,304
Hidden, NoDelete, NoClone, System,305
NoModify, NoDelete, NoClone, System,306
Hidden, NoModify, NoDelete, NoClone, System,307
NoReplication, NoDelete, NoClone, System,308
NoModify, NoReplication, NoDelete, NoClone, System,310
NoModify, NoDelete, HiddenOnEmpty, System,338
NoReplication, NoDelete, HiddenOnEmpty, System,340
NoModify, NoReplication, NoDelete, HiddenOnEmpty, System,342
NoModify, NoDelete, NoClone, NoExport, System,434
Hidden, NoModify, NoDelete, NoClone, NoExport, System,435
NoModify, NoReplication, NoDelete, NoClone, NoExport, System,438
Hidden, NoModify, NoReplication, NoDelete, NoClone, NoExport, System,439
0,512

[Pablo Llorente]

Thanks a lot Martin!

The attribute is 278 and I have updated the value to 279, just making it
Hidden, but I am still able to see it in the console.

Do you know if I should reboot the NS (IIS or SQL service) after applying
the change?


Thanks!



Best Regards / Saludos
___________________________

PABLO LLORENTE ABAD
EMEA Workplace Services , Workplace Specialist

Calle Albasanz 14, 4th floor
Madrid , Spain
Mobile [phone]
*[e-mail] <[e-mail]>**
<http: www.holcim.com/="">*
*www.holcim.com <http: www.holcim.com/="">*

Follow us on Facebook <https: www.facebook.com/lafargeholcimitemea/=""> |
Twitter <https: twitter.com/lhitemea=""> | LinkedIn
<https: www.linkedin.com/company/lafargeholcimitemea/="">

*To visit our Workplace Connect site click here
<https: connect.lafargeholcim.com/emea-digital-center/functions/it-security/emea-workplace-services="">*

This email is confidential and intended only for the use of the above named
addressee. If you have received this email in error, please delete it
immediately and notify us by email or telephone.

[Martin C. M. Dhiin]

Hi Pablo
It seems to be something specific with the "Favorites" filters.... It appears that the attribues somehow is ignored on the specific filters...

No need to reboot NS/IS or SQL, since the change is be done directly on the item. When doing the attribues change on other filters that the favorites, the change is applied as soon as the item change has been made...

Not sure what else to change, to block the build-in/default filters under favorites.... Maybe the favorites has inherited some permissions from the folder... but again... not sure..

Best Regards

Martin

[Shawn Mayhew]

create a custom security role - remove ability to create filters - or remove those filters from that security role 


------------------------------
Altiris Admin since 2002
------------------------------

[Pablo Llorente]

Thanks Shawn,

Unfortunately those solutions have been already explored and it
didn't work.

We already have custom security roles and I tried to remove read access
over such folder where those filters are included, giving then read access
to all filters except to the conflict ones, but other collateral problems
appeared...

To remove the create filter permissions is not possible as it would mean a
huge workload for our team as we have more than 45 different countirs
around the region and we should manage all filters that they have. Removing
"create Filters" means that they cannot edit those filters.

Best Regards / Saludos
___________________________

PABLO LLORENTE ABAD
EMEA Workplace Services , Workplace Specialist

Calle Albasanz 14, 4th floor
Madrid , Spain
Mobile [phone]
*[e-mail] <[e-mail]>**
<http: www.holcim.com/="">*
*www.holcim.com <http: www.holcim.com/="">*

Follow us on Facebook <https: www.facebook.com/lafargeholcimitemea/=""> |
Twitter <https: twitter.com/lhitemea=""> | LinkedIn
<https: www.linkedin.com/company/lafargeholcimitemea/="">

*To visit our Workplace Connect site click here
<https: connect.lafargeholcim.com/emea-digital-center/functions/it-security/emea-workplace-services="">*

This email is confidential and intended only for the use of the above named
addressee. If you have received this email in error, please delete it
immediately and notify us by email or telephone.

[Igor Perevozchikov]

Hello Pablo Llorente!

1. Open "Security Role Manager"

2.
Choose Role: "NT Authority\Authenticated Users" role
Choose View: "Resources"
Click on "Glasses" to see hidden items

Uncheck "Read" permissions for "Installed Agent" and "New Computers" filters > save changes

3. Now only "Symantec Administrators" role can see these "Saved Searches - filters" in Console and their output but other roles will see an error in UI on attempt to open them

Now all other roles excluding "Symantec Administrators" role, will not be able to use these filters for resource target creation

4. If you are logged in "Symantec Administrators" role in SMP Console, then will be possible to check which "Resource Target" is built using "Installed Agent" or "New Computers" filter. Just right click on required filter and open "Dependencies" 

Best regards,
IP.

------------------------------
[JobTitle]
[CompanyName]
[State]
------------------------------

[Pablo Llorente]

Thanks a lot Igor, this solution is very very significant for us!!

Once again, thanks for your help and support, you never fail!


Best Regards / Saludos
___________________________

PABLO LLORENTE ABAD
EMEA Workplace Services , Workplace Specialist

Calle Albasanz 14, 4th floor
Madrid , Spain
Mobile [phone]
*[e-mail] <[e-mail]>**
<http: www.holcim.com/="">*
*www.holcim.com <http: www.holcim.com/="">*

Follow us on Facebook <https: www.facebook.com/lafargeholcimitemea/=""> |
Twitter <https: twitter.com/lhitemea=""> | LinkedIn
<https: www.linkedin.com/company/lafargeholcimitemea/="">

*To visit our Workplace Connect site click here
<https: connect.lafargeholcim.com/emea-digital-center/functions/it-security/emea-workplace-services="">*

This email is confidential and intended only for the use of the above named
addressee. If you have received this email in error, please delete it
immediately and notify us by email or telephone.