Scheduled Push to Computers with different credentials?

[Carl Fortin]

Hello,

We would like to install the Altiris Agent using "Scheduled Push to Computers" but we need to use a domain admin account. Is there a way to use different credentials as we do in the "Roll out Agent to Computers" section? 

I have reviewed this document from Broadcom, but it's unclear to me which credential it actually uses.

Thank you.

[Igor Perevozchikov]

Good morning Carl Fortin!

Here is discussion about what account can be used for "Symantec Management Agent" push install on Windows computers.
https://community.broadcom.com/symantecenterprise/discussion/failed-to-logon-using-the-admin-account-access-to-the-network-resource-was-denied-getting-this-error-what-rights-do-we-use-while-using-an-account-as-seen-an-article-which-says-use-an-account-with-the-proper-rights-in-that-domain#bm93dd140b-2448-45ac-b9d6-5be7d496ccaf

For scheduled push install, you can open "Default Settings" and specify there required credentials.
Specify local administrative account which is available on each targeted windows computer, or use separate administrative domain account instead of current "NS App Identity" domain account.

Best regards,
IP.

[Carl Fortin]

Thank you so much! It's working perfectly on the server with the latest version. However, we've encountered an issue with our other server, which is running an older version; strangely, it doesn't seem to make any attempt to push the agent.

[Igor Perevozchikov]

Make sure that you specified correct schedule.
Also you can find this schedule in "Task Scheduler" on ITMS server and try to run it manually and then check Altiris Log Viewer to see if push install started, etc.

[Carl Fortin]

Thx,  I figured it out. It was a permission issue. It worked once I added read permission to the server communication profile for the user.

 

I had the following message in the logs: 

Unable to push agent to newly discovered machines.

 

The current user 'John Doe' does not have required permission 'read' to load item: 8a641c88-fe90-41dc-9fb4-10e666c14f90

   [Altiris.NS.Exceptions.AeXUnauthorizedAccessException @ Altiris.NS]

[Carl Fortin]

One last question for you, if you don't mind.
I'm importing computers from AD and creating new resources by matching the computer name. The problem is that Altiris tries to communicate using the short name instead of the FQDN. What dataclass do I need to fill to make sure Altiris is using the FQDN?

Thanks!

[Igor Perevozchikov]

Hi Carl Fortin!

Required field is "Domain" in "AeX AC Identification" data class.

I hope that you do not change any values in "AeX AC Identification" sql table directly from SQL Management studio and use a "Data Connector" to modify existing data or populate new data in this sql table.

First need to create a data connector "CSV" data source rule
Example

Create "Resource Import Export Rule" to export all required computers without Agent installed

Now create another "Resource Import Export Rule" data connector rule to import same computers without Agent installed but with manually modified columns to change them for "AeX AC Identification" sql table

Best regards,
IP.

[Carl Fortin]

I just want to clarify something about the column mappings for the export rule. What are the column names in your csv file? I do not have ResourceGuid or ResourceType in my csv. I only have the hostname, domain and some other information.

My csv looks like this:
AD Computer Name;OS;AD Domain
PC-01;Windows 10 Enterprise;Mydomain;

[Igor Perevozchikov]

Previously I described example of data connector usage, when user imported all required computers from AD using AD Import rule

therefore all my AD imported computers have own GUID and other information in "AeX AC Identification" sql table

For your case when you do not use AD Import rule to import computers and just use a csv file for first time computers import, you can try to use this "CSV" data source 

Create a "Resource Import Export Rule" data connector rule and specify there these fields (including Domain field with custom value)

Best regards,
IP.