How do I remotely troubleshoot an agent without logging into the machine?
"Remote Altiris Agent Diagnostics" (RAAD) version 2 expands on the diagnostic checks and remediation actions performed by RAAD version 1 (KB 45023) to allow those checks and actions against a list of machines and not just the one machine. The Health Checks in RAAD version 2 are designed to take a look at the state of the Altiris solution plug-ins such as Patch, Task, SWD and Recovery to determine if they are working properly. Version 2 also allows the ability to run a Custom Inventory XML against the set of machines and return the results immediately so you can customize your own health check. You can examine more in-depth details of the Agents using the Diagnostics tab which is essentially RAAD version 1. The biggest advantage with version 2 is that you can run remediation actions such as Configuration Request and Start Patching Cycle against as many machines as you'd like and all at once.
The process is to get a list of machines, run a health check against them, then by evaluating the results or drilling down into the diagnostics choose a remediation action to run against the machines you choose.
Features:
* Please see KB 45023 for application functionality
Download:
http://www.symantec.com/business/support/index?page=content&id=HOWTO21449
Requirements:
You will need to add AeXNSAgent.exe to the Firewall exclusion by running the following command on the remote machine:
netsh firewall add allowedprogram "%programfiles%\Altiris\Altiris Agent\AeXNSAgent.exe" ENABLE
Or you can simply run this command from the 'Remote Execute Option' button from the application
Usage:
To distribute desired application settings such as Remote Execute options edit the RAAD.exe.config and place it in the same folder as RAAD.exe. If user has altered application settings have them go to Settings - Change Application Settings and choose Restore All Setting to Default which will import your altered RAAD.exe.config.
Screenshots:
Hi Scott, Yes, the poblem was i was using the old version, with the new one all problems are gone..
luisgoca: Did you resolve this issue? I'm having the same problem and I'm on 7.1.
Scott
I have found that RAADV2 (2.1.24.0) authenticates successfully with the end-point using the Altiris Service Account when RAADV2 is run on a Windows 7 32-bit OS, but consistently fails to authenticate with the same program version and same credentials when running on a Windows 7 64-bit OS.
Does anyone have any helpful workarounds or solutions?
Please use RAAD v 7.5 available here:
http://www.symantec.com/business/support/index?page=content&id=HOWTO95133
for troubleshooting 7.5 clients. RAAD v2 is not officially certified for ITMS 7.5.
Hello everyone...
i'm getting this error when try to lock at clients log file with Raad v2
String was not recognized as a valid DateTime. at System.DateTimeParse.ParseExact(String s, String format, DateTimeFormatInfo dtfi, DateTimeStyles style) at System.DateTime.ParseExact(String s, String format, IFormatProvider provider, DateTimeStyles style) at RAAD..(String Client, String sLog)
Object variable or With block variable not set. at Microsoft.VisualBasic.CompilerServices.Symbols.Container..ctor(Object Instance) at Microsoft.VisualBasic.CompilerServices.NewLateBinding.InternalLateIndexGet(Object Instance, Object[] Arguments, String[] ArgumentNames, Boolean ReportErrors, ResolutionFailure& Failure) at Microsoft.VisualBasic.CompilerServices.NewLateBinding.LateIndexGet(Object Instance, Object[] Arguments, String[] ArgumentNames) at RAAD..(Array arr)
any ideas?
we are using 7.5 version in all clients, but v7.1 everything worked fine
I've been running in to the same problem.
Any way this can be made to work with the new 7.5 agents? I simply crashes when trying to connect to newer agents.
Thanks
Hi Everyone,
We have Altiris deployment console in our environment, I need to restart the Altiris Client service for the Greyed out computers, Is there any way to restart the list of computers via VBScript? Please advice
Thanks in Advance!
Same thing helped me with Real-Time System Management - WMI didn't work before this
Thanks for the reply. I will most definately invetigate this.
I have also found in another instance that DNS causes the same status.
Take Care
Eugene
Eugene,
I have seen this issue when the Enable Distributed COM on this computer box was unchecked:
Good Morning Gents,
I am reading through all the comments and seeing some of the issues i am currently experiencing with the RAAD tool. Awesome tool i must agree!
I dont however see any direct answers. Could someone please advise on the below screenshots?
As you can see in the below screenshot, the agent is reporting perfectly
In RAAD however, it shows as "Unable to Connect"
Any idea will be welcome. Thanks for the time guys.
Since RAAD is a standalone app, only place I can think of that caches Windows passwords is the "User Accounts" applet in Control Panel. On WinXP, open User Accounts, select the Advanced tab then click the Manage Passwords button. On Win7, open User Accounts, click User Accounts, Manage User Accounts, select the Advanced tab then click the Manage Passwords button. Usually when we have password issues, we tell users to make sure there are no saved Windows passwords in the resulting dialogue box.
Cached credentials can help you avoid having to log into certain resources although when passwords change, we think it's more trouble than it's worth so we prefer always opting out of saving any passwords should Windows prompt and give you that option.
I have tried many different settings to these. A couple of my co-workers just left the default settings and it worked fine for them. This was working for me prior to changing my password. Is there some place that an old password might get stuck that RAAD looks at? Thanks
Have you tried to change the Client Authentication in the Settings menu?
Or maybe the DB auth settings?
I am having the same problem. I changed the password recently on my administrator account. Now the RAAD tool gives me an access denied for all computers except the local computer that I am running the tool from. My admin account is not having issues with anything other than this tool. It connects fine through a UNC path to the same computers that are giving an access denied through RAAD. Not a deal breaker, but this is a tool that I find to be very useful. So, I would like to figure out how to fix the issue. Are there log files anywhere that this tool writes to? I deleted the Symantec folder that is created when you run RAAD (C:\documents and settings\username\local settings\application data\symantec). This did not fix the issue either.
A troubleshooting guide would be nice. Do we need to check or restart the WMI service on the remote systems if we encounter this error?
I'm getting this error too on random workstations - it doesn't seem to be our routers as I can connect to a machine on same VLAN right next to it fine through RAADv2.
Any tips on checking WMI ports on the workstation? Windows Firewall is disabled for our workstations.
Ray,
1st version used Remote Registry to connect and the second uses WMI to access the registry of the remote machine. THe reason you probably have access issues is that the WMI ports are not open across your routers or on the remote machinee.
Did you ever find a resolution for this issue? General research on "Cannot create ActiveX component" indicates a possibly unregistered object but not sure what dll, ocx, etc., to register; assuming this is the problem.
Soooo...is there ever going to be a RAADv3? Love the tool, but with some computers I get a connection error stating, "Altiris Agent not Installed: Unable to Connect" or "Altiris Agent not Installed: Access Denied" using v2.
Windows 7 or XP. The computer is on. Firewall disabled. To my knowledge nothing is being blocked.
Yet, when I use RAADv1 to connect to the same computers, I can connect with no errors! So what is making v2 flaky with those connection errors?
What does this error indicate? I know the system in question has the Altiris Agent installed and running correctly as evidenced by successful software delivery jobs taking place on the target system.
Feature request. Read "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Altiris Agent\Servers\[server]\Web" to get the full target NS web server. We set up our 7.1 install to a completely different port, so nsweb=http://[server]:2345/altiris
This would mainly be nice for CC or pcAnywhere tool buttons. Over all, love the tool.
When viewing a machine running the 7.1 Agent that is set to do a configuration request every x minutes instead of hours the Details tab fails to show this. It will just show blank for the Request Interval. For testing and for onboarding new PCs it is common for the request interval to be set to something like 15 minutes instead of 6 or 7 hours like normal. This seemed to work just fine with the older agents just not for 7.1 agents.
Love the tool, use it almost everyday. Keep the updates coming please.
If I run the application with my admin account it works fine. Yet if I run it with my user account and then try to enter the admin creds in client authentication it fails to connect to a computer. What's up with that? Was using Domain\User for the login.
C:\Windows\system32>netsh firewall add allowedprogram "C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe" ENABLE IMPORTANT: Command executed successfully. However, "netsh firewall" is deprecated; use "netsh advfirewall firewall" instead. For more information on using "netsh advfirewall firewall" commands instead of "netsh firewall", see KB article 947709 at http://go.microsoft.com/fwlink/?linkid=121488 . Ok.
I keep receiving the same error on the Task tab on 7.1 Agents.
Attached User Guide to this article
I have tested on Altiris 6, it works well
....or at least when you in the console is says this
Is it working with Altiris 6 agents ?
Great tool, in our environment with 7.1 Agents the Raad v2.1.24.0 is generating errors at the Tasks tab as well. The application requirements are met. Any suggestions? or the solution found yet?
Event log: Cannot create ActiveX component. at Microsoft.VisualBasic.Interaction.CreateObject(String ProgId, String ServerName) at RAAD.ž.†(String Client)
Hi Alramin,
Please create a new Forum Discussion (click Create Content above, then "Forum Discussion" and place it in the Endpoint Management community, in the Altiris Client Management Suite product area).
Where i can find HELP about Custom Inventory XML creation?
I want to collect info about all sub-agents installed with agent.
This tool is fantastic, however the Clear History button on the Tasks tab doesn't seem to work.
Each time I try and update the Tasks tab it crashes RAAD. Altiris Agent is NS7 and have tried from multiple Windows XP and Windows 7. It does this on all machines that I try and connect to. Using RAAD 2.1.23
Error is: RAAD attempted to perform and operation not allowed by the security policy. To grant this application the required permission use the Microsoft .NET framework Configuration Tool.
After the error the application just exits.
Please visit this article to download the latest version which resolves this Missing SWD Data issue:
How to access the machines using RAAD? is this is a web console? do we need to have the RAAD installed on the DS?