LANDesk 9.5.1 Hva er nytt i denne?
Routes to Market Broad Platform Software Asset Management Data Analytics User Mgmt. Endpoint Security 9.5 SP1 LANDesk Desktop Portal (apps, docs, links) BridgeIT portal consolidation w/ history view Printer management CSA: VA; N:1; Secure and Scale (1 month); Software bundle install Automated license reclamation VDI Licensing SW/HW Integrated B2B New Connectors (PCM Sarcom, PC Connection, PDS) Group Level SW Reports HP ElitePad Integration HP Secure Erase FIPS Support through CSA (1 Month) SmartVue (HTML, RBA, VPN Free (CSA) AV Mac, Win 8 & 2012 support Endpoint Compliance (SCAP) File Reputation Client Logging Japan Geo-Fencing Policies APP EOL detection DCM: new device picker Patch Management end-user productivity HP ElitePad Integration Mobility Integrated (Odyssey Out) Windows HII Driver Mgmt. (exclusion) Mac Filevault Usage Discovery Mac LDAP User & Group Targeting Mac Preferred Server Integration Mac Self Service OS Upgrade Mac OS X Configuration Profile Integration AIX, 64bit CentOS 6 AMT 9 compatibility 2
PATCH
Patch Do Not Disturb if Maximize end-user productivity Reduce unwanted disruptions» Detect full screen apps» Dynamically hide scan dialog
Patching Maintenance Windows Controlled and Predictable maintenance Autofix policies are queued Machine state detection More aggressive reboot controls become possible
Patching Application Interference Increased first pass success rate Java Browser plugins Custom applications Close applications prior to patching Prevent / block applications from running during the patch process
Patching Application EOL Detection Application End Of Life Detection Publish by Content Leverage LANDesk Patch Manager Already support MS Office 2000/XP Adobe Acrobat Pro/Sta 6.x, 7.x, 8.x Adobe Reader 6.x, 7.x, 8.x Java SE 1.3, 1.4, 5.0
CLOUD SERVICES APPLIANCE
Cloud Services Appliance Modern Architecture Virtual or Physical FIPS compliant Multiple gateways per Core
SMARTVUE
SmartVue SmartVue for Web Role based security Access SmartVue from the Cloud Usability enhancements
SmartVue Access and Control SmartVue for Web Use SmartVue from any device. ios no longer required. Role Based Security Control which Widgets individual users and see. SmartVue through the Cloud - Utilize the Cloud Services Appliance to access SmartVue from anywhere Usability Enhancements SmartVue is easier and more intuitive to use than ever!
LINUX/UNIX
Linux / Unix Enhanced Platform Support CentOS 5 32-bit/64-bit *NEW: CentOS6 32-bit/64-bit Redhad 5 32-bit/64-bit *NEW: AIX 6.3 / 7.1 Redhad 6 32-bit/64-bit HP-UX 11.11 HP-UX 11.23 SuSE 10 SuSE 11 Solaris 10
OS X
LDAP & FileVault Inventory Collection LDAP LDAP Groups Machine Primary Owner LDAP Primary Owner User Computer Location LDAP Location Login Name Primary Owner Value Format Filevault Conversion Status Encryption Method Lock Status Protection Status Volume Protected 16
LDAP User & Group Targeting Schedule jobs against an LDAP User or Group Core server translates the target to the devices for the LDAP user or group 17
Preferred Server Integration Software distribution tasks now leverage the Preferred Servers configured on the core server Supports the Services Credentials when accessing the package share Improved algorithm to ensure the OS X machine downloads the files from the most ideal server 18
OS X Configuration Profile Integration Apply any OS X Configuration Profile Device access control Energy settings Account settings such as email LDAP Calendar & IM Inventory all profiles installed such as Wi-Fi, VPN, 802.1x Printer configuration settings Login items Dock preferences User Network settings Machine Ability to remove all profiles on a machine 19
Self-Service OS X Upgrades Create a task to push an OS X upgrade to 10.8 Create a self-service optional policy Stage it locally allowing the end user to begin the upgrade on demand Non-destructive on the user s applications and data Doesn't require pre-boot architecture No OS X server required 20
INTEL
Functionality Improvements Enhanced for AMT 9 WS-MAN communication replacing the deprecate SOAP calls PFX Certificate Support PEM certificate files are no longer necessary, just place the purchased PFX file onto the Core server Machine Queuing Schedule AMT provisioning on as many machines as you desire, we ll efficiently queue up the requests Graceful Shutdown & Restart Reduced risk at losing data via graceful AMT shutdowns and restarts
REMOTE CONTROL
Portal Enhancement Requests Implemented Full Screen Mode Take advantage of every pixel of real-estate by auto-hiding the toolbar File Transfer Permission Allow or block the drag-n-drop file transfer in HTML 5 RC Auditing Review who remote controlled what machine and when Screen Capture Easily capture a screenshot of the machine being controlled
Functionality Improvements Integrated Security Authentication Upload your customized RC on demand agent to the CSA On Demand Cloud Service Appliance Agent Upload your customized RC on demand agent to the CSA Legacy Viewer Performance Speed improvements for the legacy viewer when used with Windows 8
Enhanced Agent Settings User sees prompt only if logged in, admin has no access until granted User sees prompt only if logged in, admin has access when granted or if no one is logged in Use sees prompt regardless of being logged in or not, admin has no access until granted Enable or disable all legacy remote control tools Terminate remote access if the user logs out or locks the computer Allow the end user to terminate the session End User Permission Required Legacy Remote Control Terminate Session Controls
SOFTWARE LICENSE RECLAMATION
Software Reclamation CEO Cost Efficiencies Projects that drive profits IT Projects that drive innovation CIO Need to fund projects for future growth Ensure business is protected from risk Build in automation to reduce IT cost Reduce cost How do I optimize Avoid costly audits Lower support burden IT Manager IT Admin What do we own What are we using What should we own End User Need resources to complete his job Wants to be enabled to restricted Has more expectations
Software Reclamation Uninstall unused software Just in time reclamation Maintain a set of free licenses Or Reclaim all underused Leverage Software distribution technologies
Advanced Reclamation White list or black list Exclude groups or include those that agree to participate Send an email (per product) to the product owner
Defaults Simplify configuration by setting defaults Override defaults on a per product basis
Reclamation View Reclamation history Shows total reclamation by product and savings Shows each task under that product and the task results Shows if there is an active task Updated daily during maintenance
AGENT
Client Connectivity Setting Block Peer & Multicast on specified adapters Wireless Adapter description key words» VPN, CMDA, Carrier, This allows 3G adapter blocking Number of days files stay in cache Configure the time files stay in the sdmcache
Agent Requirements.Net 4.0 is leveraged by a couple of components Updated portal Legacy portal does not require.net New portal does require.net Adaptive settings» Location aware policies require.net for location discovery Agent deployment will deploy.net if a selected componement requires it» Methods for deployment Bundled with Agent increases agent size by 40 meg Detection during the agent install, we detect if.net is installed or not If not then it will be downloaded (using LD download) and installed during the agent install
Client Connectivity Setting Agent Setting Set the Cloud service appliance that the node uses
Preferred Server Frequency to get new Preferred server list Supported on MAC and Windows
Preferred Server process flow List List is downloaded Client connects to each server in list List is saved in the order by response time Task Client checks to make sure list is still valid (frequency to update) Client attempts the first server in the list File not found If the first preferred server does not have the file the next preferred server is attempted Number of Preferred Servers to attempt before failing back to source controls how many server will be attempted at this time Multiple not found If multiple files are not found the server will be moved to the end of the list for this task List The preferred server order is only saved based on the response time, files not found will not change the saved order for the next task Recommendation set the frequency to update the list to 7-14 days unless preferred server are currently being added Preferred server list is updated on IP address change as well as frequency
Preferred Server Preferred Server registry keys have been removed
Task History All software distribution tasks results are stored Configurable time to store history Task can be removed from scheduler Client side in history and in Inventory
Inventory Settings Collect my GPS Location Collect a file hash additional identification of files Configure how long to maintain task history
Context aware settings Context aware Location- GPS Network Rule based Dynamic
ESX Support Support ESX 3,4,5 hosts Show the host and guests in inventory
Agent Housekeeping Extended XDD to run on 64 bit systems Agent deployment tasks have a configurable timeout 45min default For cases where the agent installation is extended with other applications or slow
PROVISIONING
Provisioning Windows 8 Reset and Refresh HII driver management Assign and Disable drivers Self contained exe driver management - Software packages HII preview tool to simplify new device management Template Options Run silent UI close timeout Remove client provisioning folder Select scan and repair settings in patch action GPT support in partition handler
Provisioning Extended Inventory with Primary device id Command line tool to see all device ID s Copy and paste to other templates Copy and paste to other sections Create action without focus on section name
Windows 8 Reset & Refresh Windows 8 reset and refresh Configure WIM» Creation, Assignment and fallback Call Reset or Refresh
HII Tool Shows an overview of customizations
Disable Drivers in the HII Library Disable for a Device ID Disable for all or specified OS and Architecture
Assign a driver Based on Make, Model, OS and Architecture Assigned driver is used for that device ID No automatic discovery is attempted
Assign a Driver Package Based on Make, Model, OS and Architecture Assigned driver is used for that device ID No automatic discovery is attempted
Template Options Run Silent Control UI Display Control deletion of provision folder
SOFTWARE DISTRIBUTION
Desktop Manager New interface Customizable branding Deliver Links, Docs & Apps Packages and links can be placed in categories Chrome-less app launching WPF and EXE Launchpad integrated Task history of client changes
New portal configure Agent Configuration Install.NET Uses portal manager Configure Applications» Launchpad and Task History are internally built in
Portal manager Support both new and old portal manager New portal : WPF exe and DLL requires.net 4 framework LANDeskPortalManager.exe LANDeskLaunchpadDLL.dll LANDeskTaskHistoryDLL.dll Old portal manager : win32 exe DesktopManager.exe Policy.Client.Launchpad.exe SoftwareInstaller.exe
Categories All packages and links can have a category Used for grouping and filtering in the user portal
Bundles Leverages groups in distribution packages Set the installation order Allows for packages to be grouped and ordered Categories are supported
Software Distribution New Streamed Document package type Link for any file type Streamed from the portal (new portal only), not downloaded to the client Uses the current associated shell application (by file extension) defined for the client operating system
Default Delivery method Select Delivery Method Global value Only Administrator can Configure
Precache Distribution of files Push and Required tasks copy the files to the client Optional and Recommended copy the files and deploy the link in the portal
Software Distribution Task History/Maintenance continued Inventory scanner automatically sends client task history to the core database Located in inventory under LANDesk Management / SWD / History
SWD House Keeping Scheduled LDAP Resolver reduced memory impact and improved performance Find on package prerequisite query, start typing
INVENTORY
Inventory Collect File hash Add a discovery date to products Collect Browser helper object for IE Collect Toolbar add ons for IE Collect System Run, Run once & startup information Collect Primary hardware device ID Collect Data File information (i.e. *.pst, Wildcard) Collect Last Login Date Collect connected monitor as well as all monitors Collect additional Windows service information Collect MSI Package uninstall strings
Inventory 9.5.1 Inventory Scanner continued Self-Encrypting drive detection» Mass Storage - Fixed Drive - (Number:%d) - Self-Encrypting Drive =Yes Hardware PNP Device ID s for HII repository» OS - Devices - (Device Identifier:{name deviceid}) Name =» OS - Devices - (Device Identifier:{name deviceid}) Class GUID =» OS - Devices - (Device Identifier:{name deviceid}) Hardware ID = Task History from client DB» LANDesk Management - SWD - History - (Task:%s) - %s = Detect Spoon virtual apps as Virtualized» Software - Package - (Path:%s) - Virtualized Application =Yes Run and Run Once key data» OS Run Key (Name:%s) Value =
Inventory 9.5.1 Inventory Scanner continued New attributes for Drivers and Services» Start Type» Path» Short Name» Description» Start Name IE Browser helper objects» Browser - Internet Explorer - Helpers - (Name:%s) - %s =» Helpers» Extensions» Toolbars
Inventory 9.5.1 Inventory Scanner continued Currently connected monitors» Video - Connected Monitors - Monitor - (Number:%d) - Model = Collect Data file info (Path, Name, Size, Date)» DataFileExtensions=.pst» Set in ldappl3.template file» Software - Data Files - (Path:%s) File Name =» Software - Data Files - (Path:%s) File Size =» Software - Data Files - (Path:%s) File Date =
Inventory 9.5.1 Inventory Scanner continued Get Windows Store Apps (windows 8)» Data from %Program Files%\WindowsApps\%s\AppXManifest.xml» File size is fixed at 41, name, version, vendor, date» No file hash sent Get Local Printer Info Get WIM Registered flag» OS - NT Info - WIM Registered = Location (GPS) data (windows 7 and above)» Requires.NET 3.5 or greater» Mobile Broadband GPS Location ( SIM card info also sent) Dummy Delta (/DD)» Send only a small set of data to the core from an external scanner
Inventory Spoon Packages Collect Self Encrypting Drive information Locally attached printers Better out of sync handling Quietly add to out of sync list on failing to process a scan