LANDesk User Guide

8/16/2019 LANDesk User Guide

http://slidepdf.com/reader/full/landesk-user-guide 1/67

LANDesk Management Suite guide


http://slidepdf.com/reader/full/landesk-user-guide 2/671 Done By Fourth Dimension Sys

Content:

Performing a New Installation ………………………………………………………………………………… 2

Unmanaged Devices Discovery (UDD) …………………………………………………………………….. 8

Agent configuration and Deployment ………………………………………………………….…………. 11

Agent configuration…………………………………………………………………………………………. 11

Add service account ……………………………………………………………………………………….. 24

Agent Deployment ………………………………………………………………………………………… 27

Operating system Deployment (OSD) .……………………………………………………………………… 30

Master Image preparation ……………………………………………………………………………… 30

Capture Template Preparation …………………………………………………………………….... 31

Deployment Template Preparation ………………………………………………………………… 35

Booting from network (BXE boot) …………………………………………………………………… 39

Reports and Queries ………………………………………………………………………………………………… 41

LANDesk Queries …………………………………………………………………………………………… 41

LANDesk Reporting ………………………………………………………………………………… .……… 42

Software Distribution ……………………………………………………………………………………………….. 47

LANDesk Patch Manager …………………………………………………………………………………………. 53

Appendix (A) System Requirements ..…………………………………………………………………… 62

Appendix (B) LDMS Database creation …………………………………………………………………… 63





4. Click the Core Server option.

The next screen checks to make sure that the server has passed the prerequisites. If the prerequisite checke

detects that it is missing a required feature, the screen shows a button with Install

Prerequisites.

5. Select Install Prerequisites



6. Click the Continue button.

7. You will be prompted for the database information for the new server we will select new DB and Micros

SQL Server.

8. Select Microsoft SQL Server



9. Enter the server name of the database server in the Server field.

10. Enter the name of the database in the Database field.

11. Enter the username and password in the User name and Password field.

12. Once the data is entered, click Test Connection to test database connectivity or Select Continue.

13. Next, you are prompted for the location where you would like LANDESK® Management Suite installed.

14. Choose the default location or if desired, change it and select Continue and the Management Suite 9.6

software summary is shown.



15. Click Install.



16. When the installation finishes, you will be prompted to reboot. Select Reboot.

17. Activate your core once the core server has finished rebooting.

The new Core Server installation is complete.



Now your LANDesk server is ready, run the console from program and login using your domain account.

After the installation and activation for the core server the first thing we will do is (Unmanaged dev

discovery).

Unmanaged Devices Discovery (UDD)

To perform this scan follow the following steps:

1. Login to LANDesk Console.

2. From the left side tabs click on configurations.

3. From the configuration menu appear above the tabs click (Unmanaged Devices Discovery).



4. Then click the button for network scan as shown.

Now we have many methods to perform the scan.



As shown we configured scan for Bahri Domain and DMZ IP range to scan all the DMZ subnets .

5. After the configuration you just need to click (Scan now) and the result will appear as shown below.

Now we have list of our unmanaged machines and we are ready to configure and deploy the LANDesk Agent



Agent configuration and deployment

Before deploying the LANDesk agent we need to configure it and give him the appropriate feature

permissions based on our environment need and give the systems service account with admin privilege.

A.

Agent configurations.

The following steps are for agent configuration:

1. Login to LANDesk console.

2. Click on configuration tab then choose agent configuration from configuration menu.

3. Click on (+) icon to create new configuration and choose (New Windows Agent configuration).



4. From the start page you will give a name for this agent and choose the feature you want to install w

agent.





6. Now we will configure the remote control settings as follows.

Clicks configure to add new or edit configuration.



Click new for new configuration and give a name for the settings and choose the feature to enab

during the remote control session.

The indicator setting is related to agent and remote control and the recommended settings are:



The permission option is to give the support engineer the appropriate permission to access

machines.



Then save the settings and use it with the agent settings.



7. For patch and compliance setting for windows patching and vulnerability scan here you only need

choose the prober settings to be applied with the agent , for all clients we use the (Bahri Def

Distribution and Patch settings) and for the test group we will use (Bahri Workstation Disteibution

Patch Testing ).

Now we will show how to create these settings:

Click the Configure button.

Click new to create your own scan and repair settings.



Give a name for your setting and check the Network settings.



For scan option we will set the scan for our own definition group (Workstation Microsoft Patc

and about autofix option you must uncheck for default setting but you need to check it for tes

group setting.



Click save to save the settings with Agent configuration.

Select the settings you just saved the click use selected.



Save the agent configuration to use it later.

Now LANDesk default agent is ready to be deployed to all Bahri machines.



NOTE: We configure four agents as shown.

1. Bahri Default Agent: this Agent contains the following settings for all Bahri client.

Bahri Default remote control settings “with permissions”

Bahri Default Distribution and Patch settings “without autofix option”

2. Bahri Workstation Patches test agent : this agent has different settings as the following: Bahri Default remote control settings “with permissions”

Bahri Default Distribution and Patch settings “with autofix option”

3. Bahri Agent for server (Patch testing).

Bahri remote control settings “without permissions”

Bahri Distribution and Patch settings “with autofix option”

4. Bahri Agent for server.

Bahri remote control settings “without permissions”

Bahri Distribution and Patch settings “without autofix option”



Now you need to add domain admin account to system to be able to deploy the agent on client’s machines.

To add this account do the following:

1. Click configure tab from the head of window.

2. Choose services.

3. Click scheduler then click change login from the services window.



4. Click add to add new account then fill the info required.



5. Save the account info and restart the service.



B.

Agent Deployment.

When the agent configuration is ready we need to distribute it for all clients because LANDesk Managem

Suite is agent base system.

To deploy the agent follow these steps:

1. Open the agent configurations and right click the agent configuration you want to deploy to on clie

machines and choose (Schedule agent deployment).

That will create schedule task with the agent configuration name.

2. Now we need to add the desired machines from the unmanaged machines list to the task.

Open the unmanaged device discovery and select the desired machine.



3. Now drag and drop the selected machines to the task was created.

4. Now right click the task and start it to start the deployment.

When the agents installed successfully you can view all managed machines through you console as shown in below

example.



If you right click any managed machine you will find many features like Inventory and remote control.



Operating System Provisioning.

OSD one of the most important features needed with IT support team because that will help them

to save the time and effort to deploy OS and reimage any machine.

This feature has many steps to complete successfully:

1. We need to prepare a master Image to be deployed to all machines, some environment need more

than one master image based on their need.

2. Prepare capture Template to capture the master image and store it in your environment to be used

later.

3. Prepare deploy Template with the needed option to be used later.

Master Image preparation.

Any organization has some applications used by the end user and some specific configurations need

to be applied for all end user and as we know the huge environment has many machines need reimage at

the same time so LANDesk OS Provisioning will help to handle this process with less time and effort, all

what we need now is to prepare the master image with all applications and software and configuration and

make it ready to capturing.

After preparation the Image we need to use sysprep tool for best performance and best result.

To use sysprep with windows 7 follow the snaps below:



Capture Template Preparation.

We will give an example for windows 7 capturing.

1. Open the Operating System Provisioning tool in the LANDesk Console.

2. In the OS Provisioning tool, click New Template then select Capture Template.



3. Fill the required data and click Create.

4. Open the created template and validate the data and modify its actions if needed.





Now the capture template is ready to be used



Deployment Script Preparation.

1. Open the Operating System Provisioning tool in the LANDesk Console.

2. In the OS Provisioning tool, click New Template then select Capture Template.

3. Fill the data and click create.



4. Open the created template and validate the data and modify its actions if needed.





Click OK and now the deployment template is ready to be used.



Network Boot the Windows 7 computer and capture the image

1. PXE boot the computer. Follow the computer manufacturers instructions on how to PXE Boot the

computer. This requires configuring the BIOS settings to do a Network boot.

2. Press F8 when the option comes up when the computer is booted. The PROXY IP address should be the

IP address of the PXE Representative for the subnet.

3. Select WinPE Provisioning in the list and press enter.

4. Wait for boot file to load.

5. Enter your credential when prompted then Select the template which created previously and click OK.



6. Wait for the image to be captured. When the capture is complete the computer will restart.

You can use the same previous steps for OS deployment by choosing the deployment template.



Reports and Queries

Sense LANDesk Management Suite can collect all information about software and hardware for any mach

connected to the network they gave the ability for LANDesk admin to create any query about any data he ne

In this section we will show you how to create new query and how to create new report.

LANDesk Queries.

To create new query follow the steps below:

1. Expand the server view and queries then click on my queries.

2. Right click my queries and select new query.



3. Choose the items you are building the query for and create the condition from them and choose

information you need to know about the machines which comply with your condition and save the qu

with meaningful name.

LANDesk Reporting.

The LANDesk reporting is very powerful and helpful tool, LANDesk already has predefined report can be u

and LANDesk give the ability to create your custom report based on your need.

You can find the predefined report from Report as the following:

1. After login to the LANDesk console click on Reporting/Monitoring then click on reports.

2. Expand the stander report from the report sup window.



Now you can find all predefined reports sorted as groups.





4. Give a name for the report and click on Load from LDMS query.



5. Select your query as the example show.

6. Click OK twice to save the report.



Software Distribution

One of the very helpful tool or feature comes with LANDesk Management Suite is software distribution

which will help the support team to handle all request for new software and application installation or

upgrade.

LANDesk support many methods of packages (MSI packages, Executable packages and batch file).

Each package need to be handled separately and tested many times and on different platform to make sure

this package will work fine with LANDesk systems.

For example we will show how create the following package.

A.

Package preparation

1. Firstly we need to copy the original package.

2. Click Distribution tab and select Distribution packages from distribution menu and finally select

Public packages to create a new package and make it available for all support team and all LANDesk

users.

NOTE: In this example we will work on Adobe reader executable file and show how to create installation

package with silent installation feature.





4. Now we will fill all info required for this package.

Enter the name for this package and browse to your original package file and select it.

5. Click on install/uninstall options and enter the required command parameters for the installation.



NOTE: The command’s parameters are different from package to another and some packages have

complex commands you can review these parameters by using the (/Help or /?) parameters.

6. From Additional files we will add all related file needed to complete the installation successfully.



NOTE: Not all packages have additional files so we need to use this only with the packages have multiple

files for installation.

7. Finally we need to give a domain admin account to be used for installation as shown.

8. Click Save to save the package and now the package is ready to be distributed.



B.

Package Deployment.

To deploy any saved package you only need to follow these steps.

1. Right click the saved package you want to deploy.

2. Select Create schedule task.

That will create schedule task for package deployment with the same name of the package.



3. Form the managed devices list select the machine you want to deploy the package on it then drag

and drop it to the task.

4. Right click the task and select start now – All.



LANDesk Patch Manager.

LANDesk Patch manager responsibility is patching the end user machines to keep them without

vulnerability may cause any security issue in your environment.

This module need more time to work on and need an attention from the admin who will work on it.

Now we will show how to deal with LANDesk Patch manager step by step.

1. Login to LANDesk console then click (Security and compliance).

2. Choose (Patch and Compliance) from the Security and compliance menu.

3. Click the download patches icon.

From the download window we will chose the patches we want to download and select the language t

specify where to save the downloaded definitions and create schedule task for patches and definit

download.



Select the required Definition types and Languages for the environment. Microsoft Windows Vulnerabilities

the most commonly downloaded vulnerability type. Microsoft Windows Vulnerabilities contain the patches

the Windows Operating Systems as well as the patches for common applications for the Windows Opera

System such as Adobe Reader and Microsoft Office. Check the box for Put new definitions in “Unassign

group so that all of the definitions are downloaded to the (Unassigned) folder.

When you set the settings click apply to save them then click (Schedule download) to create download task.



4. Create the schedule download task for patches and definitions.

Verify the setting and click OK to confirm.

Enter the time and the repeating period and click save when you finish.



Now all selected definitions will be saved in unassigned group.

5. Choose the required patches only and move them to scan group.

6. Copy the content of Scan group to (Patch Deployment (All Patches)) group.

7.

Now we need to perform security scan for all user.

In the Patch and Compliance window, click the Create a task icon in the toolbar and select Secur

Scan from the drop-down list. The Create security scan task window appears.





Drag computers from All Devices in the Console and drop them on the Security Scan task (Patch

Compliance Scan) in the Scheduled tasks window. Drag all computers that the Security scan needs to

run on to the task.

Right-click the Security Scan task (Patch and Compliance Scan) in the Scheduled tasks window and

Start now to immediately run the Security Scan task. Or, select Properties to schedule a time for

Security Scan to run. It is recommended to run the Security Scan task during non-business hours beca

the Security Scan will impact the performance of the computer.



When the task finish the LANDesk Patch manager will have full info about the needed patches for all mach

and not all machines have autofix option the patches will be installed on test machines only. You need

monitor these machines foe two weeks then create repair settings for all machines if all patches are approve

8. Crate repair task for Patch Deployment (All Patches) group.

Right-click Patch Deployment (All Patches) group and select the Repair option.

Verify that the correct scan and repair setting is shown in the Scan and repair settings box.

Click OK to create the repair task.

Drag and drop the desired machines you want to patch.

Start the task.

That will repair all machines and make your environment without vulnerability.

You can use the following diagram as quick reference for patching process.



Download the latest definitions to core server

and save it to unassigned group

Review the definitions and move the critical

and important/High to scan group and

Patch Deployment (All Patches) group

Perform security scan on all Bahri machines

Download all required patches and save it to

core server

Perform scan and repair task with auto fix

feature on group of test machines

Two week testing

to approve the

patches or not

Copy approved patches to compliance group then

perform compliance scan to all Bahri machines

Copy none approved

patches to do not scan

group

None Approved

Patches

Approved Patches



Appendix A:

System requirements.

Software Requirements:

Microsoft Windows Server 2012 R2 with Update 1, 64-bit

The install language of the Microsoft Windows Server 2008 R2 should match the language LANDesk in

language and the language of all Remote Consoles.

Microsoft SQL Server 2008 R2 installed on separate server.

Hardware recommendations:

Two Quad-core, 64-bit processors (8 CPU cores total).

8 - 12 GB of RAM or more.

Gigabit network adapter.

3 storage arrays with 72 GB of free space.



Appendix B:

LDMS Database creation

Open SQL Server Management Studio. Start | All Programs | Microsoft SQL Server 2008 | SQL Server

Management Studio.

Enter the Login and Password and click Connect.

Create a new database by right clicking on the Database folder choosing ―New Database…



Enter the desired Database name.

Leave the owner as <default>. This is required for the LDMS database to function properly. Do not cha

this from <default> .

Set the Row Data Initial file size to the number of nodes to be managed by this core multiplied by 2.

Set the log file initial file size to be 25% of data file with a minimum of 30MB.

Modify the Path to save the Data and Log files to a different location. (Optional).

Click on the Options page.

On the Options Page, change the Recovery model to Simple.

Click OK



Create a new user for the LANDesk® Database

Expand the Security folder and right click Logins, choose New Login.

Change Authentication to SQL Server then enter the login name and password.

Uncheck Enforce password policy.

The Login Password to be used by the LANDesk Database install must be 8 characters minimum w

numbers and letters.

Click on the Server Roles page.



Check sysadmin if doing an LDMS database upgrade. Leave public checked for both upgrades or

database installs. In the event of an upgrade, the sysadmin role can be removed from the login once

upgrade succeeds.

Click on the User Mapping page.

Check the box next to the database to map the user.

Check the db_owner box in the role membership section.

Click OK

LANDesk User Guide

Documents