4 LANDesk 9.5 SP1 Updates Mobility OS X Inventory Patch HP Integration Printer ManagementSecurity SuiteIntelAuditingFIPS 140-2Remote ControlFlexeraCloud Service ApplianceData AnalyticsAgentSmartVueProvisioningLinux/UnixSWD
6 Clean Up The Patch Management Disable Replaced Rules WizardAdobe FlashSun JavaItunes
7 Clean Up The Patch Management Purge Distribution and Patch DefinitionsEliminates unnecessary Operating SystemsEliminates unnecessary languages
8 Clean Up The Patch Management Delete Unnecessary PatchesDelete patches in Do Not Scan and unassigned groupsDelete undetected patches
9 Patching – Application EOL Detection Application End Of Life DetectionPublish by ContentLeverage LANDesk Patch ManagerAlready supportMS Office 2000/XPAdobe Acrobat Pro/Sta 6.x,7.x, 8.xAdobe Reader 6.x, 7.x, 8.xJava SE 1.3, 1.4, 5.0
10 Prepare Patch Reports Gather Historical Information Schedule to run on a daily basis
11 Avoid Impacting UsersConfigure CPU Utilization during scan for low impact
12 New Feature Do Not Disturb if… Maximize end-user productivityReduce unwanted disruptionsDetect full screen appsDynamically hide scan dialog
13 Configure Reboot options Change DefaultsAllow user to deferReboot if no one is loggedAfter Time out snoozeIncrease Timeout
14 Patching – Application Interference Increased first pass success rateJavaBrowser pluginsCustom applicationsClose applications prior to patchingPrevent / block applications from running during the patch process
15 What you see on the client… Configured toPromptDon’t allow defer or cancelShows apps that must close.Dynamically updates list as apps are closed by user.
16 Process to Kill are Definition Based Clone VulnerabilityEdit Detection RuleAdd Process to stop
17 Autofix by Scope Supports Targeted Repairs Fewer Scheduled Tasks to manage
18 Create query for affected computers Scenario: Administrator wants to quickly and easily create a vulnerability query to represent affected computers.New right-click optionThe “IN” clause is not editable in the DAL query editor.
19 New Feature 9.5 SP1 Patching – Maintenance Windows Controlled and Predictable maintenanceAutofix policies are queuedMachine state detectionMore aggressive reboot controls become possible
20 Patching – Application Interference Increased first pass success rateJavaBrowser pluginsCustom applicationsClose applications prior to patchingPrevent / block applications from running during the patch process
21 Patching – Application EOL Detection Application End Of Life DetectionPublish by ContentLeverage LANDesk Patch ManagerAlready supportMS Office 2000/XPAdobe Acrobat Pro/Sta 6.x,7.x, 8.xAdobe Reader 6.x, 7.x, 8.xJava SE 1.3, 1.4, 5.0
22 Vulnerability severity override Scenario: Administrator disagrees with the predefined severity of a vulnerability definition and/or wants to “lock down” reviewed severities.Right-click multi-selected definitions is allowed. The “focused” definition’s current settings are displayed.For backward compatibility in the database, “Severity” still contains the current value.“OrigSeverity” is null if no override has been specified. Otherwise, it stores the LANDesk-supplied severity.
24 Desktop Manager New interface Customizable branding Deliver Links, Docs & AppsPackages and links can be placed in categories“Chrome-less” app launchingWPF and EXELaunchpad integratedTask history of client changes
25 Software Distribution Package BundlesLeverages groups in distribution packagesSet the installation order (one level)Allows for packages to be grouped and ordered (one level)Categories are supportedGroup multiple packages or bundlesBundle within a bundle within a bundle.Schedule the bundle like you would custom groups.Internally what we do is the “My Packages” and “All”, are just bundles.Allows you to schedule one level deep.No circular bundles.
26 Software Distribution New Streamed Document package typeLink for any file type (.txt, .pdf, .docx, .msi, etc.)Associated applicationStreamed from the portal (new portal only), not downloaded to the clientUses the current associated shell application (by file extension) defined for the client operating systemHave to have an associated application with the extension.New portal only. You can point to any file you want. When it shows in the portal it streams to the source file. You need to have an associate application with the extension.You could point to an MSI as a stream share.Use case, say you want to deploy office with a text file for Outlook settings or instructions for your end users.Streaming from UNC, no cached copy from the client, uses all security settings within UNC. Credentials are not specified anywhere as we inherently get access based on the UNC Security.
27 Software Distribution Default Delivery MethodNew shared control to select the delivery methodGlobal valueOnly enabled for AdministratorsOne global default. Not a default within the sub categories, push, policy, etc..
28 Software Distribution New package pre-cache featureOnly downloads package files to client machines, will not perform package installationMac – 30 daysPC – 7 daysIt just downloads files. Keep it simple image.Initially built for the MAC application installs but made available to all platforms.
29 Software Distribution Task HistoryTask history is automatically gathered and stored in the client databaseTask History MaintenanceEnable automatic cleanup of task history in the client databaseConfigured in Agent settings and must be associated with each client (Agent configuration / Agent settings)Configurable by days to keep, a value of 0 will delete all task history from the client databaseIf not set, all task history will continue to be storedSettings stored in each client machine registry under LANDesk/ManagementSuite/WinClient/SoftwareDistribution/InventorySettingsClientDatabaseHistoryDays: Specifies days to keep history, -1 or 0xffffffff if not set (all task history will be kept)See the history, what’s been installed, when, when attempted, failed, etc…Once it completes a package task it will then update it’s history agenda.Checked means it will maintain and keep for x days. Unchecked it does not maintain and everything is kept.
30 Software Distribution Task History/Maintenance continuedInventory scanner automatically sends client task history to the core databaseLocated in inventory under LANDesk Management / SWD / HistoryIf you have a bundle it will show you the bundle and the suplemental packages.It’s gives task ID and package ID.
31 Software Distribution Automatically run inventory scanner after package installationInventory settings located in Agent settings UIRequires an Inventory setting to be associated with each client (Agent configuration / Agent Settings)Creates a local scheduler task from the current time plus a delayIf multiple packages are installed, the local scheduled task is added/updated with the new time. Always uses the same task id (779)Two delay settingsInitial delay, minimum of 5 minutes, maximum of 60 minutes, default 5 minutesAdditional random delay to help stagger scans (reduce the load on the core), minimum of 0 minutes and maximum of 60 minutes, default 15 minutes (will randomize between 0 and the value set)Settings stored in each client machine registry under LANDesk/ManagementSuite/WinClient/SoftwareDistribution/InventorySettingsInventoryScanDelayAfterPackageInstall: High word is the initial delay, low word is the additional random delay, -1 or 0xffffffff if not set (inventory scanner will not run after package install)This was the #1 feature asked for at interchange.3 packages chained, it will update the already created local scheduler task to update the time.You can’t hard code it past 60. It will just exitHigh Word: First 4 hex digits,Low Word: Last 4 hex digits,0xffff / ffff