LANDesk User Guide

LANDesk Management Suite guide
Content:
Performing a New Installation
Unmanaged Devices Discovery (UDD) ..
Agent configuration and Deployment ..
11
Agent configuration. 11
Add service account .. 24
Agent Deployment
27
Operating system Deployment (OSD) .
30
Master Image preparation
30
Capture Template Preparation ....
31
Deployment Template Preparation
35
Booting from network (BXE boot) 39

Reports and Queries
41
LANDesk Queries
41
LANDesk Reporting . 42
Software Distribution ..
47
LANDesk Patch Manager .
53
Appendix (A) System Requirements ..
62
Appendix (B) LDMS Database creation
63
Done By Fourth Dimension Systems
Performing a New Installation

To perform the installation of Management Suite 9.5 check the appendix and follow below steps:
1. Download the Package from LANDesk website and run it on your server.
2. Click Continue after selecting the appropriate language.
3. Read the Terms and Conditions, then if you agree check the box that says I accept the terms in this license
agreement then select continue.
2
4. Click the Core Server option.

The next screen checks to make sure that the server has passed the prerequisites. If the prerequisite checker
detects that it is missing a required feature, the screen shows a button with Install Prerequisites.
5. Select Install Prerequisites

3
6. Click the Continue button.

7. You will be prompted for the database information for the new server we will select new DB and Microsoft
SQL Server.
8. Select Microsoft SQL Server
9. Enter the server name of the database server in the Server field.
10. Enter the name of the database in the Database field.
11. Enter the username and password in the User name and Password field.
12. Once the data is entered, click Test Connection to test database connectivity or Select Continue.
13. Next, you are prompted for the location where you would like LANDESK Management Suite installe d.
14. Choose the default location or if desired, change it and select Continue and the Management Suite 9.6
software summary is shown.
5
15. Click Install.
16. When the installation finishes, you will be prompted to reboot. Select Reboot.
17. Activate your core once the core server has finished rebooting.
The new Core Server installation is complete.

7
Now your LANDesk server is ready, run the console from program and login using your domain account.
After the installation and activation for the core server the first thing we will do is (Unmanaged devices
discovery).
Unmanaged Devices Discovery (UDD)

To perform this scan follow the following steps:
1. Login to LANDesk Console.
2. From the left side tabs click on configurations.
3. From the configuration menu appear above the tabs click (Unmanaged Devices Discovery).
4. Then click the button for network scan as shown.
Now we have many methods to perform the scan.
As shown we configured scan for Bahri Domain and DMZ IP range to scan all the DMZ subnets .
5. After the configuration you just need to click (Scan now) and the result will appear as shown below.
Now we have list of our unmanaged machines and we are ready to configure and deploy the LANDesk Agent.
10
Agent configuration and deployment

Before deploying the LANDesk agent we need to configure it and give him the appropriate feature and
permissions based on our environment need and give the systems service account with admin privilege.
A. Agent configurations.
The following steps are for agent configuration:
1. Login to LANDesk console.
2. Click on configuration tab then choose agent configuration from configuration menu.
3. Click on (+) icon to create new configuration and choose (New Windows Agent configuration).
11
4. From the start page you will give a name for this agent and choose the feature you want to install with
agent.
12
5. Now we will configure the inventory scan schedule time.
13
6. Now we will configure the remote control settings as follows.

Clicks configure to add new or edit configuration.
14
Click new for new configuration and give a name for the settings and choose the feature to enable it
during the remote control session.
The indicator setting is related to agent and remote control and the recommended settings are:
15
The permission option is to give the support engineer the appropriate permission to access the
machines.
16
17
Then save the settings and use it with the agent settings.
7. For patch and compliance setting for windows patching and vulnerability scan here you only need to
choose the prober settings to be applied with the agent , for all clients we use the (Bahri Default
Distribution and Patch settings) and for the test group we will use (Bahri Workstation Disteibution and
Patch Testing ).
Now we will show how to create these settings:
Click the Configure button.
Click new to create your own scan and repair settings.
18
19
Give a name for your setting and check the Network settings.
For scan option we will set the scan for our own definition group (Workstation Microsoft Patches)
and about autofix option you must uncheck for default setting but you need to check it for testing
group setting.
20
21
Click save to save the settings with Agent configuration.

Select the settings you just saved the click use selected.
Save the agent configuration to use it later.

Now LANDesk default agent is ready to be deployed to all Bahri machines.
22
NOTE: We configure four agents as shown.

1. Bahri Default Agent: this Agent contains the following settings for all Bahri client.
Bahri Default remote control settings with permissions
Bahri Default Distribution and Patch settings without autofix option
2. Bahri Workstation Patches test agent : this agent has different settings as the following:
Bahri Default remote control settings with permissions
Bahri Default Distribution and Patch settings with autofix option
3. Bahri Agent for server (Patch testing).
Bahri remote control settings without permissions
Bahri Distribution and Patch settings with autofix option
4. Bahri Agent for server.
Bahri remote control settings without permissions
Bahri Distribution and Patch settings without autofix option
23
Now you need to add domain admin account to system to be able to deploy the agent on clients machines.
To add this account do the following:
1. Click configure tab from the head of window.
2. Choose services.
3. Click scheduler then click change login from the services window.
24
4. Click add to add new account then fill the info required.
25
5. Save the account info and restart the service.
26
B. Agent Deployment.
When the agent configuration is ready we need to distribute it for all clients because LANDesk Management
Suite is agent base system.
To deploy the agent follow these steps:
1. Open the agent configurations and right click the agent configuration you want to deploy to on clients
machines and choose (Schedule agent deployment).
That will create schedule task with the agent configuration name.
2. Now we need to add the desired machines from the unmanaged machines list to the task.
Open the unmanaged device discovery and select the desired machine.
27
3. Now drag and drop the selected machines to the task was created.
4. Now right click the task and start it to start the deployment.
When the agents installed successfully you can view all managed machines through you console as shown in below
example.
28
If you right click any managed machine you will find many features like Inventory and remote control.
29
Operating System Provisioning.

OSD one of the most important features needed with IT support team because that will help them
to save the time and effort to deploy OS and reimage any machine.
This feature has many steps to complete successfully:
1. We need to prepare a master Image to be deployed to all machines, some environment need more
than one master image based on their need.
2. Prepare capture Template to capture the master image and store it in your environment to be used
later.
3. Prepare deploy Template with the needed option to be used later.
Master Image preparation.
Any organization has some applications used by the end user and some specific configurations need
to be applied for all end user and as we know the huge environment has many machines need reimage at
the same time so LANDesk OS Provisioning will help to handle this process with less time and effort, all
what we need now is to prepare the master image with all applications and software and configuration and
make it ready to capturing.
After preparation the Image we need to use sysprep tool for best performance and best result.
To use sysprep with windows 7 follow the snaps below:
30
Capture Template Preparation.

We will give an example for windows 7 capturing.
1. Open the Operating System Provisioning tool in the LANDesk Console.
2. In the OS Provisioning tool, click New Template then select Capture Template.
31
3. Fill the required data and click Create.

4. Open the created template and validate the data and modify its actions if needed.
32
33
Now the capture template is ready to be used
34
Deployment Script Preparation.

1. Open the Operating System Provisioning tool in the LANDesk Console.
2. In the OS Provisioning tool, click New Template then select Capture Template.
3. Fill the data and click create.
35
4. Open the created template and validate the data and modify its actions if needed.
36
37
Click OK and now the deployment template is ready to be used.
38
Network Boot the Windows 7 computer and capture the image

1. PXE boot the computer. Follow the computer manufacturers instructions on how to PXE Boot the
computer. This requires configuring the BIOS settings to do a Network boot.
2. Press F8 when the option comes up when the computer is booted. The PROXY IP address should be the
IP address of the PXE Representative for the subnet.
3. Select WinPE Provisioning in the list and press enter.
4.
Wait for boot file to load.
5. Enter your credential when prompted then Select the template which created previously and click OK.
39
6.
Wait for the image to be captured. When the capture is complete the computer will restart.
You can use the same previous steps for OS deployment by choosing the deployment template.
40
Reports and Queries

Sense LANDesk Management Suite can collect all information about software and hardware for any machine
connected to the network they gave the ability for LANDesk admin to create any query about any data he need.
In this section we will show you how to create new query and how to create new report.
LANDesk Queries.
To create new query follow the steps below:
1. Expand the server view and queries then click on my queries.
2. Right click my queries and select new query.
41
3. Choose the items you are building the query for and create the condition from them and choose the
information you need to know about the machines which comply with your condition and save the query
with meaningful name.
LANDesk Reporting.
The LANDesk reporting is very powerful and helpful tool, LANDesk already has predefined report can be used
and LANDesk give the ability to create your custom report based on your need.
You can find the predefined report from Report as the following:
1. After login to the LANDesk console click on Reporting/Monitoring then click on reports.
2. Expand the stander report from the report sup window.
42
Now you can find all predefined reports sorted as groups.
43
From these report you can find many useful reports may help you in your work and they will help you to save
time and effort to collect any information related to your network.
If these reports did not meet your need you can build your own report based on your query which built before.
To create custom reports do the following:
1. Open the reports widows as explain before.
2. Right click My reports.
3. Select new report.
44
4. Give a name for the report and click on Load from LDMS query.
45
5. Select your query as the example show.
6. Click OK twice to save the report.
46
Software Distribution
One of the very helpful tool or feature comes with LANDesk Management Suite is software distribution
which will help the support team to handle all request for new software and application installation or
upgrade.
LANDesk support many methods of packages (MSI packages, Executable packages and batch file).
Each package need to be handled separately and tested many times and on different platform to make sure
this package will work fine with LANDesk systems.
For example we will show how create the following package.
A. Package preparation
1. Firstly we need to copy the original package.
2. Click Distribution tab and select Distribution packages from distribution menu and finally select
Public packages to create a new package and make it available for all support team and all LANDesk
users.
NOTE: In this example we will work on Adobe reader executable file and show how to create installation
package with silent installation feature.
47
3. Click the (+) icon to create new package then select the type of package you want to create, in our
example we will use new executable package.
48
4. Now we will fill all info required for this package.

Enter the name for this package and browse to your original package file and select it.
5. Click on install/uninstall options and enter the required command parameters for the installation.
49
NOTE: The commands parameters are different from package to another and some packages have
complex commands you can review these parameters by using the (/Help or /?) parameters.
6. From Additional files we will add all related file needed to complete the installation successfully.
50
NOTE: Not all packages have additional files so we need to use this only with the packages have multiple
files for installation.
7. Finally we need to give a domain admin account to be used for installation as shown.
8. Click Save to save the package and now the package is ready to be distributed.
51
B. Package Deployment.
To deploy any saved package you only need to follow these steps.
1. Right click the saved package you want to deploy.
2. Select Create schedule task.
That will create schedule task for package deployment with the same name of the package.
52
3. Form the managed devices list select the machine you want to deploy the package on it then drag
and drop it to the task.
4. Right click the task and select start now All.
53
LANDesk Patch Manager.

LANDesk Patch manager responsibility is patching the end user machines to keep them without any
vulnerability may cause any security issue in your environment.
This module need more time to work on and need an attention from the admin who will work on it.
Now we will show how to deal with LANDesk Patch manager step by step.
1. Login to LANDesk console then click (Security and compliance).
2. Choose (Patch and Compliance) from the Security and compliance menu.
3. Click the download patches icon.
From the download window we will chose the patches we want to download and select the language then
specify where to save the downloaded definitions and create schedule task for patches and definitions
download.
54
Select the required Definition types and Languages for the environment. Microsoft Windows Vulnerabilities are
the most commonly downloaded vulnerability type. Microsoft Windows Vulnerabilities contain the patches for
the Windows Operating Systems as well as the patches for common applications for the Windows Operating
System such as Adobe Reader and Microsoft Office. Check the box for Put new definitions in Unassigned
group so that all of the definitions are downloaded to the (Unassigned) folder.
When you set the settings click apply to save them then click (Schedule download) to create download task.
55
4. Create the schedule download task for patches and definitions.
Verify the setting and click OK to confirm.
Enter the time and the repeating period and click save when you finish.
56
Now all selected definitions will be saved in unassigned group.

5. Choose the required patches only and move them to scan group.
6. Copy the content of Scan group to (Patch Deployment (All Patches)) group.
7. Now we need to perform security scan for all user.

In the Patch and Compliance window, click the Create a task icon in the toolbar and select Security
Scan from the drop-down list. The Create security scan task window appears.
57
58
Drag computers from All Devices in the Console and drop them on the Security Scan task (Patch and
Compliance Scan) in the Scheduled tasks window. Drag all computers that the Security scan needs to be
run on to the task.
Right-click the Security Scan task (Patch and Compliance Scan) in the Scheduled tasks window and click
Start now to immediately run the Security Scan task. Or, select Properties to schedule a time for the
Security Scan to run. It is recommended to run the Security Scan task during non-business hours because
the Security Scan will impact the performance of the computer.
59
When the task finish the LANDesk Patch manager will have full info about the needed patches for all machines
and not all machines have autofix option the patches will be installed on test machines only. You need to
monitor these machines foe two weeks then create repair settings for all machines if all patches are approved.
8. Crate repair task for Patch Deployment (All Patches) group.
Right-click Patch Deployment (All Patches) group and select the Repair option.
Verify that the correct scan and repair setting is shown in the Scan and repair settings box.
Click OK to create the repair task.
Drag and drop the desired machines you want to patch.
Start the task.
That will repair all machines and make your environment without vulnerability.
You can use the following diagram as quick reference for patching process.
60
Download the latest definitions to core server

and save it to unassigned group
Review the definitions and move the critical

and important/High to scan group and
Patch Deployment (All Patches) group
Perform security scan on all Bahri machines
Download all required patches and save it to

core server
Perform scan and repair task with auto fix

feature on group of test machines
None Approved
Patches
Two week testing

to approve the
patches or not
Copy none approved

patches to do not scan
group
Approved Patches
Copy approved patches to compliance group then

perform compliance scan to all Bahri machines
61
Appendix A:
System requirements.
Software Requirements:
Microsoft Windows Server 2012 R2 with Update 1, 64-bit
The install language of the Microsoft Windows Server 2008 R2 should match the language LANDesk install
language and the language of all Remote Consoles.
Microsoft SQL Server 2008 R2 installed on separate server.
Hardware recommendations:
Two Quad-core, 64-bit processors (8 CPU cores total).

8 - 12 GB of RAM or more.
Gigabit network adapter.
3 storage arrays with 72 GB of free space.
62
Appendix B:
LDMS Database creation
Open SQL Server Management Studio. Start | All Programs | Microsoft SQL Server 2008 | SQL Server
Management Studio.
Enter the Login and Password and click Connect.
Create a new database by right clicking on the Database folder choosing New Database
63
Enter the desired Database name.

Leave the owner as <default>. This is required for the LDMS database to function properly. Do not change
this from <default> .
Set the Row Data Initial file size to the number of nodes to be managed by this core multiplied by 2.
Set the log file initial file size to be 25% of data file with a minimum of 30MB.
Modify the Path to save the Data and Log files to a different location. (Optional).
Click on the Options page.
On the Options Page, change the Recovery model to Simple.

Click OK
64
Create a new user for the LANDesk Database

Expand the Security folder and right click Logins, choose New Login.
Change Authentication to SQL Server then enter the login name and password.
Uncheck Enforce password policy.
The Login Password to be used by the LANDesk Database install must be 8 characters minimum with
numbers and letters.
Click on the Server Roles page.
65
Check sysadmin if doing an LDMS database upgrade. Leave public checked for both upgrades or new
database installs. In the event of an upgrade, the sysadmin role can be removed from the login once the
upgrade succeeds.
Click on the User Mapping page.
Check the box next to the database to map the user.

Check the db_owner box in the role membership section.
Click OK
66

LANDesk User Guide

Caricato da

Informazioni sul documento

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

LANDesk User Guide

Caricato da

Copyright:

Formati disponibili

LANDesk Management Suite guide

Unmanaged Devices Discovery (UDD) ..

Agent configuration and Deployment ..

Operating system Deployment (OSD) .

Master Image preparation

Capture Template Preparation ....

Deployment Template Preparation

Booting from network (BXE boot) 39

LANDesk Patch Manager .

Appendix (A) System Requirements ..

Appendix (B) LDMS Database creation

Done By Fourth Dimension Systems

Performing a New Installation

2. Click Continue after selecting the appropriate language.

Done By Fourth Dimension Systems

4. Click the Core Server option.

5. Select Install Prerequisites

Done By Fourth Dimension Systems

6. Click the Continue button.

8. Select Microsoft SQL Server

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

15. Click Install.

Done By Fourth Dimension Systems

The new Core Server installation is complete.

Done By Fourth Dimension Systems

Unmanaged Devices Discovery (UDD)

Done By Fourth Dimension Systems

4. Then click the button for network scan as shown.

Now we have many methods to perform the scan.

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Agent configuration and deployment

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

5. Now we will configure the inventory scan schedule time.

Done By Fourth Dimension Systems

6. Now we will configure the remote control settings as follows.

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Click the Configure button.

Click new to create your own scan and repair settings.

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Click save to save the settings with Agent configuration.

Done By Fourth Dimension Systems

Save the agent configuration to use it later.

Done By Fourth Dimension Systems

NOTE: We configure four agents as shown.

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

5. Save the account info and restart the service.

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Done By Fourth Dimension Systems

Operating System Provisioning.

Done By Fourth Dimension Systems

Capture Template Preparation.

Done By Fourth Dimension Systems