8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 1/67
LANDesk Management Suite guide
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 2/671 Done By Fourth Dimension Sys
Content:
Performing a New Installation ………………………………………………………………………………… 2
Unmanaged Devices Discovery (UDD) …………………………………………………………………….. 8
Agent configuration and Deployment ………………………………………………………….…………. 11
Agent configuration…………………………………………………………………………………………. 11
Add service account ……………………………………………………………………………………….. 24
Agent Deployment ………………………………………………………………………………………… 27
Operating system Deployment (OSD) .……………………………………………………………………… 30
Master Image preparation ……………………………………………………………………………… 30
Capture Template Preparation …………………………………………………………………….... 31
Deployment Template Preparation ………………………………………………………………… 35
Booting from network (BXE boot) …………………………………………………………………… 39
Reports and Queries ………………………………………………………………………………………………… 41
LANDesk Queries …………………………………………………………………………………………… 41
LANDesk Reporting ………………………………………………………………………………… .……… 42
Software Distribution ……………………………………………………………………………………………….. 47
LANDesk Patch Manager …………………………………………………………………………………………. 53
Appendix (A) System Requirements ..…………………………………………………………………… 62
Appendix (B) LDMS Database creation …………………………………………………………………… 63
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 3/67
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 4/673 Done By Fourth Dimension Sys
4. Click the Core Server option.
The next screen checks to make sure that the server has passed the prerequisites. If the prerequisite checke
detects that it is missing a required feature, the screen shows a button with Install
Prerequisites.
5. Select Install Prerequisites
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 5/674 Done By Fourth Dimension Sys
6. Click the Continue button.
7. You will be prompted for the database information for the new server we will select new DB and Micros
SQL Server.
8. Select Microsoft SQL Server
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 6/675 Done By Fourth Dimension Sys
9. Enter the server name of the database server in the Server field.
10. Enter the name of the database in the Database field.
11. Enter the username and password in the User name and Password field.
12. Once the data is entered, click Test Connection to test database connectivity or Select Continue.
13. Next, you are prompted for the location where you would like LANDESK® Management Suite installed.
14. Choose the default location or if desired, change it and select Continue and the Management Suite 9.6
software summary is shown.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 7/676 Done By Fourth Dimension Sys
15. Click Install.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 8/677 Done By Fourth Dimension Sys
16. When the installation finishes, you will be prompted to reboot. Select Reboot.
17. Activate your core once the core server has finished rebooting.
The new Core Server installation is complete.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 9/678 Done By Fourth Dimension Sys
Now your LANDesk server is ready, run the console from program and login using your domain account.
After the installation and activation for the core server the first thing we will do is (Unmanaged dev
discovery).
Unmanaged Devices Discovery (UDD)
To perform this scan follow the following steps:
1. Login to LANDesk Console.
2. From the left side tabs click on configurations.
3. From the configuration menu appear above the tabs click (Unmanaged Devices Discovery).
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 10/679 Done By Fourth Dimension Sys
4. Then click the button for network scan as shown.
Now we have many methods to perform the scan.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 11/6710 Done By Fourth Dimension Sys
As shown we configured scan for Bahri Domain and DMZ IP range to scan all the DMZ subnets .
5. After the configuration you just need to click (Scan now) and the result will appear as shown below.
Now we have list of our unmanaged machines and we are ready to configure and deploy the LANDesk Agent
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 12/6711 Done By Fourth Dimension Sys
Agent configuration and deployment
Before deploying the LANDesk agent we need to configure it and give him the appropriate feature
permissions based on our environment need and give the systems service account with admin privilege.
A.
Agent configurations.
The following steps are for agent configuration:
1. Login to LANDesk console.
2. Click on configuration tab then choose agent configuration from configuration menu.
3. Click on (+) icon to create new configuration and choose (New Windows Agent configuration).
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 13/6712 Done By Fourth Dimension Sys
4. From the start page you will give a name for this agent and choose the feature you want to install w
agent.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 14/67
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 15/6714 Done By Fourth Dimension Sys
6. Now we will configure the remote control settings as follows.
Clicks configure to add new or edit configuration.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 16/6715 Done By Fourth Dimension Sys
Click new for new configuration and give a name for the settings and choose the feature to enab
during the remote control session.
The indicator setting is related to agent and remote control and the recommended settings are:
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 17/6716 Done By Fourth Dimension Sys
The permission option is to give the support engineer the appropriate permission to access
machines.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 18/6717 Done By Fourth Dimension Sys
Then save the settings and use it with the agent settings.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 19/6718 Done By Fourth Dimension Sys
7. For patch and compliance setting for windows patching and vulnerability scan here you only need
choose the prober settings to be applied with the agent , for all clients we use the (Bahri Def
Distribution and Patch settings) and for the test group we will use (Bahri Workstation Disteibution
Patch Testing ).
Now we will show how to create these settings:
Click the Configure button.
Click new to create your own scan and repair settings.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 20/6719 Done By Fourth Dimension Sys
Give a name for your setting and check the Network settings.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 21/6720 Done By Fourth Dimension Sys
For scan option we will set the scan for our own definition group (Workstation Microsoft Patc
and about autofix option you must uncheck for default setting but you need to check it for tes
group setting.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 22/6721 Done By Fourth Dimension Sys
Click save to save the settings with Agent configuration.
Select the settings you just saved the click use selected.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 23/6722 Done By Fourth Dimension Sys
Save the agent configuration to use it later.
Now LANDesk default agent is ready to be deployed to all Bahri machines.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 24/6723 Done By Fourth Dimension Sys
NOTE: We configure four agents as shown.
1. Bahri Default Agent: this Agent contains the following settings for all Bahri client.
Bahri Default remote control settings “with permissions”
Bahri Default Distribution and Patch settings “without autofix option”
2. Bahri Workstation Patches test agent : this agent has different settings as the following: Bahri Default remote control settings “with permissions”
Bahri Default Distribution and Patch settings “with autofix option”
3. Bahri Agent for server (Patch testing).
Bahri remote control settings “without permissions”
Bahri Distribution and Patch settings “with autofix option”
4. Bahri Agent for server.
Bahri remote control settings “without permissions”
Bahri Distribution and Patch settings “without autofix option”
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 25/6724 Done By Fourth Dimension Sys
Now you need to add domain admin account to system to be able to deploy the agent on client’s machines.
To add this account do the following:
1. Click configure tab from the head of window.
2. Choose services.
3. Click scheduler then click change login from the services window.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 26/6725 Done By Fourth Dimension Sys
4. Click add to add new account then fill the info required.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 27/6726 Done By Fourth Dimension Sys
5. Save the account info and restart the service.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 28/6727 Done By Fourth Dimension Sys
B.
Agent Deployment.
When the agent configuration is ready we need to distribute it for all clients because LANDesk Managem
Suite is agent base system.
To deploy the agent follow these steps:
1. Open the agent configurations and right click the agent configuration you want to deploy to on clie
machines and choose (Schedule agent deployment).
That will create schedule task with the agent configuration name.
2. Now we need to add the desired machines from the unmanaged machines list to the task.
Open the unmanaged device discovery and select the desired machine.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 29/6728 Done By Fourth Dimension Sys
3. Now drag and drop the selected machines to the task was created.
4. Now right click the task and start it to start the deployment.
When the agents installed successfully you can view all managed machines through you console as shown in below
example.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 30/6729 Done By Fourth Dimension Sys
If you right click any managed machine you will find many features like Inventory and remote control.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 31/6730 Done By Fourth Dimension Sys
Operating System Provisioning.
OSD one of the most important features needed with IT support team because that will help them
to save the time and effort to deploy OS and reimage any machine.
This feature has many steps to complete successfully:
1. We need to prepare a master Image to be deployed to all machines, some environment need more
than one master image based on their need.
2. Prepare capture Template to capture the master image and store it in your environment to be used
later.
3. Prepare deploy Template with the needed option to be used later.
Master Image preparation.
Any organization has some applications used by the end user and some specific configurations need
to be applied for all end user and as we know the huge environment has many machines need reimage at
the same time so LANDesk OS Provisioning will help to handle this process with less time and effort, all
what we need now is to prepare the master image with all applications and software and configuration and
make it ready to capturing.
After preparation the Image we need to use sysprep tool for best performance and best result.
To use sysprep with windows 7 follow the snaps below:
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 32/6731 Done By Fourth Dimension Sys
Capture Template Preparation.
We will give an example for windows 7 capturing.
1. Open the Operating System Provisioning tool in the LANDesk Console.
2. In the OS Provisioning tool, click New Template then select Capture Template.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 33/6732 Done By Fourth Dimension Sys
3. Fill the required data and click Create.
4. Open the created template and validate the data and modify its actions if needed.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 34/67
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 35/6734 Done By Fourth Dimension Sys
Now the capture template is ready to be used
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 36/6735 Done By Fourth Dimension Sys
Deployment Script Preparation.
1. Open the Operating System Provisioning tool in the LANDesk Console.
2. In the OS Provisioning tool, click New Template then select Capture Template.
3. Fill the data and click create.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 37/6736 Done By Fourth Dimension Sys
4. Open the created template and validate the data and modify its actions if needed.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 38/6737 Done By Fourth Dimension Sys
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 39/6738 Done By Fourth Dimension Sys
Click OK and now the deployment template is ready to be used.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 40/6739 Done By Fourth Dimension Sys
Network Boot the Windows 7 computer and capture the image
1. PXE boot the computer. Follow the computer manufacturers instructions on how to PXE Boot the
computer. This requires configuring the BIOS settings to do a Network boot.
2. Press F8 when the option comes up when the computer is booted. The PROXY IP address should be the
IP address of the PXE Representative for the subnet.
3. Select WinPE Provisioning in the list and press enter.
4. Wait for boot file to load.
5. Enter your credential when prompted then Select the template which created previously and click OK.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 41/6740 Done By Fourth Dimension Sys
6. Wait for the image to be captured. When the capture is complete the computer will restart.
You can use the same previous steps for OS deployment by choosing the deployment template.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 42/6741 Done By Fourth Dimension Sys
Reports and Queries
Sense LANDesk Management Suite can collect all information about software and hardware for any mach
connected to the network they gave the ability for LANDesk admin to create any query about any data he ne
In this section we will show you how to create new query and how to create new report.
LANDesk Queries.
To create new query follow the steps below:
1. Expand the server view and queries then click on my queries.
2. Right click my queries and select new query.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 43/6742 Done By Fourth Dimension Sys
3. Choose the items you are building the query for and create the condition from them and choose
information you need to know about the machines which comply with your condition and save the qu
with meaningful name.
LANDesk Reporting.
The LANDesk reporting is very powerful and helpful tool, LANDesk already has predefined report can be u
and LANDesk give the ability to create your custom report based on your need.
You can find the predefined report from Report as the following:
1. After login to the LANDesk console click on Reporting/Monitoring then click on reports.
2. Expand the stander report from the report sup window.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 44/6743 Done By Fourth Dimension Sys
Now you can find all predefined reports sorted as groups.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 45/67
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 46/6745 Done By Fourth Dimension Sys
4. Give a name for the report and click on Load from LDMS query.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 47/6746 Done By Fourth Dimension Sys
5. Select your query as the example show.
6. Click OK twice to save the report.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 48/6747 Done By Fourth Dimension Sys
Software Distribution
One of the very helpful tool or feature comes with LANDesk Management Suite is software distribution
which will help the support team to handle all request for new software and application installation or
upgrade.
LANDesk support many methods of packages (MSI packages, Executable packages and batch file).
Each package need to be handled separately and tested many times and on different platform to make sure
this package will work fine with LANDesk systems.
For example we will show how create the following package.
A.
Package preparation
1. Firstly we need to copy the original package.
2. Click Distribution tab and select Distribution packages from distribution menu and finally select
Public packages to create a new package and make it available for all support team and all LANDesk
users.
NOTE: In this example we will work on Adobe reader executable file and show how to create installation
package with silent installation feature.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 49/67
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 50/6749 Done By Fourth Dimension Sys
4. Now we will fill all info required for this package.
Enter the name for this package and browse to your original package file and select it.
5. Click on install/uninstall options and enter the required command parameters for the installation.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 51/6750 Done By Fourth Dimension Sys
NOTE: The command’s parameters are different from package to another and some packages have
complex commands you can review these parameters by using the (/Help or /?) parameters.
6. From Additional files we will add all related file needed to complete the installation successfully.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 52/6751 Done By Fourth Dimension Sys
NOTE: Not all packages have additional files so we need to use this only with the packages have multiple
files for installation.
7. Finally we need to give a domain admin account to be used for installation as shown.
8. Click Save to save the package and now the package is ready to be distributed.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 53/6752 Done By Fourth Dimension Sys
B.
Package Deployment.
To deploy any saved package you only need to follow these steps.
1. Right click the saved package you want to deploy.
2. Select Create schedule task.
That will create schedule task for package deployment with the same name of the package.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 54/6753 Done By Fourth Dimension Sys
3. Form the managed devices list select the machine you want to deploy the package on it then drag
and drop it to the task.
4. Right click the task and select start now – All.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 55/6754 Done By Fourth Dimension Sys
LANDesk Patch Manager.
LANDesk Patch manager responsibility is patching the end user machines to keep them without
vulnerability may cause any security issue in your environment.
This module need more time to work on and need an attention from the admin who will work on it.
Now we will show how to deal with LANDesk Patch manager step by step.
1. Login to LANDesk console then click (Security and compliance).
2. Choose (Patch and Compliance) from the Security and compliance menu.
3. Click the download patches icon.
From the download window we will chose the patches we want to download and select the language t
specify where to save the downloaded definitions and create schedule task for patches and definit
download.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 56/6755 Done By Fourth Dimension Sys
Select the required Definition types and Languages for the environment. Microsoft Windows Vulnerabilities
the most commonly downloaded vulnerability type. Microsoft Windows Vulnerabilities contain the patches
the Windows Operating Systems as well as the patches for common applications for the Windows Opera
System such as Adobe Reader and Microsoft Office. Check the box for Put new definitions in “Unassign
group so that all of the definitions are downloaded to the (Unassigned) folder.
When you set the settings click apply to save them then click (Schedule download) to create download task.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 57/6756 Done By Fourth Dimension Sys
4. Create the schedule download task for patches and definitions.
Verify the setting and click OK to confirm.
Enter the time and the repeating period and click save when you finish.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 58/6757 Done By Fourth Dimension Sys
Now all selected definitions will be saved in unassigned group.
5. Choose the required patches only and move them to scan group.
6. Copy the content of Scan group to (Patch Deployment (All Patches)) group.
7.
Now we need to perform security scan for all user.
In the Patch and Compliance window, click the Create a task icon in the toolbar and select Secur
Scan from the drop-down list. The Create security scan task window appears.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 59/6758 Done By Fourth Dimension Sys
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 60/6759 Done By Fourth Dimension Sys
Drag computers from All Devices in the Console and drop them on the Security Scan task (Patch
Compliance Scan) in the Scheduled tasks window. Drag all computers that the Security scan needs to
run on to the task.
Right-click the Security Scan task (Patch and Compliance Scan) in the Scheduled tasks window and
Start now to immediately run the Security Scan task. Or, select Properties to schedule a time for
Security Scan to run. It is recommended to run the Security Scan task during non-business hours beca
the Security Scan will impact the performance of the computer.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 61/6760 Done By Fourth Dimension Sys
When the task finish the LANDesk Patch manager will have full info about the needed patches for all mach
and not all machines have autofix option the patches will be installed on test machines only. You need
monitor these machines foe two weeks then create repair settings for all machines if all patches are approve
8. Crate repair task for Patch Deployment (All Patches) group.
Right-click Patch Deployment (All Patches) group and select the Repair option.
Verify that the correct scan and repair setting is shown in the Scan and repair settings box.
Click OK to create the repair task.
Drag and drop the desired machines you want to patch.
Start the task.
That will repair all machines and make your environment without vulnerability.
You can use the following diagram as quick reference for patching process.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 62/6761 Done By Fourth Dimension Sys
Download the latest definitions to core server
and save it to unassigned group
Review the definitions and move the critical
and important/High to scan group and
Patch Deployment (All Patches) group
Perform security scan on all Bahri machines
Download all required patches and save it to
core server
Perform scan and repair task with auto fix
feature on group of test machines
Two week testing
to approve the
patches or not
Copy approved patches to compliance group then
perform compliance scan to all Bahri machines
Copy none approved
patches to do not scan
group
None Approved
Patches
Approved Patches
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 63/6762 Done By Fourth Dimension Sys
Appendix A:
System requirements.
Software Requirements:
Microsoft Windows Server 2012 R2 with Update 1, 64-bit
The install language of the Microsoft Windows Server 2008 R2 should match the language LANDesk in
language and the language of all Remote Consoles.
Microsoft SQL Server 2008 R2 installed on separate server.
Hardware recommendations:
Two Quad-core, 64-bit processors (8 CPU cores total).
8 - 12 GB of RAM or more.
Gigabit network adapter.
3 storage arrays with 72 GB of free space.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 64/6763 Done By Fourth Dimension Sys
Appendix B:
LDMS Database creation
Open SQL Server Management Studio. Start | All Programs | Microsoft SQL Server 2008 | SQL Server
Management Studio.
Enter the Login and Password and click Connect.
Create a new database by right clicking on the Database folder choosing ―New Database…
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 65/6764 Done By Fourth Dimension Sys
Enter the desired Database name.
Leave the owner as <default>. This is required for the LDMS database to function properly. Do not cha
this from <default> .
Set the Row Data Initial file size to the number of nodes to be managed by this core multiplied by 2.
Set the log file initial file size to be 25% of data file with a minimum of 30MB.
Modify the Path to save the Data and Log files to a different location. (Optional).
Click on the Options page.
On the Options Page, change the Recovery model to Simple.
Click OK
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 66/6765 Done By Fourth Dimension Sys
Create a new user for the LANDesk® Database
Expand the Security folder and right click Logins, choose New Login.
Change Authentication to SQL Server then enter the login name and password.
Uncheck Enforce password policy.
The Login Password to be used by the LANDesk Database install must be 8 characters minimum w
numbers and letters.
Click on the Server Roles page.
8/16/2019 LANDesk User Guide
http://slidepdf.com/reader/full/landesk-user-guide 67/67
Check sysadmin if doing an LDMS database upgrade. Leave public checked for both upgrades or
database installs. In the event of an upgrade, the sysadmin role can be removed from the login once
upgrade succeeds.
Click on the User Mapping page.
Check the box next to the database to map the user.
Check the db_owner box in the role membership section.
Click OK