KACE Systems Management Appliance 14.0 Common Documents - KACE Service Desk Administrator Guide

Set User Account Control: Run all administrators in Admin Approval Mode to Disabled. This option is recommended, because it is more secure and can be centrally configured using GPO. To find this setting, open the Group Policy (type secpol.msc into the Search programs and files field under the Start menu), then go to Local Policies > Security Options. Restart the device after applying the settings.

◦

Disable UAC. On Windows 7, go to Control Panel > System and Security > Action Center > Change User Account Control Settings. On Windows 8, go to Control Panel > System and Security > Administrative Tools > Local Security Policy, then in Security Options in the Local Policies section choose Disabled for each of the items labeled User Account Control.

On the Advanced Sharing Settings page, enable network discovery and file and printer sharing.

•

Prepare Windows Firewall

If Windows Firewall is enabled, you must enable File and Print Sharing in the Exceptions list of the Firewall Configuration. For instructions, see the Microsoft Support website.

•

Verify port availability

Verify the availability of ports 139 and 445.

The appliance verifies the availability of ports 139 and 445 on target devices before attempting to run any remote installation procedures.

NOTE: On Windows devices, ports 139 and 445, File and Print Sharing, and Administrator credentials are required only during Agent installation. You can disable access to these ports and services after installation if necessary. The Agent uses port 443 for ongoing communications.

NOTE: After installation, the Agent runs within the context of the Local System Account, which is a built-in account used by Windows operating systems.

Install the KACE Agent on a device or multiple devices

You can install the KACE Agent on a single device, or on multiple devices by specifying a range of IP addresses as targets for installation, using the Agent Provisioning Assistant. You can use this method to provision Windows, Mac, or Linux devices.

•

You have prepared all the target devices. See Preparing to install the KACE Agent.

•

You have information for the administrator account that has the necessary privileges to install Agents on the target devices.

With the Agent Provisioning Assistant, you can create provisioning schedules to specify how and when to install the KACE Agent on devices in your network. Provisioning according to a schedule is useful to help ensure that devices in an IP address range have the Agent installed.

Provisioning schedules configure the appliance to periodically check devices in a specified IP address range and install, reinstall, or uninstall the KACE Agent as needed.

For provisioning Windows devices, you can also use the appliance GPO Provisioning Tool. Using the tool minimizes the pre-configuration that must happen on the target device. See Provisioning the KACE Agent using the GPO Provisioning Tool for Windows devices.

Go to the Agent Provisioning Assistant:

Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.

On the left navigation bar, click Settings, then click Provisioning.

On the Provisioning panel, click Agent Provisioning Assistant.

The Agent Provisioning Assistant: Step 1 of 3 page appears.

Select Provisioning Using IP Range (Windows, Mac, Linux) and click Next to display the Provisioning Schedule Detail page.

In the Configure section, name the schedule, enable provisioning, and provide platform information:

Option

Description

Name

A unique name that identifies this configuration. The name appears on the Provisioning Schedules page.

Enabled

Enable provisioning schedules. Schedules run only if this check box is selected.

Install/Uninstall

Indicates whether the provisioning schedule deals with installing or uninstalling Agents.

Agent Token

The token the Agent uses to connect to the appliance. Select an existing Agent token or add a new one:

Select Add Agent Token.

In the Add Agent Token dialog box, provide the following information:

◦

Name:

◦

Enable Expiration: If you want this token to be valid for a limited time, select this check box, and specify the expiration date and time, as required. To change the specified date and time, click Clear, and provide the new expiration deadline.

◦

Enable Use Limit: If you want to specify the number of times the token can be used to register one or more agents with the appliance, select this check box, and in the field that appears, specify the maximum use count. Unless an agent's history is deleted from the appliance, the agent registers with the appliance only once, so this number represents the total number of times one or more agents can register with the appliance.

Click Save.

If you do not select an Agent token, when the Agent connects to the appliance for the first time, it remains in the quarantine list until the appliance administrator approves its connection request. For more information, see Registering KACE Agent with the appliance.

Credentials

Separate rows for the credentials needed to connect to the device and run commands for the particular platform targeted by the schedule. The first column contains the operating system. The second column contains the Agent Version in place for installation. The third column contains a drop-down list from which to select existing credentials. You can select Add new credential to add credentials not already listed.

See Add and edit User/Password credentials.

In the Deploy section, identify the devices to be included in the schedule:

Option

Description

Target IP addresses or hostnames

A comma-separated list of the IP addresses or host names of the target devices. Use hyphens to specify individual IP address class ranges.

Tip:	TIP: The appliance supports both IPv6 (Internet Protocol version 6) and IPv4 addresses.

The Help me pick devices link enables you to add devices to the Target IP addresses or Hostnames list:

•

Provisioning IP Range: Use hyphens to specify individual IP address class ranges. For example:

◦

IPv6: fdef:22b9:e8ae:14a9::1a0:f000-f0aa

◦

IPv4: 192.168.2-5.1-200

After specifying a range, click Add All

•

Select Devices from Discovery: This drop-down list is populated from the Discovery Results. To filter the contents, start typing in the field. After selecting a device, click Add All.

Set the time for the schedule to run.

Option

Description

None

Run in combination with an event rather than on a specific date or at a specific time.

Every n hours

Run at a specified interval.

Every day/specific day at HH:MM

Run daily at a specified time, or run on a designated day of the week at a specified time.

Run on the nth of every month/specific month at HH:MM

Run on the same day every month, or a specific month, at the specified time.

Run on the nth weekday of every month/specific month at HH:MM

Run on the specific weekday of every month, or a specific month, at the specified time.

Custom

Run according to a custom schedule.

Use standard 5-field cron format (extended cron format is not supported):

Use the following when specifying values:

•

Spaces ( ): Separate each field with a space.

•

Asterisks (*): Include the entire range of values in a field with an asterisk. For example, an asterisk in the hour field indicates every hour.

•

Commas (,): Separate multiple values in a field with a comma. For example, 0,6 in the day of the week field indicates Sunday and Saturday.

•

Hyphens (-): Indicate a range of values in a field with a hyphen. For example, 1-5 in the day of the week field is equivalent to 1,2,3,4,5, which indicates Monday through Friday.

•

Slashes (/): Specify the intervals at which to repeat an action with a slash. For example, */3 in the hour field is equivalent to 0,3,6,9,12,15,18,21. The asterisk (*) specifies every hour, but /3 restricts this to hours divisible by 3.

Examples:

•

15 * * * * Run 15 minutes after every hour every day

•

0 22 * * * Run at 22:00 every day

•

0 0 1 1,6 * Run at 00:00 on January 1 and June 1

•

30 8,12 * * 1-5 Run weekdays at 08:30 and 12:30

•

0 2 */2 * * Run every other day at 02:00

View Task Schedule

Click to view the task schedule. The Task Schedule dialog box displays a list of scheduled tasks. Click a task to review the task details. For more information, see View task schedules.

Optional: Use Advanced settings to:

◦

Customize the ports the appliance uses to deploy the Agent.

◦

Designate an alternative download location for the Agent installer.

NOTE: Newer versions of MS Windows such as Windows 10 do not support downloading files from file shares which prevents alternate location WinRM provisioning to work as expected.

◦

Specify the WinRM port used for agent provisioning on Windows devices. For those schedules using a legacy method to provision Windows devices, you have an option to change it to WinRM. For more information about WinRM configuration, see https://support.quest.com/kb/260699/agent-provisioning-with-winrm.

◦

Choose the level of information to display in the log. To see only the most important messages, select Critical. To see all messages, select Debug. Other options include Error, Warning, Notice, and Info.

◦

Specify the device that you want to use as a relay for agentless device inventory. A relay device that is used during discovery as a relay is used for agentless inventory, when a new device is provisioned automatically from discovery results. For more information, see Add a Discovery Schedule to perform a quick "what and where" scan of your network.

◦

Enable a complete uninstall of the Agent. Selecting Remove KUID during uninstall results in an existing Agent being removed from the device before the Agent is installed again. In this case, the appliance generates a new KUID for the asset, and it appears as a new device in the appliance.

Click Run now to display the Provisioning Schedules page and the new configuration.

The appliance saves the configuration with the name you supplied, and then runs the configuration against the targeted IP addresses.

The Provisioning Schedules page displays the progress of the successful installations after the schedule's start time.

Managing provisioning schedules

View, run, edit, or duplicate provisioning schedules

Delete provisioning schedules

View provisioning results

To streamline the Agent installation process, you can add provisioning schedules that specify how and when to install the KACE Agent on devices. You can add, view, edit, run, duplicate, and delete provisioning schedules.

View, run, edit, or duplicate provisioning schedules

You can view provisioning schedule status and other details on the Provisioning Schedules page. From this page you can also run and edit provisioning schedules as needed.

When you duplicate provisioning schedule, its properties are copied into the new configuration. If you are creating a configuration that is similar to an existing configuration, starting with a duplicated schedule can be faster than creating a configuration from scratch.

Go to the Provisioning Schedules list:

On the left navigation bar, click Settings, then click Provisioning.

On the Provisioning Panel, click Schedules.

The list displays the following columns:

Option	Description
Name	The name of the provisioning schedule (links to the Provisioning Schedule Detail page).
Targeted	The total number of target devices in the configuration (links to the Provisioning Results page).
Running	The total number of target devices on which provisioning is running (links to the Provisioning Results page).
Pending	The total number of target devices on which provisioning has not yet started (links to the Provisioning Results page).
Succeeded	The total number of target devices on which provisioning has succeeded (links to the Provisioning Results page).
Failed	The total number of target devices on which provisioning has failed (links to the Provisioning Results page).
Success Rate	The total number of target devices on which provisioning has succeeded as a percentage.
IP Range	The IP address range of the target device.
Schedule	The specified provisioning schedule. For example: Everyn minutes, Every n hours, or Never.
Enabled	Whether the configuration is enabled or disabled. A check mark indicates that the provisioning schedule is enabled.

Run provisioning schedules:

Select the check boxes for the schedules that you want to run.

Select Choose Action > Run Now.

Edit schedules:

Click the name of a schedule.

Edit the provisioning schedule on the schedule's Provisioning Schedule Detail page, and click Save.

See Install the KACE Agent on a device or multiple devices.

Duplicate schedules:

Click the name of a schedule.

In the Advanced section, click Duplicate to display the Provisioning Schedules page with the new schedule listed as Copy of Schedule Name.

Delete provisioning schedules

You can delete provisioning schedules when you want to remove schedules from the appliance.

When provisioning schedules are deleted, results associated with those schedules are also deleted. Devices provisioned using the schedules, however, are not removed from inventory.

Go to the Provisioning Schedules list:

On the left navigation bar, click Settings, then click Provisioning.

On the Provisioning Panel, click Schedules.

Select the check box next to one or more schedules.

Select Choose Action > Delete, then click Yes to confirm.

View provisioning results

You can view the results of actions performed by provisioning schedules.

Go to the Provisioning Schedules list:

On the left navigation bar, click Settings, then click Provisioning.

On the Provisioning Panel, click Schedules.

Click a link in the Running, Pending, Succeeded, or Failed column.

The Provisioning Results page appears with the following information:

Item	Description
Status	The status of the Agent connection to the appliance: : An Agent-managed device is connected to the appliance. : An Agent-managed device is not connected to the appliance.
Schedule Name	The name of the provisioning schedule.
IP Address	The IP address of the target device.
Hostname	The hostname of the target device. Click the Remote Connection button to open a Remote Desktop Connection to the target device (Microsoft Edge only):
Result	The status of the most recent provisioning attempt.
Action	I indicates a successful installation. U indicates a successful uninstallation.
Error	The failure error, such as TCP ports not accessible.
Last Run	The last time the schedule ran.

To view additional information about a target device, click its IP Address.

The KACE Agent Provisioning page appears.

This page displays the results of the most recent provisioning run and includes information such as the IP address, port configuration, and the logs of each provisioning step.

To view inventory information, click the [computer inventory] link next to the MAC address.

NOTE: The [computer inventory] link appears only if the provisioning process can match the MAC address of the target device with the current inventory data. See Managing MIA devices.

View, run, edit, or duplicate provisioning schedules