I have a Window 10 client (1607) that has the patch for wannacrypt installed (KB4013429) along with a number of other patches.  KB4013429 was installed 4/5/2017.  However, inventory just shows 5 updates installed and KB4013429 is not one of them.  I'm trying to scan for how many machines are patched.  There are other machines that do report that patch installed.

I've tried running full sync scans from the console end, running inventory from the client end, re-installing the client, deleting the client from the console and again re-installing the client with the same results.  Inventory\Name\OS\Updates\updates still only shows 5 installed updates.

Last Software Scan Date and Last Updated by Inventory Scanner all show today's date and the time is just after client installation

LD version is 9.60.2.48

Patch was originally installed through our WSUS server

Dear all,

I would like to understand how does the inventory scanner scans for software. I have read in many documents that there are many sources from where the scanner get the list of installed or running software:

- MSI database for MSI applications

- Application in add/remove feature (Normally only applications that have uninstall feature will be displayed) Registry folder where the list of this type of application is stored is HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall)

- Items which have been executed. (softmon32.exe will be running all the time to capture all running programs and add them to HKLM\Software\LANDesk\ManagementSuite\WinClient\SoftwareMonitoring\MonitorLog )

- Applications with shortcut

- Executable files found in local drives.

I would like to understand how does it work from inside? how does LDAPPL3.ini file will be updated in the core server especially all applications that will added to the section "[Applications]" ? what does LDAPPL3.template contains ? what is the content of LDAPPL3.base? what is the inital content of LDAPPL3 files ?

I will appreciate if someone can explain the process step by step starting from the installation of LD agent to how does LDAPPL3.ini file in the core server will be updated? If the inventory scanner in the managed device finds out that its current version is not up to date does LDAPPL3.ldz will be downloaded or delta changes LDAPPL3.pat ?

Thanks in advance and waiting for your feedback.

HermiM

Hi,

I have installed LDMS2016 on a Windows 2012 r2 server, I deployed the agent on this server. I ran an inventory scan but it say "lost contact". Do you have any idea ?

We're on LD v8.70.0.109.

The last several months it seems we've had problems with LD preforming an inventory scan.  Which, it appears, has been due to the Inventory service needing to be stopped and restarted.  ( The first time I did this, I bumped the retry value to as high as it would go, if I recall correctly. )

But one of the things I noticed back then, and see that we still have...is some sort of DNS issue.

I thought that DNS was supposed to be automatically updated.  Yet our DNS server has multiple computer names associated with one IP address.  Not every machine, mind you, but some.  Some have two (2), some have three (3), and at least one I just saw has four (4).

I also checked Reverse Lookup.  And the record that it had, had the correct computer name, with an address that didn't match ANY of the multiple address records.

Consequently...I'm really confused.

I went looking in this forum to see if anyone else was having a similar problem.  I found a discussion in Remote Control I believe it was, named: IP / Name mismatch.

One of the things mentioned was making sure that the "Register this connection's addresses in DNS" checkbox was checked in Advanced of the TCP/IP properties.  I myself have always made sure that this was checked, and have assumed that my co-workers have done likewise.  But because I saw it mentioned, I asked one of my co-workers.  He said that he always does on a server, but hasn't necessarily been doing so on a client, because..."It's supposed to do it automatically.".

The thread also mentioned about setting the agent to update the inventory db on an ip change, to keep the LD db current.  I've gone looking, but can't seem to find where I would do this in 8.7.  Perhaps it's only in 8.8?

Is there a way to write a script so I could easily check all of our clients to see if the update DNS box has been checked?  All these bad DNS entries have me really concerned.  How do I fix my DNS?

As usual, any thoughts, ideas, suggestions are welcome...thanks in advance.

Tom

What do i need to do to make the scan files get processed faster?

I have a gig link between the servers and SQL server is on SAN. Processor wise, both server have enough to work but seems like creation of .scn files is faster than the processing of the server.. what can be done to help LANDesk with that so that the system does not go out of disk space.

LD9 SP1

How can I readActive Directoryattributes(attributesMachine)and showin inventory?

I need some advice on how to add a couple of custom data fields.  I need to add custom fields from a previous database, and I need to add my own custom "Function" field.  I only have the Management Suite 9.6 sp 0.  No other addons like the Inventory or Analytics.

Custom Fields from Previous Database

I've been given from a previous inventory system a list of computer names, serial numbers, and custom fields.  I can match it all up using serial number as a key, but  I need to add the custom data fields.  These are department and cost center.  The list is for about 6,000 computers, most of which were manually collected.  Because of the effort involved in collecting the data, I need to get these into the database, even if they aren't used much.

Custom "Function" field

I also found with my last large deployment that I need to classify computers based on it's function.  A custom "Function" field.  It's a hospital, so some computers are in the OR and others run a TV screen of advertisements.  They have different deployment requirements then a secretary or patient room computer.  Actually the rule list became quite complicated.  That's fine, but all I had to categorize them is OU, subnet, name, model, and installed software.  With no ability to use another query in a query, or a temporary table, my queries became very complicated and slow.  A "function" field would help a lot if it gets close to 100% coverage.

I've got the custom field in the registry, and have inventory collecting it.  It works nice, but I won't get full coverage with it.  For example, I might not be allowed to write to a registry on some computers (ie Vendor owned that runs lab or surgery equipment).  I've tried deploying a .bat file, but didn't get 100% success, and I'm starting to think 100% of any deployment is unrealistic.

I've played around with thecustom forms.  That looks good.  It could help with future collection of department, cost center, computer function fields.  It could get some more coverage of the custom data if I have compliance from field support.

I've seen how I can manually add a field in the Inventory window for a specific computer. But wow that'd be slow.  We have 12,000 objects in our inventory.  Even if half are old, It'd take forever to do it that way.  Having to even do 100 would be a cause for beer at lunch, I mean at 5.

I've access to the Database and the thought of sql insert/update queries has crossed my mind.  But the database is big and would take some time to figure out.  I have a lot of other work to do so holding that off as a last resort.

Any advice would be appreciated.  I'd rather do this within the Console because I'm trying to avoid making this too difficult for someone else to step in and do.  But if this has to be done using some programming or outside manipulation of the database then its something I definitely consider since both are very important.  I'm functional in c#, powershell, and sql.  I have a database admin who should be a sql master and a couple guys who know a bit of VB who could potentially help.  Also I might be looking at it wrong, so if there is another process that can accomplish the division of computers besides the custom field that could work too.

Thanks

show this windows:

in win event:
Application Error, id 1000

Имя сбойного приложения: LDAPWhoAmI.exe, версия: 10.0.1.24, метка времени: 0x56a79182

Имя сбойного модуля: MSVCR110.dll, версия: 11.0.51106.1, метка времени: 0x5098858e

Код исключения: 0xc0000417

Смещение ошибки: 0x0009f979

Идентификатор сбойного процесса: 0xae4

Время запуска сбойного приложения: 0x01d1d04c079041d9

Путь сбойного приложения: C:\PROGRA~1\LANDesk\LDCLient\LDAPWhoAmI.exe

Путь сбойного модуля: C:\PROGRA~1\LANDesk\LDCLient\MSVCR110.dll

Идентификатор отчета: 4668b9f9-3c3f-11e6-bc56-ecb1d72e8ff9

Полное имя сбойного пакета: %14

Код приложения, связанного со сбойным пакетом: %15

this problem It occurs when inventory runs, process ldiscn.

anyone else seen this problem?

Is there a way to run a report or extract what hardware is on a computer so i can use it for inventory? This will only be the basic inventory of a machine: OS, CPU, CPU speed, RAM, HDD size, NIC.

Thanks

We have LANDesk 9.6SP1.

One of the things that is very helpful for our technicians is to print a report for a workstation that lists only the installed products as shown in the Programs and Features on the workstation.  (In other words, if you sit down at a workstation and then open Control Panel - Programs and Features, you see the list of "installed programs".)  This is one of the more helpful reports for our techs when they need to re-setup a crashed computer and they know what programs to reinstall for that use.

In the LANDesk console, I figured the way to do this was to create a column set since in there you can find the "Computer"."Software"."Add or Remove Programs"."Program"."Name" item.  I mean, that seems to be the one that makes sense to accomplish this.

However, the resulting information is displaying significantly more items than the list of installed programs as shown in the Programs and Features on the workstation.

For example, when I display the "Computer"."Software"."Add or Remove Programs"."Program"."Name" items for my device in the LANDesk Console, it returns 142 items!  And within this list, I have 17 items that begin with the words "Microsoft Office...".  However, if I sit at my computer and open the list of installed programs under the Programs and Features, the list is only 52 items long, and I have only a single item for Microsoft Office in the list.

How can we only display the "actual" list of installed programs as shown under the Programs and Features on each workstation?

I keep thinking I'm missing something obvious, but as of yet, it escapes me how to do this simple task so I have to swallow my pride and ask for help.

Dear all,

Could any one help me with the inventory scan process. I will appreciate if there is a "process diagram" of what steps or what tasks will be running on the LanDesk core and client.

I have all the day reading about it but I still have some questions and some difficult to finish the puzzle

First inventory scan on computer --> a scan file named  "invdelta.dat" will be created on C:\Program Files (x86)\LANDesk\LDClient\Data\. (I don't understand the role of LDAPPL3.ini file during software scans is it a configuration file for the SoftMon.exe tool or it will contain all identified software in the managed comptuter).

From now on, each time the LDISCN32.exe starts a new inventory scan, it will just update the already created file "invdelta.dat" . Now, I don't know if the tool "LDISCN32.exe" will detect if there are modifications in this file so it will send the scan file to the landesk core or it will send a scan file without checking. Does the scan file to send to LanDesk core will contain just modified data? and when it will be sended (Once the inventory scan is done or we can configure this parameter to be once a day).

Dear all,

I would like to understand how does the inventory scanner scans for software. I have read in many documents that there are many sources from where the scanner get the list of installed or running software:

- MSI database for MSI applications

- Application in add/remove feature (Normally only applications that have uninstall feature will be displayed) Registry folder where the list of this type of application is stored is HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall)

- Items which have been executed. (softmon32.exe will be running all the time to capture all running programs and add them to HKLM\Software\LANDesk\ManagementSuite\WinClient\SoftwareMonitoring\MonitorLog )

- Applications with shortcut

- Executable files found in local drives.

I would like to understand how does it work from inside? how does LDAPPL3.ini file will be updated in the core server especially all applications that will added to the section "[Applications]" ? what does LDAPPL3.template contains ? what is the content of LDAPPL3.base? what is the inital content of LDAPPL3 files ?

I will appreciate if someone can explain the process step by step starting from the installation of LD agent to how does LDAPPL3.ini file in the core server will be updated? If the inventory scanner in the managed device finds out that its current version is not up to date does LDAPPL3.ldz will be downloaded or delta changes LDAPPL3.pat ?

Thanks in advance and waiting for your feedback.

HermiM

I would like to change the form to display when the Inventory scanner runs. It appears the setting is only available in the Agent Configuration.

I do not want to re-deploy the entire agent just to activate this

Hi,

I have installed LDMS2016 on a Windows 2012 r2 server, I deployed the agent on this server. I ran an inventory scan but it say "lost contact". Do you have any idea ?

Ran into a huge backlog of scans and errorscans.  New machines were just not showing up.  So, we did some digging.  I found the following in the event logs :

Database exception: SCAAE93.SCN, LDInv.dll

-2147217833

Arithmetic overflow error converting IDENTITY to data type int.

Error comitting on table FILEINFOINSTANCE:   ARITHMETIC OVERFLOW ERROR CONVERTING IDENTITY TO DATA TYPE INT.

Increased column size might be necessary, Thread ID: 2292.

The FileInfoInstance_Idn field is an Int.  And we'd unfortunately run out of room.  We have our database in a cluster so using the CoreDBUtil.exe wasn't an option for us.  We did update the datamart.xml file for the FileInfoInstance table :

<column name="FileInfoInstance_Idn" type="BigInt" identity="Yes" null="No" />

I then fired up Microsoft SQL Server Management Studio (my database is named 'LDMS') and ran the following :

USE [LDMS]

GO

ALTER TABLE [dbo].[FileInfoInstance] DROP CONSTRAINT [XPKFileInfoInstance]

GO

DROP INDEX [XIFFileInfoInstIdent] ON [dbo].[FileInfoInstance]

GO

alter table fileinfoinstance alter column FileInfoInstance_Idn bigint;

ALTER TABLE [dbo].[FileInfoInstance] ADD  CONSTRAINT [XPKFileInfoInstance] PRIMARY KEY CLUSTERED

(

[Computer_Idn] ASC,

[FileInfoInstance_Idn] ASC

)WITH (PAD_INDEX = OFF, STATISTICS_NORECOMPUTE = OFF, SORT_IN_TEMPDB = OFF, IGNORE_DUP_KEY = OFF, ONLINE = OFF, ALLOW_ROW_LOCKS = ON, ALLOW_PAGE_LOCKS = ON) ON [PRIMARY]

GO

CREATE NONCLUSTERED INDEX [XIFFileInfoInstIdent] ON [dbo].[FileInfoInstance]

(

[FileInfoInstance_Idn] ASC

)WITH (PAD_INDEX = OFF, STATISTICS_NORECOMPUTE = OFF, SORT_IN_TEMPDB = OFF, DROP_EXISTING = OFF, ONLINE = OFF, ALLOW_ROW_LOCKS = ON, ALLOW_PAGE_LOCKS = ON) ON [PRIMARY]

GO

This article addresses how to resolve a specific issue with inventory records being overwritten due to duplicate device IDs in your environment caused by a misconfigured image or an imaging process that was done without correctly following your internal imaging process. Most likely the LANDesk agent was added to the image or was installed to a machine out of order during a new build.

How to determine if you are having a duplicate device ID issue resulting from the imaging process already including a LANDesk agent

Unfortunately, some of this is going to be you, your admin, or other console users saying that devices are just missing or not displaying in the network view. Noticing this issue may be occurring requires more detective work than a distinct and clear error.

If you are seeing weird behaviors with a batch of similar machines disappearing/reappearing in Inventory, review your Core server ldscan folder

[COREPATH]\Program Files\LANDesk\ManagementSuite\ldscan\ErrorScan

When opening the various .scn files (.scn file extension is the OOTB default for EPM, your environment may be configured differently), you will be looking for the following information:

Device ID ={***************************************}

Device Name =***********

Network - TCPIP - Host Name =************.domain

If you see multiple files with matching device IDs but different device name/hostname then you probably have an issue with how the machine was imaged

The reason these items are showing up in ErrorScan is because the core doesn't recognize the information even though it thinks it already has a matching device ID. Prove this by looking at the LANDesk Inventory Server warnings in the Application section of Event Viewer on the core

Run eventvwr.msc

Expand Windows Logs

Click Application

You can filter or sort by Source (this may take a few minutes)

How to resolve duplicate device IDs overwriting inventory records caused by an image with the LANDesk agent

NOTE: As a user with Administrative privileges on the client device

1. STOP all LANDESK related services

2. Delete the following Registry Keys for 32bit clients:

          HKLM\SOFTWARE\Intel\LANDesk\Common Api\UniqueID

          HKLM\SOFTWARE\LANDesk\Common Api\UniqueID

          HKLM\SOFTWARE\LANDesk\Inventory\LogonHistory\Logons

          HKLM\SOFTWARE\LANDesk\ManagementSuite\WinClient\SoftwareMonitoring\MonitorLog contents

          Delete the following Registry Keys for 64 bit clients:

          HKLM\SOFTWARE\Wow6432Node\Intel\LANDesk\Common Api\UniqueID

          HKLM\SOFTWARE\Wow6432Node\LANDesk\Common Api\UniqueID

          HKLM\SOFTWARE\Wow6432Node\LANDesk\Inventory\LogonHistory\Logons

          HKLM\SOFTWARE\Wow6432Node\LANDesk\ManagementSuite\WinClient\SoftwareMonitoring\MonitorLog contents

3. C:\ProgramData\LANDesk (delete the entire directory and subdirectories, this is a hidden directory)

4. Run Security Scan - look for this line "Sending current settings information to core. Failed: Core has no inventory data for this computer" (this is important to make the inventory scan work, otherwise it will fail and you will see the entry in Event Viewer)

    Without this step, I was encountering an error stating "LDISCN32: The inventory server [CORE] did not respond"

5. Open command prompt and run C:\"Program Files (x86)"\LANDesk\LDClient\LDISCN32.EXE /V /F /SYNC

You do not have to wait for Security Scan to finish, it will probably fail anyways until it can properly sync up with the right inventory information

Hello All,

I would like to setup a query to search for a certain registry key on my systems on the network. What's the best way to do this?

Hello All,

We are in the process of troubleshooting an issue with our Group Policy that controls the Windows Firewall and need to find machines that have the Firewall turned on and which have it turned off.  Our Policy is set so that when a PC is on the managed network, it will turn the Firewall 'Off', using the Domain Profile, but when a PC is connected to an unmanaged network, it turns it 'On', using the Standard Profile.  We have one program that has brought this to our attention but only a few departments use this particular program and I'm thinking the issue is more widespread than what we're seeing.

I don't necessarily need to know if the service itself is started or stopped, just if it's On/Off.  Does anyone know of a way I can query to find out if the Firewall is On/Off and if it's using the Domain or non-domain settings?

Thanks!

Scott

Here is my dilemma.  I have 5000 PC’s, which for the most part have been off for roughly 70 days.  Now that they are being turned back on, the IP addresses of the PC’s are not matching what’s in LANDesk.  Therefore, packages fail when being pushed out (a different agent responded).  To make this situation a bit crazier and because of login slowness, the inventory scan was removed from startup.  So, the only way to run an inventory scan is manually or if I am thinking correctly by re-pushing the client to all computers.

My question is.  Is there a way to simple force a scan on all computers, regardless if their IP address matches?   Perhaps using agent discovery?

Thanks

Hi,

there is a Inventory Property - "Computer"."Mass Storage"."Drive Encryption"."Recovery Key"

Unfortunatelly the Inventory Information is not populated by the inventory scanner.

Some of the other informations are collected by the Scanner:

So my question is, is there a build in support for reading out the Recovery Key to this Inventory field or do I have to run additional scripts for populating this Inventory Entry?

Thank you, Marco

five(9)s.GmbH.Support.Account