ARD Task Server gathering reports even when reporting is disabled

We have noticed lately that at 2am each morning there is a considerable amount of network usage initiated by my task server presumably gathering reports from machines at different sites.
I had recently deleted all my computers in ARD, disabled reporting, and added them back in while making sure not to apply reporting features.
I have dug around in cron, LaunchDaemons, and plist files on the clients and on my task server. On my task server I see a plist that shows reporting is disabled on all the machines. At the client level I do not see anything regarding reporting.
Would it be a good idea to re-send an ard configuration package to all of the clients?
I opened a ticket with Apple, but they won't do anything without having purchased software support.

Hmmm... I seem to have found the plist file that is doing it. I was looking at /Library/Application\ Support/Apple/Remote\ Desktop/ before... looks like /Library/Preferences/com.apple.ARDAgent.plist is the culprit.
This plist is a binary, so I had to use plutil to convert to xml in order to make it human readable. I wonder if I can just hack this file up a bit and re-deploy it to each machine. Or I wonder if it would re-build if I simply remove it from each client. I will need to test to find out, seeing as though the task servers are listed in it, probably not a good idea to remove it all the way.

Similar Messages

  • Can't connect to ARD task server

    I've got ARD 3.2 installed on my machine (Dual 2.3GHz G5, os 10.4.11) and am trying to setup my server as an ARD Task Server (Dual 2.3 GHz G5, OS 10.5.4)
    Everything is setup, the correct ports are open, but when I try and authenticate into the task server (preferences > Task Server > Use remote Task Server), it seems to accept my credentials for a second, then switches the option in the preference back to "Use Task Server on this computer".
    If the credentials were wrong, I would just get an "invalid password" error. But the creds are correct, the password dialog box closes and the preference automatically changes back.
    Any ideas? I've tried completely reinstalling ARD 3.2 (latest version to date) on both machines, and in fact, I get the same error connecting to other test Task Servers at our office.
    thanks!

    That is correct. If you want to run a task server separate from your normal ARD administration system, you must purchase two copies of ARD. ARD will check for duplicate serial numbers and will fail to work properly unless each copy of the admin application has a unique number. "Unlimited" only applies to the number of client workstations you can have in the list of managed computers; it does not apply to how many systems on which you can install the adminstration application.
    It will of course be up to you whether it's worth it to purchase a second copy to have a standalone task server. For some, it makes managing things much easier and so is worth the cost, but for others it's not.

  • [svn] 3718: Make sure the server is stopped even when a unit test fails.

    Revision: 3718
    Author: [email protected]
    Date: 2008-10-17 13:03:17 -0700 (Fri, 17 Oct 2008)
    Log Message:
    Make sure the server is stopped even when a unit test fails. Thanks to Alex for the fix.
    Modified Paths:
    blazeds/trunk/modules/core/build.xml

    I had the same issue after upgrading from 10.7.2 to 10.7.3 and changing my main SSL cert.
    The solution was to make sure the correct cert was listed in:
    /etc/openldap/slapd.conf
    as well as:
    /etc/openldap/slapd.d/cn=config.ldif
    It looks as though the slapd.conf file gets updated properly when you select an SSL cert in the Server Admin app, but the cn=config.ldif does not. That is the one that was hanging my server up.
    Hope this helps!

  • Swipe left is deleting mail messages even when swipe is disabled

    Swipe left is deleting mail messages even when swipe is disabled. I had it set to "Flag", but it was still deleting them so I tried disabling it.
    It does this only with my Exchange account, not other mail accounts. Running iOS 8.1, but it did it with 8.0, 8.02 as well.
    Anyone else experiencing this? any fixes?

    Thanks, that got me on the right track.  Searched a little more and changed the end to:
    tell application "Mail"
      (* do stuff *)
              set theSelection to selection
              set theMessage to item 1 of theSelection
              set theAccount to account of mailbox of theMessage
         set mailbox of theMessage to mailbox "Trash" of theAccount
    end tell
    And that seems to work.

  • [svn] 3173: Toggle button would toggle on click even when it was disabled.

    Revision: 3173
    Author: [email protected]
    Date: 2008-09-10 16:35:53 -0700 (Wed, 10 Sep 2008)
    Log Message:
    Toggle button would toggle on click even when it was disabled. Fix it.
    Modified Paths:
    flex/sdk/trunk/frameworks/projects/flex4/src/flex/component/ToggleButton.as

    Hi
       I guess you will be able to create the toggle button.It will not be a big problem.What you need to handle is , you need to identify , in which row the user has clicked.For this in the button action , there is an incoming import parameter WDEVENT..in this , you have a method ..get_context_element() ..which will fetch you the row element selected.
    Thanks
    Anzy
    post if you have any more queries

  • How to solve this. It happens even when firewall is disabled. Apple TV: "Check that any firewall software running on this computer has been set to allow communication on port 3689" alert in Windows

    How to fix this. Happens even when firewall is disabled.  (Apple TV 1st generation)
    Apple TV: "Check that any firewall software running on this computer has been set to allow communication on port 3689" alert in Windows

    After a few hours the same issue started again. (Port 3689 error) I checked my router settings and it shows ATV asd connected to my netrwork. ATV also shows in iTunes devices. It asll works till I try to sync. Then the error pops up
    I tired restoring ATV to factory settings. Even backed iTunes up to version 8 and every combonation therein. I started an older Gateway running Vista 64bit and it syncs fine with ATV although it's slow and I have to transfer movies  from my Win 7 to tyhe Vista machiner.
    I cannot find any reason for this issue. Can anybody solve this before it dribves me crazy? (Crazier)

  • SM37: job sends message even when report list is empty

    Dear gurus,
    I run job over transaction VD59 - the result of this report is sent to recepient via email. Even when VD59 gives no results (no rows), recepient receives empty message.
    Can I somehow set that in the case of empty result list job sends no message?
    Pavel

    Hi,
           Try to use these FM's.
           BP_JOBLOG_READ
           BP_JOBLOG_SHOW
           BP_JOB_CHECKSTATE
           BP_JOB_CHECKSTATE_SM37B
           BP_JOB_READ
           BP_JOB_STATUS_GET

  • Ard task server issue: clients always "idle"

    Like others I've seen on this list, we're having issues using Task Servers with ARD. I've looked for answers here and elsewhere and tried a number of possible solutions, but nothing I've found yet has solved our continuing, recurring issues.
    No matter -how- I configure ARD with Task Servers, jobs always "hang" infinitely with status, "Install Packages: In progress"; "The remaining X computers are currently idle."
    Task servers "used" to work for us-- but never quite reliably-- and I can't exactly pin down at what point they've stopped working for us.
    It doesn't matter whether I use the "task server on this computer" or any of the network task servers I've set up on our network. I've erased/renamed ARD config files and databases (from the obvious plists to the not-obvious /var/db folders); I've wiped all traces of ARD from my machine and reinstalled; I've reimaged my machine and reinstalled ARD; I've set up ARD on other machines to test-- but consistently, using a Task Server fails to perform. The task doesn't "fail" per se; rather-- it just never gets performed.
    Logs on the Task Server -sometimes- have messages like this: "ARDAgent[42915] BUG ALERT!! Client in task list has no entry in Server's client database."
    Am glad to share any logs, other things I've tried, or bang around ideas with anyone else who is dealing with or has dealt with this.
    Thanks!
    Mike Pullen
    Computer Tech
    School District of Baraboo, WI

    In ARD, have you checked to see what time/date your targets are set to report to?
    if so, are the targets set to report at a time/day they would be on, awake, and connected to the same network as the ARD computer? On the same line of thought, will the ARD computer be on, awake, and connect to the same network at that time/date? Have you tried forcing an ARD report to run? (you would do this much like how you would test an alarm clock by setting the alarm clock time to be a few minutes ahead of the current time) (remember the client runs the report based on the time on the client)
    After forcing a report an auto report, dose sending the task to a few local targets fail?

  • ARD Task server email notification trouble shooting

    I have set up my ARD Task Sever successfully. I am able to push out task from my machine to the task sever. I have set up the default mail script and was able to test it manually by running ./Notify and get an email. When I have a job set up to run I do not get a notification. I set up a simple task (Repair Permissions to test) and was unable to get ARD to send an email.
    I took an additional step of changing the notification to changing the mail to go the mail server to where the task server is running. the address would read something like [email protected] Again I was able to test this manually and was able to get an email. Is there an additional file I need to edit or another setting to change to get that notification working?

    Hi:
    Try using formatDateTime() function if you are using BPEL process.
    Try using HTML, it works.

  • How to deactivate the ARD Task-Server ?

    Everytime I startup ARD 3.4 on my home Mac, the Task-Server configuration window will open, asking for the address of the remote Mac OS X Server of my office, with is not permanently connected to my Mac.
    How can I deactivate this prompting startup window ?
    Thanks in advance for infos !

    Thanks for your answer.
    I already choose this in Preferences and the radio button is marked, but the strange behaviour persists. Which preferences file is responsible for the task server settings ?

  • Ard task server, tasks sit idle

    Hi guys,
    I've seen quite a few unresolved tickets regarding this issue and wondering if anyone has found a fix? 
    We have 3x licenses of ARD and contain over 400-500 machines so using the same license is not an issue.  We are obviously trying to deploy applications using the task server but only two are actually succeeding, these machines being on the same network range while the other 400+ are sitting idle...
    Help would be much appreciated!
    Thanks.

    http://discussions.apple.com/thread.jspa?threadID=948005
    someone else having th same probem.
    the task server and admim machine are all RDP3.3 and OSX 10.5.8.
    Clients vary, form 10.3.9 to 10.4.11 all using ARD3.2+

  • ARD Task Server

    I have a separate license for ARD that I utilize as a task service on an Xserve. Whenever I log out of the Xserve, the ARD task service stops running. The ARD manual hints that the task server will continue to run. An Apple SE stated that it should continue to run after I log out.
    Although counterintuitive, should the ARD task service continue to run after I log out? If so, by what magic is this accomplished?

    Well phooey. I'm not sure what's worse; finding that an issue can't be resolved or resolving an issue, but not knowing why.
    Anywho, the task server is now running after user log out. The only change I made was to upgrade the ARD software to 3.3.1. Prior to this, I loaded, uninstalled and reloaded 2.2+.
    This, of course, doesn't explain "why". It just resolves the problem. Bummer.
    Thank you for your responses. I do now understand a bit more about the process at least.

  • Ard task server, tasks idle

    I am experience the same as the following link:
    http://discussions.apple.com/thread.jspa?threadID=735887
    has a resolution ever been found for this? I have a list of computers all marked as idle or active and all machines (30 in total) with tasks just say "idle" <task name> remainds to be installed.
    how do I make them install?

    http://discussions.apple.com/thread.jspa?threadID=948005
    someone else having th same probem.
    the task server and admim machine are all RDP3.3 and OSX 10.5.8.
    Clients vary, form 10.3.9 to 10.4.11 all using ARD3.2+

  • Graphics convert but not text even when ocr is disabled

    graphics convert but not text even when ocr is disabled

    Hmmm... I seem to have found the plist file that is doing it. I was looking at /Library/Application\ Support/Apple/Remote\ Desktop/ before... looks like /Library/Preferences/com.apple.ARDAgent.plist is the culprit.
    This plist is a binary, so I had to use plutil to convert to xml in order to make it human readable. I wonder if I can just hack this file up a bit and re-deploy it to each machine. Or I wonder if it would re-build if I simply remove it from each client. I will need to test to find out, seeing as though the task servers are listed in it, probably not a good idea to remove it all the way.

  • ARD task server sending spam

    Forgive me if this is in the wrong thread - I'm not quite sure where to put it.
    I'm a student at a technical college and am working part time for the Mac admin guy. We have about 400 macs in the art dept. Yesterday our sysadmin said our server was sending out spam. We set up VirusBarrier and scanned the server. This is a copy of our console.log:
    Mac OS X Version 10.4.9 (Build 8P135)
    2007-08-08 10:20:50 -0500
    2007-08-08 10:20:55.538 SystemUIServer[486] lang is:en
    Aug 8 10:22:39 servername authexec: executing /Library/Intego/netupdated.bundle/Contents/Resources/NetUpdate Installer.app/Contents/MacOS/NetUpdate Installer
    Aug 8 10:49:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
    Aug 8 10:49:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/[kupdateb]
    virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/src/mech
    virus OSX.PsyBot.232 found in file: /Volumes/Startup OS X/private/var/tmp/psybnc/psybnc
    Aug 8 11:19:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
    Aug 8 11:19:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/[kupdateb]
    virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/src/mech
    <CFURL 0x62bd440 [0xa07bc150]>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
    Finder tool: request to change uid to 501 gid to -1 for /private/tmp/vbx4smail_6v97Qz
    virus Resource structure error found in file: /Volumes/Image Backup Drive/Old Labs Images/345 iMacs/Macintosh HD/System Folder/Help/HP LaserJet Printer Help/Help/Graphics/printer_word.JPG
    Aug 8 11:49:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
    Aug 8 11:49:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/animations/flahsbathtub/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/animations/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/contact/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/illustrations/photomontage/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/illustrations/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/images/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/WS_FTP.LOG
    virus Resource structure error found in file: /Volumes/Image Backup Drive/.Trashes/501/printer_word.JPG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-37.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-41.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-45.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-01.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-15.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-22.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
    Aug 8 12:19:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
    Aug 8 12:19:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    <CFURL 0x5004b0 [0xa07bc150]>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
    <CFURL 0x3a5c30 [0xa07bc150]>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
    Aug 8 12:26:21 servername ARDAgent [320]: no multicast
    virus Resource structure error found in file: /Volumes/Image Backup Drive/.Trashes/501/printer_word.JPG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-37.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-41.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-45.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-01.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-15.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-22.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
    virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
    Aug 8 12:29:49 servername cyrus-quota[1693]: DBERROR: reading /var/imap/db/skipstamp, assuming the worst: No such file or directory
    at which point we rebooted.
    This server was not running mail.
    So we have changed all are passwords, are reimaging everything and had the sysadmin block all outgoing on port 25. In addition we have sent copies of the logs to our Apple rep and to the Intego rep.
    This is an incredibly vague question but what should we do now?
    Is there a way to find out where these virus' came from? It is not impossible they were put on by a student as we recently found out that a number of the help desk students had the Mac admin password. I've looked at the install logs and the only things I see are the Apple software updates and apps we installed ourselves.
    Are there other logs I can look in?
    A sample of our mail.log:
    Aug 8 10:11:57 servername postfix/qmgr[2338]: DADE98C3EB9: to=<[email protected]>, relay=none, delay=14040, status=deferred (delivery temporarily suspended: host ironport1.chron.com[130.80.29.15] refused to talk to me: 554 ironport1.chron.com)
    Aug 8 10:11:57 servername postfix/qmgr[2338]: E89098C1C03: to=<[email protected]>, relay=none, delay=14082, status=deferred (delivery temporarily suspended: host ironport1.chron.com[130.80.29.15] refused to talk to me: 554 ironport1.chron.com)
    Aug 8 10:11:57 servername postfix/qmgr[2338]: EEE378C2CB3: to=<[email protected]>, relay=none, delay=14231, status=deferred (delivery temporarily suspended: host ironport1.chron.com[130.80.29.15] refused to talk to me: 554 ironport1.chron.com)
    Aug 8 10:11:57 servername postfix/smtp[13748]: 2C26E8979B3: to=<[email protected]>, relay=mx-nj-2.pobox.com[208.210.124.72], delay=39263, status=deferred (host mx-nj-2.pobox.com[208.210.124.72] said: 450 <[email protected]>: Sender address rejected: Domain not found (in reply to RCPT TO command))
    Aug 8 10:11:57 servername postfix/smtp[13748]: 2BC7D8C61AC: to=<[email protected]>, relay=mail.cyberscope.net[64.95.223.22], delay=13796, status=deferred (host mail.cyberscope.net[64.95.223.22] said: 451 unable to accept non-FQDN HELO (#4.3.0) (in reply to MAIL FROM command))
    Aug 8 10:11:57 servername postfix/smtp[13748]: connect to cluster9.us.messagelabs.com[216.82.253.115]: Connection refused (port 25)
    Aug 8 10:11:57 servername postfix/smtp[13748]: connect to cluster9.us.messagelabs.com[216.82.250.99]: Connection refused (port 25)
    Aug 8 10:11:57 servername postfix/smtp[13748]: connect to cluster9.us.messagelabs.com[216.82.250.115]: Connection refused (port 25)
    Thanks in advance; any help would be appreciated.
    Lex

    The problem isn't related to ARD, per se, so you might get more opinions in the Mac OS X forums.
    But I can find no reference anywhere to any exploits, Mac OS X or Windows, titled "OSX.Botch.Gen" or "OSX.PsyBot.232" (or the same without the OSX prefix). So if these are direct cut-and-paste from the logs, then I don't have a clue what VirusBarrier is reporting. Nor has the existence of any Mac OS X virus or worm been confirmed in the wild. There is a trojan called "SpyBot.232", but from what little I can find, it's Windows only. You may want to consult Intego and try to confirm what these purported virus errors are.
    Resource errors usually mean that the virus checker just can't completely parse the file in question. It rarely reflects an actual exploit discovery.
    I'm therefore rather dubious as to the culpability of your server in the spam, particularly since you say that the mail server wasn't running. I'd be interested to know what evidence your IT people provided, or claimed, that would show that it was your server sending the spam. As I said, there's been nothing confirmed, or even mentioned, that I've seen regarding any virus or worm for Mac OS X that can send spam emails.
    Message was edited by: Dave Sawyer

Maybe you are looking for