Best practice to install zen agent for VPN users

Hi,
We have users accessing the company network via VPN. I have installed a
Middle-Tier server and am starting to roll out ZENworks agents on the
remote user's notebook. I have been testing a few intallation settings but
not too satisfy up to now. What I want to do is to have the users boot up
their machines, manually log on to VPN, then ZENworks workstation manager
will automatically logs on to the Middle-Tier server, deploy the apps and
stay alive all the time when they are connected to VPN. Is there any tweak
I can do on the registry to achieve that?
Johnny

Jared,
When I log on to VPN, I have to right click on the ZENworks Application
Explorer icon in the system tray and then ZENworks Middle Tier Server Login
to log on to ZENworks. Is it possible to automate this? There is also
another screen that asks you whether you want to stay connect on this
session. Is there anywhere in the registry to have this screen not to show
up but have ZENworks always connected wnen I am in VPN?
TIA
Johnny
Peter
> zennewbie,
>
> > What I want to do is to have the users
> > boot up their machines, manually log on to VPN, then ZENworks workstation
> > manager will automatically logs on to the Middle-Tier server, deploy the
> > apps and stay alive all the time when they are connected to VPN.
>
> Which part is failing, the autologin, or the applications staying
> available?
>
> --
> Jared Jennings
> Data Technique, Inc.
> Novell Support Forums Sysop
> http://wiki.novell.com
>

Similar Messages

  • ISE redirect to install NAC Agent for Anyconnect users with Split Tunnel?

    Due to management directive I am not able to disable SPLIT TUNNEL for our VPN users. For this reason, I can not figure out how to enforce the REDIRECT to ISE for forcing the VPN users to install the NAC AGENT.
    Is this possible? If so can we get some documentation on how this is done? Screenshots would be great.
    Thanks,
    Dirk

    I couldn't find the answer that I seek in that doc.
    I am trying to see if I can force traffic to the redirect for installing the NAC agent, even on split tunnel traffic....perhaps forcing the first webpage the user opens forces the user to the redirect page if the NAC agent isn't detected.
    Thanks,
    Dirk

  • Toy Store Best Practice: How to implement 'cancel' for register user page

    Let's say user wants to register or (even edit) his/her account. But when forwards to register(edit) account page, he/she decides not to do it. I would like to implement 'cancel' button and return the user whereever he/she was before comming to this page.
    What is the best practice?
    Even worse, if user gets to this page and never saves the entry. The model would be dirty. And then let's say that user wants to commit something in DB, it may commit incorrect(blank) entry for created row. What I am up to, is what is the best practice to keep track if the model gets dirty and delete invalid rows in general?

    You might want to read this thread:
    Cancel operation followed by refresh raises JBO-33035
    (very similar discussion I was having with Steve)

  • Conversion exit missing in BI - Best practice to install missing exits

    Hi,
      We are on BI 7.0 SP10.
      While doing mappings, I found two conversion Exits MATN2 & SCOPE missing from the BI box. Hence SAP was throwing error while trying to activate the 7.0 datasource.
    On more analysis, I found that the function groups are altogether missing.
    What is the best practice to install these missing objects (Func Groups, Func Mods) in the system.
    Our ABAP person suggested to create these objects as "Repair objects" in the system. Is that the right procedure?
    Please advise.
    Thanks
    Vishno

    I have been through the following steps:
    Entered this URL http://help.sap.com/bp/initial/index.htm
    Clicked on 'Cross-industry Packages'
    Clicked on 'CRM'
    Clicked on 'Englilsh'
    Then the following page is displayed:
    http://help.sap.com/bp_crm70/CRM_DE/HTML/index.htm displayed
    But now what?. How do I get the Best practice instructions for a CRM implemenation?.
    Jason

  • How to handle multiple site to site IPsec vpn on ASA, any best practice to to manage multiple ipsec vpn configrations

    how to handle multiple site to site IPsec vpn on ASA, any best practice to to manage multiple ipsec vpn configurations
    before ver 8.3 and after version 8.3 ...8.4.. 9 versions..

    Hi,
    To my understanding you should be able to attach the same cryptomap to the other "outside" interface or perhaps alternatively create a new crypto map that you attach only to your new "outside" interface.
    Also I think you will probably need to route the remote peer ip of the VPN connection towards the gateway IP address of that new "outside" and also the remote network found behind the VPN connection.
    If you attempt to use VPN Client connection instead of L2L VPN connection with the new "outside" interface then you will run into routing problems as naturally you can have 2 default routes active at the sametime (default route would be required on the new "outside" interface if VPN Client was used since you DONT KNOW where the VPN Clients are connecting to your ASA)
    Hope this helps
    - Jouni

  • Quick question regarding best practice and dedicating NIC's for traffic seperation.

    Hi all,
    I have a quick question regarding best practice and dedicating NIC's for traffic seperation for FT, NFS, ISCSI, VM traffic etc.  I get that its best practice to try and separate traffic where you can and especially for things like FT however I just wondered if there was a preferred method to achieving this.  What I mean is ...
    -     Is it OK to have everything on one switch but set each respective portgroup to having a primary and failover NIC i.e FT, ISCSI and all the others failover (this would sort of give you a backup in situations where you have limited physical NICs.
    -    Or should I always aim to separate things entirely with their own respective NICs and their own respective switches?
    During the VCAP exam for example (not knowing in advance how many physical NIC's will be available to me) how would I know which stuff I should segregate on its own separate switch?  Is there some sort of ranking order of priority /importance?  FT for example I would rather not stick on its own dedicated switch if I could only afford to give it a single NICs since this to me seems like a failover risk.

    I know the answer to this probably depends on however many physical NICs you have at your disposal however I wondered if there are any golden 100% rules for example FT must absolutely be on its own switch with its own NICs even at the expence of reduced resiliency should the absolute worst happen?  Obviously I know its also best practice to seperate NICs by vender and hosts by chassis and switch etc 

  • How to install plugin globaly (for all users) in Firefox13?

    How to install plugin globaly (for all users) in Firefox13?

    See also:
    *https://developer.mozilla.org/en/Gecko_Plugin_API_Reference/Plug-in_Development_Overview#Installing_Plug-ins

  • Using ISE to assign ACL's for VPN users

    Hi,
    I've just implemented ISE into our environment using various documents and videos found online but have not been able to find anything about using ISE to Authenticate remote users via VPN and assigning them the ACL's created for thewir level of network access.
    Does anyone know of a good document or training video knocking about that I can use?
    Thanks
    Jason

    Jason,
    If the ACL is present on the ASA you can use the "filter-id" radius attribute to reference the acl to the user's session. You can make this work by configuring an authorization profile and tying this in with your authorization policy for vpn users.
    If you want to push an acl then my recommendation is to use the cisco-av-pairs to push the acls since the username is associated with the acl that is applied to the username of the vpn session.
    http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/ref_extserver.html#wp1763743
    Thanks,
    Tarik Admani
    *Please rate helpful posts*

  • Error.  Cannot install public key for specified user

    I'm getting "Error. Cannot install public key for specified user" when trying to add a public ssh key for a service processor user on a V20z. I've tried it for different users and still get the error. The same operation works fine on a V40z. Any help would be appreciated.

    That would be great if the resolution was that simple.  I am using a public key I generated using the putty key generator.  Below is the key I would use if I got that far.  However I get an error on the "ssh authentication publickey" attribute so I never get the chance to enter a public key.  What code version and hardware version are you running that this worked on?
    AAAAB3NzaC1yc2EAAAABJQAAAIEA2h00RCKBbpbrTWSe/3TYAvRpkJz7tLwQDCf9
    4fDJUWUGrmxXHeomuBhNGZh7tyfFjRL2CKY6nWmFyKN/eDm0PF4IWhhCArzOPVDu
    q7Nu2y/pD8wWH8dH4a3zRpkLSekNJtH6lzuqmY0zqz9TnZlpS6g4LI1a+lOGSmhU
    /HySw9s=
    ciscoasa(config)#username test nopassword privilege 15
    ciscoasa(config)#username test attributes
    ciscoasa(config-username)#ssh ?
    configure mode commands/options:
      Hostname or A.B.C.D  The IP address of the host and/or network authorized to
                           login to the system
      X:X:X:X::X/<0-128>   IPv6 address/prefix authorized to login to the system
      scopy                Secure Copy mode
      timeout              Configure ssh idle timeout
      version              Specify protocol version to be supported
    exec mode commands/options:
      disconnect  Specify SSH session id to be disconnected after this keyword
    ciscoasa(config-username)# ssh
    ciscoasa(config-username)# sh ver | in Ver
    Cisco Adaptive Security Appliance Software Version 9.1(1)
    Device Manager Version 7.1(1)52
    ciscoasa(config-username)#

  • DP selection for VPN users and VPN boundaries

    Hi
    I have a scenario wherein we have 500 users across UK who will connect via VPN, the client has 350 sites with main 25 locations with minimum users (>20) and rest of the sites have less than 10 users.. may one or 2 or 5.. for no DP are placed. aprt from
    500 all will be on LAN.
    DP is only for sites > 20 users...
    so my concern is how do the users who will be on vpn have to be configured for DP to download the content,
    if a user moves from one location to other location lets say from London to Manchester how will this user on VPN will be able to select the DP if he is configured to select DP in London.?
    Do advise how to configure the DP for VPN user who move from location to location. How will they select the DP.
    we do have the IPrange for VPN users , but how to map it to DP. if I map London DP to a user and then if he is in Manchester the user will all way pull the content across WAN..  how to make the user to auto connect to local DP(Manchester) if on VPN.
    Thanks

    if I map London DP to a user and then if he is in Manchester the user will all way pull the content across WAN..  how to make the user to auto connect to local DP(Manchester) if on VPN.
    You don't map users to DPs and DP communication is dynamic and not persistent in any way. Thus, *every time* that a client requests content it submits its current IP and is given DPs to download the content from based on this IP and the configured boundaries.
    Thus, as long as your "locations" have different IP ranges, there's nothing special to do.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Best practice to install Bi-Java

    Hi,
    We are in the process of designing the system landscape for our client. We have installed NW04s usage type EP on one server. Now we need to decide on where to install the BI-Java usage type. So:
    1. Is adding BI-Java on the existing EP usage type is recommended
    2. What is the best practice:
      a> EP and BI-Java on the same server
      b> EP and BI-Java on separate servers
    What are the pros and cons of each choice.

    Hi,
    When you install BI JAVA, it will have its own EP and AS JAVA usage types under it. You have no option with this as they are required to run BI JAVA (just like you have AS ABAP under the BI usage type).
    The decisions you do have are:
    1. Should BI JAVA be installed on the same server as the BI usage type? (this is your choice)
    2. Should you use the EP usage type within the BI JAVA for your enterprise portal deployment or just keep it dedicated for BI usage only and use a separate EP usage type for your enterprise portal deployment. (most customers will do the latter option due to patching and upgrading options).
    Please see the SAP NetWeaver 2004s master guide for more information. In addition we are updating the master guide with more information on this area. It should be published quite soon.
    Cheers,
    Mike.

  • Best Practice Re-install Process?  (Xcelsius 2008 Engage)

    The main impetus of this post is now to request a best practice reinstall process.  E.g., what files/directories or registry keys to delete after uninstalling under Windows XP?  Running Xcelsius 2008 5.1.1.0 Build 12,1,1,344 (Windows XP SP2)?  I want to clean it up and reinstall completely, ideally without also reinstalling Office 2007.
    Earlier today, I had loaded up an otherwise healthy project and all of a sudden my edits were not taking.  I could perform the change in the Component Properties window but the change did not translate in the project display area.
    I had closed and reopened this project several times, killed both "Xcelsius" and "EXCEL" processes, rebooted the machine a couple of times, all to no avail.  I was totally stuck, it seems.  Then, it randomly corrected itself after the Xth close/reboot/reload.  I'm past the issue now it seems, but please consider this an official bug report.  These issues are no longer a mere minor nuisance, and I am looking forward to a nice big update in the next Fix Pack release, which I assume is right around the corner (hint, hint).
    Thanks.
    Edited by: f l on Nov 17, 2008 9:20 PM

    f l,
    I'm not sure deleting keys from the registry is ever a best practice, however Xcelsius has listings in:
    HKEY_CURRENT_USER > Software > Business Objects > Xcelsius
    HKEY_LOCAL_MACHINE > SOFTWARE > Business Objects > Suite 12.0 > Xcelsius
    The current user folder holds temporary settings, such as how you've modified your interface.
    The local machine folder holds more important information.
    As always, it's recommended that you backup the registry and/or create a restore point before modifying or deleting any keys.
    As for directories, the only directory Xcelsius uses is the one you install to.  It also places some install logs in the temp directory, but they have no effect on the application.

  • Best Practice on installing Workflow Manager on a separate box

    Hi,
    We are installing Workflow Manager 1.0 to work with our SP2013 farm, which is fairly simple.
    However we anticipate a significant  amount of workflow work in the future. 
    Could you please share your thoughts/experience/lessons learnt on Having WF Manager on a separate box compared to having it on the same box as SP2013 Front end server in terms of
    1. Scalability
    2. Stability 
    3. Ease of Installation/Management  
    etc
    Thanks a lot.
    Dineth

    Hi Dineth,
    Thanks for posting your query,
    Kindly browse the below mentioned URLs to know about the best practices and installation step by step
    http://msdn.microsoft.com/library/azure/jj730571%28v=azure.10%29.aspx
    http://www.sjoukjezaal.com/blog/2014/05/sharepoint-2013-workflows-part-2-installing-and-configuring-the-workflow-manager/
    I hope this is helpful to you, mark it as Helpful.
    If this works, Please mark it as Answered.
    Regards,
    Dharmendra Singh (MCPD-EA | MCTS)
    Blog : http://sharepoint-community.net/profile/DharmendraSingh

  • How to install diagnostic agent  for nw 7.0sp17, with solman ehp1- sp25

    Hi Gurus,
    we are using NW 7.0 Enterprise portal  at SP17, want to configure E2E.  So installed solution manager 7.0 EHP1 SPS 25.
    Ran the Guided procedure solman_setup successfully. with  intitial config, basic config  and pending at managed system config.
    Here my question is:
    do i need to install smd agent on solman? or solman itself comes with agent. i cannot see any agent in mmc on solution manager.
    What is SOLMANDIAG and SOLMAN AGENT, SMD Agent and Host agent.
    The guide (https://websmp207.sap-ag.de/~sapidb/011000358700000952852009E)  says before install SMD agent, install host agent, diagnostics agents are available 7.11 on wards, while installing smd agent sapinst asking  SAP Unicode Kernel 711 , but currently my NW Portal system is using kernel 7.0..
    Any guide, how to proceed for E2E on nw7.0 SP17 with solman ehp1 sp25( highest availale spack)
    Thanks in advance.
    Regards
    Balaji

    Hi Balaji,
    As per the SMD agent 7.11 installation guide (https://service.sap.com/~sapidb/011000358700000952852009E) , Page 6 and 8, you would need to download the standard NW 7.11 DVDSs( usually kernel and Installation master) and SMD agent installation packages from the SMP. Location is mentioned in the guide as well.
    For your query that Portal is based in i386, these are two different things. The SMD Agent will be installed with its own kernel and also 7.11 kernel is not support edon 32bit. However the SMD agent will use its own 7.11 64bit kernel and Portal will use its i386 kernel. Hopefully your hardware is able to support both. I recommend to proceed with x86_64 7.11 kernel for your SMD installation. Incase the hardwar does not support this, go for alower release of SMD Agent wherein the kernel supports 32 bit hardware.
    Best Regards,
    Srikishan

  • [XI 3.1] BEST PRACTICE method of Oracle connection for RPTs on Linux

    Business Objects XI (3.1) - SP3.
    Running on Red Hat Enterprise Linux OS.
    7,000+ Crystal Reports 2008 *.rpt objects ONLY (No Universe / No WebI).
    All reports connecting to Oracle 10g databases.
    ==================
    In the past, all of this infrastructure was running on Windows Server OS and providing the database access via a Named ODBC connection (eg. "APP_DATA".)
    This made it easy to manage as all the Report Developers had a standard System DSN called "APP_DATA" which was the same as the System DSN name on all of our DEV, TEST/UAT, and PROD servers for Business Objects.
    When we wanted to move/promote a *.rpt file from DEV to PROD we did not have to change any "Database Connection" info as it was all taken care of by pointing the System DSN called "APP_DATA" a a different physical Oracle server at the ODBC level.
    Now, that hardware is moving from Windows OS to Red Hat Linux and we are trying to determine the Best Practices (and Pros/Cons) of using one of the three methods below to access the Oracle database for our *.rpts....
    1.) Oracle Native connection
    2.) ODBC connection
    3.) JDBC connection
    Here's what we have determined so far -
    1a.) Oracle Native connection should be the most efficient method of passing SQL-query to the DB with the fewest issues and best speed [PRO]
    1b.) Oracle Native connection may not be supported on Linux - http://www.forumtopics.com/busobj/viewtopic.php?t=118770&view=previous&sid=9cca754b468fc67888ab2553c0fbe448 [CON]
    1c.) Using Oracle Native would require special-handling on the *.rpts at either the source-file or the CMC level to change them from DEV -> TEST -> PROD connection. This would result in a lot more Developer / Admin overhead than they are currently used to. [CON]
    2a.) A 3rd-Party Linux ODBC option may be available from EasySoft - http://www.easysoft.com/products/data_access/odbc_oracle_driver/index.html - which would allow us to use a similar Developer / Admin overhead to what we are used to. [PRO]
    2b.) Adding a 3rd-Party Vendor into the mix may lead to support issues is we have problems with results or speeds of our queries. [CON]
    3a.) JDBC appears to be the "defacto standard" when running Oracle SQL queries from Linux. [PRO]
    3b.) There may be issues with results or speeds of our queries when using JDBC. [CON]
    3c.) Using JDBC requires the explicit-IP of the Oracle server to be defined for each connection. This would require special-handling on the *.rpts at either the source-file (and NOT the CMC level) to change them from DEV -> TEST -> PROD connection. This would result in a lot more Developer / Admin overhead than they are currently used to. [CON]
    ==================
    We would appreciate some advice from anyone who has been down this road before.
    What were your Best Practices?
    What can you add to the Pros and Cons listed above?
    How do we find the "sweet spot" between quality/performance/speed of reports and easy-overhead for the Admins and Developers?
    As always, thanks in advance for your comments.

    Hi,
    I just saw this article and I would like to add some infos.
    First you can quite easely reproduce the same way of working with the odbc entries by playing with the oracle name resolution on the server. By changing some files (sqlnet, tnsnames.ora,..) you can define a different oracle server for a specific name that will be the same accross all environments.
    Database name will be resolved differently regarding to the environment and therefore will access a different database.
    Second option is the possibility to change the connection in .rpt files by an automated way like the schedule manager. This tool is a additional web application to deploy that can change the connection settings of rpt reports on thousands of reports in a few clicks. you can find it here :
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/80af7965-8bdf-2b10-fa94-bb21833f3db8
    The last option is to do it with a small sdk script, for this purpose, a few lines of codes can change all the reports in a row.
    After some implementations on linux to oracle database I would prefer also the native connection. ODBC and JDBC are deprecated ways to connect to database. You can use DATADIRECT connectors that are quite good but for volumes you will see the difference.

Maybe you are looking for