Novell®
www.novell.com
AUTHORIZED DOCUMENTATION
Administration Quick Start
ZENworks® 10 Configuration Management SP3
novdocx (en) 16 April 2010
10.3
March 30, 2010
ZENworks 10 Configuration Management Administration Quick Start
Legal Notices
Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on
the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.
You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the
Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on
exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export
approvals.
novdocx (en) 16 April 2010
Copyright © 2007-2010 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the latest online documentation for this and other Novell products, see
the Novell Documentation Web page (http://www.novell.com/documentation).
Novell Trademarks
For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html).
Third-Party Materials
All third-party trademarks are the property of their respective owners.
novdocx (en) 16 April 2010
novdocx (en) 16 April 2010
4 ZENworks 10 Configuration Management Administration Quick Start
Contents
About This Guide 7
1 Administration Quick List 9
1.1 Zone Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.2 ZENworks Adaptive Agent Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.3 Device Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
1.4 System Messages and Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2 Management Tools Quick View 15
2.1 ZENworks Control Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.1.1 Accessing ZENworks Control Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.1.2 Navigating ZENworks Control Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
2.2 zman Command Line Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
2.2.1 Location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
2.2.2 Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
2.2.3 Help with Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
2.3 zac Command Line Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
2.3.1 Location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
2.3.2 Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
2.3.3 Help with Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
novdocx (en) 16 April 2010
3 Zone Configuration 21
3.1 Organizing Devices: Folders and Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
3.1.1 Folders. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
3.1.2 Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
3.1.3 Assignment Inheritance for Folders and Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.2 Registering Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.2.1 Registration Keys. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.2.2 Registration Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
3.2.3 Device Naming Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
3.2.4 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
3.3 Connecting to User Sources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
3.4 Creating ZENworks Administrator Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.5 Modifying Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
3.5.1 Modifying Configuration Settings at the Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
3.5.2 Modifying Configuration Settings on a Folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
3.5.3 Modifying Configuration Settings on a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
4 Device Management 41
4.1 Distributing Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
4.2 Applying Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
4.3 Imaging Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
4.3.1 Setting Up Preboot Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
4.3.2 Taking an Image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
4.3.3 Applying an Image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
4.3.4 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Contents 5
4.4 Remotely Managing Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
4.4.1 Creating a Remote Management Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
4.4.2 Configuring Remote Management Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
4.4.3 Performing Remote Control, Remote View, and Remote Execute Operations . . . . . 55
4.4.4 Performing a Remote Diagnostic Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
4.4.5 Performing a File Transfer Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
4.4.6 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
4.5 Patching Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
4.5.1 Purchasing and Activating a Subscription License . . . . . . . . . . . . . . . . . . . . . . . . . . 60
4.5.2 Providing a New Patch Management License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
4.5.3 Starting the Subscription Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
4.5.4 Deploying a Patch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
4.5.5 Renewing a Patch Management License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
4.5.6 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
4.6 Collecting Software and Hardware Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
4.6.1 Initiating a Device Scan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
4.6.2 Viewing a Device Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
4.6.3 Generating an Inventory Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
4.6.4 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
4.7 Monitoring Software Usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
4.8 Monitoring License Compliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
4.8.1 License Compliance Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
4.8.2 Discovering Installed Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
4.8.3 Creating a Catalog Product and Purchase Record . . . . . . . . . . . . . . . . . . . . . . . . . . 69
4.8.4 Creating a Licensed Product . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
4.8.5 Viewing Compliance Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
4.8.6 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
4.9 Allocating Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
4.10 Retiring Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
novdocx (en) 16 April 2010
5 ZENworks Adaptive Agent Deployment 79
5.1 Discovering Network Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
5.2 Importing Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
5.3 Installing the ZENworks Adaptive Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
5.3.1 Manual Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
5.3.2 Deploying the Agent to a Linux Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
5.3.3 ZENworks Control Center Deployment Task. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
5.4 Using the ZENworks Adaptive Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
5.4.1 Logging In to the Management Zone. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
5.4.2 Navigating the Adaptive Agent Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
5.4.3 Enabling and Disabling Adaptive Agent Features . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
5.4.4 Promoting a Managed Device to be a Satellite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
6 System Messages and Reports 97
6.1 Viewing System Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
6.1.1 Viewing a Summary of Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
6.1.2 Acknowledging Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
6.1.3 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
6.2 Creating a Watch List. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
6.3 Generating Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
A Documentation Updates 105
A.1 March 30, 2010: SP3 (10.3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
6 ZENworks 10 Configuration Management Administration Quick Start
About This Guide
novdocx (en) 16 April 2010
This ZENworks 10 Configuration Management Administration Quick Start helps you quickly master
the basics of administering your ZENworks
already have installed your ZENworks system. If not, see the ZENworks 10 Configuration
Management Installation Guide.
The information in this guide is organized as follows:
Administration Quick List (page 9): Provides a check list of what you need to do to configure
and monitor your ZENworks system, deploy the ZENworks Adaptive Agent to devices you
want to manage, and then perform management tasks on the devices.
Management Tools Quick View (page 15): Introduces ZENworks Control Center and the zman
command line utility, the two primary ZENworks management tools.
Zone Configuration (page 21): Provides instructions for configuring your ZENworks system to
best support the management tasks you can perform.
ZENworks Adaptive Agent Deployment (page 79): Provides instructions for installing the
ZENworks Adaptive Agent to devices. The Adaptive Agent is required on any device you want
to manage with ZENworks.
Device Management (page 41): Provides instructions for performing the various tasks for
ongoing management of devices.
System Messages and Reports (page 97): Introduces the ways you can get information about
the activity in your ZENworks system.
®
10 Configuration Management system. You should
Audience
This guide is intended for anyone who will configure the ZENworks system, monitor the ZENworks
system, or perform any ZENworks tasks related to managing devices or users.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comments feature at the bottom of each page of the
online documentation, or go to the Novell Documentation Feedback site (http://www.novell.com/
documentation/feedback.html) and enter your comments there.
Additional Documentation
ZENworks 10 Configuration Management is supported by other documentation (in both PDF and
HTML formats) that you can use to learn about and implement the product. For additional
documentation, see the ZENworks 10 Configuration Management SP3 documentation (http://
www.novell.com/documentation/zcm10/).
Documentation Conventions
In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
About This Guide 7
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.
novdocx (en) 16 April 2010
8 ZENworks 10 Configuration Management Administration Quick Start
1
Administration Quick List
novdocx (en) 16 April 2010
1
You’ve installed your ZENworks® Server (or maybe a couple of servers) and are eager to start using
all of the time-saving functionality in Novell
following sections are designed to quickly introduce you to the configuration, deployment,
management, and status monitoring concepts and tasks that help you effectively manage the devices
in your environment.
Section 1.1, “Zone Configuration,” on page 9
Section 1.2, “ZENworks Adaptive Agent Deployment,” on page 10
Section 1.3, “Device Management,” on page 11
Section 1.4, “System Messages and Reports,” on page 13
®
ZENworks 10 Configuration Management SP3. The
1.1 Zone Configuration
Before you start distributing software and applying policies to devices, there are a few configuration
tasks you need to complete to ensure that your Management Zone is configured to let you take full
advantage of ZENworks management capabilities.
Table 1-1 Zone Configuration Tasks
Task Details
Create folders and groups for
organizing devices
Organize devices into folders and groups to ease the overhead
involved in applying ZENworks configuration settings and
performing tasks on similar devices. Rather than making
assignments or performing tasks on individual devices, you can
manage the folders and groups, with each device in a folder or
group inheriting the assignment or task.
For instructions, see Section 3.1, “Organizing Devices: Folders
and Groups,” on page 21.
Create registration keys or rules The ZENworks Adaptive Agent must be installed on each device
that you want to manage. When you deploy the ZENworks
Adaptive Agent to a device, the device is registered in your
Management Zone.
You can use registration keys or rules to automatically assign
devices to the appropriate folders and groups, ensuring that they
immediately receive the correct configuration settings and
software and policy assignments.
For instructions, see Section 3.2, “Registering Devices,” on
page 27.
Administration Quick List
9
Task Details
Add user sources You can assign software and policies to users as well as devices.
Unlike device-assigned software and policies, user-assigned
software and policies are available on the device only when the
user is logged in to the Management Zone.
You do not manually add users to your Management Zone.
Instead, you connect to an LDAP directory that you want to use
as your authoritative user source in ZENworks. You can then
make software and policy assignments to any users defined in
the user source.
For instructions, see Section 3.3, “Connecting to User Sources,”
on page 32.
novdocx (en) 16 April 2010
Create additional administrator
accounts
Modify zone configuration
settings
During installation, a default ZENworks administrator account
(named Administrator) is created. The default Administrator
account provides rights to the entire Management Zone.
You can create additional administrator accounts that restrict
access to the zone. For example, you could create an account
that only provides the ability to assign software to devices or
users in specific folders.
For instructions, see Section 3.4, “Creating ZENworks
Administrator Accounts,” on page 34.
Your zone settings are preset to provide the most common
configuration. If necessary, you can change the settings.
For instructions, see Section 3.5, “Modifying Configuration
Settings,” on page 36.
1.2 ZENworks Adaptive Agent Deployment
The ZENworks Adaptive Agent communicates with the ZENworks Server to perform management
tasks on a device. You must deploy the Adaptive Agent to all devices you want to manage.
Deploying the Adaptive Agent installs the agent files and registers the device in your Management
Zone.
Table 1-2 Deployment Tasks
Task Details
Discover devices If you choose to use ZENworks Control Center to deploy the
agent to devices, you must first add the devices to your
Management Zone. You can do this by performing a network
discovery.
For instructions, see Section 5.1, “Discovering Network Devices,”
on page 79.
10 ZENworks 10 Configuration Management Administration Quick Start
Task Details
Import devices You can also import devices into your Management Zone from a
comma-separated values (CSV) file. Each device entry must
include its IP address or DNS name.
For instructions, see Section 5.2, “Importing Devices,” on
page 80.
novdocx (en) 16 April 2010
Install the ZENworks Adaptive
Agent
You can use a variety of methods to install the ZENworks
Adaptive Agent to a device:
Use ZENworks Control Center to deploy the agent from a
ZENworks Server to the device.
At the device, use a Web browser to download the agent
from a ZENworks Server and install it.
Include the agent in an image and apply the image to the
device.
For instructions, see Section 5.3, “Installing the ZENworks
Adaptive Agent,” on page 81.
Log in and use the ZENworks
Adaptive Agent
To receive user-assigned bundles and policies on a device, you
must log in to the Management Zone. In addition, you can control
the Adaptive Agent functionality by enabling or disabling various
Adaptive Agent features.
For instructions, see Section 5.4, “Using the ZENworks Adaptive
Agent,” on page 89.
1.3 Device Management
ZENworks provides a variety of tasks you can perform to manage your devices. The following tasks
can be done as needed and in any order.
Table 1-3 Device Management
Task Details
Distribute software Distribute software through the use of bundles. Bundles include
the software files and instructions required to install, launch, and
uninstall (when necessary) the software. You can create bundles
to distribute Windows* Installer applications (both MSI and MSP),
non-Windows Installer applications, Web links, and thin-client
applications.
For instructions, see Section 4.1, “Distributing Software,” on
page 41.
Apply policies Control device behavior through the application of policies.
ZENworks lets you create and apply Windows Group policies,
roaming profile policies, browser bookmark policies, printer
policies, and more.
For instructions, see Section 4.2, “Applying Policies,” on page 43.
Administration Quick List 11
Task Details
novdocx (en) 16 April 2010
Take images of and apply images
to devices
Remotely manage devices Remotely access devices to provide user assistance or perform
Apply software patches to
devices
Scan devices to collect software
and hardware inventory
Create images of devices, apply images to devices, and run
imaging scripts on devices. ZENworks Configuration
Management uses its Preboot Services functionality to perform
these imaging tasks on devices at startup.
For instructions, see Section 4.3, “Imaging Devices,” on page 45.
operations. You can control or view a device. You can also
execute and transfer files, as well as perform diagnostics to
troubleshoot problems with the device.
For instructions, see Section 4.4, “Remotely Managing Devices,”
on page 52.
ZENworks Patch Management, a separately licensed product, is
included for evaluation in ZENworks Configuration Management.
Patch Management lets you apply software patches
automatically and consistently to minimize vulnerabilities and
issues.
For instructions, see Section 4.5, “Patching Software,” on
page 60.
Scan devices to collect software and hardware inventories for the
devices. The inventory information can help you make decisions
about software distribution and hardware upgrades.
For instructions, see Section 4.6, “Collecting Software and
Hardware Inventory,” on page 63.
Monitor software usage ZENworks Asset Management, a separately licensed product, is
included for evaluation in ZENworks 10 Configuration
Management.
Asset Management lets you generate reports to analyze how
much and how often software products are being used.
For instructions, see Section 4.7, “Monitoring Software Usage,”
on page 65
Monitor software license
compliance
ZENworks Asset Management, a separately licensed product, is
included for evaluation in ZENworks 10 Configuration
Management.
Asset Management lets you compare actual product installations
with purchased licenses to determine your organization’s
compliance with the product license agreement.
For instructions, see Section 4.8, “Monitoring License
Compliance,” on page 67.
12 ZENworks 10 Configuration Management Administration Quick Start
Task Details
Allocate licenses ZENworks Asset Management, a separately licensed product, is
included for evaluation in ZENworks 10 Configuration
Management.
Asset Management lets you allocate licenses within your
organization to track ownership and distribution of the licenses.
You can allocate licenses to devices or demographics (sites,
departments, and cost centers).
For instructions, see Section 4.9, “Allocating Licenses,” on
page 74.
Retire devices Retire a server or workstation to remove if from your ZENworks
Zone.
For instructions, see Section 4.10, “Retiring Devices,” on
page 76.
1.4 System Messages and Reports
novdocx (en) 16 April 2010
As you perform management tasks in your zone, information is recorded so that you can view the
status of your zone and the activities taking place within it.
Table 1-4 System Messages and Reports Tasks
Task Details
View system messages The ZENworks system generates informational, warning, and
error messages to help you monitor activities such as the
distribution of software and application of policies.
For instructions, see Section 6.1, “Viewing System Messages,”
on page 97.
Create a Watch List If you have devices, bundles, and policies whose activity you
want to closely monitor, you can add them to the Watch List.
For instructions, see Section 6.2, “Creating a Watch List,” on
page 100.
Generate reports Generate reports for devices, bundles, policies, and much more.
For instructions, see Section 6.3, “Generating Reports,” on
page 101.
Administration Quick List 13
novdocx (en) 16 April 2010
14 ZENworks 10 Configuration Management Administration Quick Start
2
Management Tools Quick View
Novell® ZENworks® 10 Configuration Management provides both a Web-based console
(ZENworks Control Center) and a command line utility (zman) that you can use to manage your
ZENworks system. The following sections explain how to access and use the management tools:
Section 2.1, “ZENworks Control Center,” on page 15
Section 2.2, “zman Command Line Utility,” on page 17
Section 2.3, “zac Command Line Utility,” on page 18
2.1 ZENworks Control Center
ZENworks Control Center is installed on all ZENworks Servers in the Management Zone. You can
perform all management tasks on any ZENworks Server.
Section 2.1.1, “Accessing ZENworks Control Center,” on page 15
Section 2.1.2, “Navigating ZENworks Control Center,” on page 16
novdocx (en) 16 April 2010
2
2.1.1 Accessing ZENworks Control Center
1 Using a Web browser that meets the requirements listed in “Administration Browser
Requirements” in the ZENworks 10 Configuration Management Installation Guide, enter the
following URL:
https://ZENworks_Server_Address:port
Replace ZENworks_Server_Address with the IP address or DNS name of the ZENworks
Server. You only need to specify the port if you are not using one of the default ports (80 or
443). ZENworks Control Center requires an HTTPS connection; HTTP requests are redirected
to HTTPS.
The login dialog box is displayed.
2 In the Username field, type
3 In the Password field, type the Administrator password created during installation.
Administrator
.
Management Tools Quick View
15
To prevent unauthorized users from gaining access to ZENworks Control Center, the
Help Information
Work PanelNavigation Tabs
Frequently Used
Objects
Task List
administrator account is disabled after three unsuccessful login attempts, and a 60-second
timeout is enforced before you can attempt another login. To change these default values, see
“Changing the Default Login Disable Values” in the ZENworks 10 Configuration Management
System Administration Reference.
4 Click Login to display ZENworks Control Center.
For more detailed information on logging in as a different administrator, see “Accessing
ZENworks Control Center” in the ZENworks 10 Configuration Management System
Administration Reference.
NOTE: If you use Novell iManager as the management tool for other Novell products, you can set
up ZENworks Control Center to be available through iManager. For instructions, see “Accessing
ZENworks Control Center through Novell iManager” in the ZENworks 10 Configuration
Management System Administration Reference.
2.1.2 Navigating ZENworks Control Center
The following Servers page represents a standard view in ZENworks Control Center.
novdocx (en) 16 April 2010
16 ZENworks 10 Configuration Management Administration Quick Start
Navigation Tabs: The tabs in the left pane let you navigate among the functional areas of
ZENworks. For example, the Servers page shown above lets you manage tasks associated with
servers.
Task List: The task list in the left pane provides quick access to the most commonly performed
tasks for the current page. The task list changes for each page. For example, the task list on the
Bundles page displays bundle-related tasks and the task list on the Devices page displays devicerelated tasks.
Frequently Used Objects: The Frequently Used list in the left pane displays the 10 objects that you
have accessed most often, from most used to least used. Clicking an object takes you directly to the
details page for the object.
Wor k Pa nel: The work panels are where you monitor and manage your ZENworks system. The
panels change depending on the current page. In the above example, there are two work panels:
Devices and Search. The Devices panel lists the servers, folders, server groups, and dynamic server
groups that have been created; you use this panel to manage servers. The Search panel lets you filter
the Devices panel based on criteria such as a server’s name, operating system, or status.
Help Information: The Help button links to Help topics that provide information about the current
page. The Help button links change depending on the current page.
novdocx (en) 16 April 2010
2.2 zman Command Line Utility
The zman utility provides a command line management interface that lets you perform most of the
tasks available in ZENworks Control Center You cannot perform imaging and preboot tasks,
Remote Management tasks, and software patching tasks.
The primary purpose of the zman utility is to enable you to perform operations through a script.
However, you can also perform operations manually at a command line.
Section 2.2.1, “Location,” on page 17
Section 2.2.2, “Syntax,” on page 17
Section 2.2.3, “Help with Commands,” on page 18
2.2.1 Location
The utility is installed on all ZENworks Servers in the following location:
%ZENWORKS_HOME%\bin
where
%ZENWORKS_HOME%
c:\novell\zenworks\bin
is
2.2.2 Syntax
represents the ZENworks installation path. On Windows, the default path
. On Linux*, the default path is
/opt/novell/zenworks/bin
.
The zman utility uses the following basic syntax:
zman category-action [options]
For example, to assign a software bundle to a device, you use the following command:
zman bundle-assign workstation bundle1 wks1
Management Tools Quick View 17
where
bundle-assign
is the category-action and
workstation bundle1 wks1
are the options. In
this example, the options are device type (workstation), bundle name (bundle1), and target device
(wks1).
2.2.3 Help with Commands
The best way to understand the commands is to use the online help or see “zman(1)” in the
ZENworks 10 Configuration Management Command Line Utilities Reference.
To use the online help:
novdocx (en) 16 April 2010
1 On the ZENworks Server, enter
zman --help
at a command prompt.
This command displays the basic usage (syntax) and a list of the available command categories.
You can also use the following to get help:
Command Description
zman --help | more
zman category --help | more
zman command --help | more
Displays a complete list of commands by category.
Displays a complete list of commands within a category.
Displays help for a command
2.3 zac Command Line Utility
The zac utility provides a command line management interface that lets you perform tasks available
in the ZENworks Adaptive Agent.
Section 2.3.1, “Location,” on page 18
Section 2.3.2, “Syntax,” on page 18
Section 2.3.3, “Help with Commands,” on page 19
2.3.1 Location
The utility is installed on all Windows managed devices in the following location:
%ZENWORKS_HOME%\bin
where
%ZENWORKS_HOME%
c:\program files\novell\zenworks\bin
(x86)\novell\zenworks\bin
represents the ZENworks installation path. The default path is
on a 32-bit Windows device and
on a 64-bit Windows device.
2.3.2 Syntax
The zac utility uses the following basic syntax:
zac command options
For example, to launch a bundle on a device, you use the following command:
zac bundle-launch "bundle 1"
18 ZENworks 10 Configuration Management Administration Quick Start
c:\program files
where
bundle-launch
is the command and
bundle 1
is the command option. In this example, the
option is the display name of the bundle to be launched. Enclosing quotation marks are required
only if the bundle display name includes spaces.
2.3.3 Help with Commands
The best way to understand the commands is to use the online help or see “zac(1)” in the ZENworks
10 Configuration Management Command Line Utilities Reference.
To use the online help:
1 On the managed device, enter one of the following commands at a command prompt.
Command Description
novdocx (en) 16 April 2010
zac --help
zac command --help
Displays a complete list of commands.
Displays detailed help for a command.
Management Tools Quick View 19
novdocx (en) 16 April 2010
20 ZENworks 10 Configuration Management Administration Quick Start
3
Zone Configuration
Novell® ZENworks® 10 Configuration Management is designed to let you efficiently manage a
large number of devices and users with as little effort as possible. The first step in easing this
management burden is to ensure that you’ve configured your Management Zone so that you can take
full advantage of the ZENworks capabilities.
The following sections introduce the basic concepts you need to set up a Management Zone that best
supports the ongoing management tasks you perform. Each section explains a management concept
and provides general steps to perform the tasks associated with the concept.
Section 3.1, “Organizing Devices: Folders and Groups,” on page 21
Section 3.2, “Registering Devices,” on page 27
Section 3.3, “Connecting to User Sources,” on page 32
Section 3.4, “Creating ZENworks Administrator Accounts,” on page 34
Section 3.5, “Modifying Configuration Settings,” on page 36
novdocx (en) 16 April 2010
3
3.1 Organizing Devices: Folders and Groups
Using ZENworks Control Center, you can manage devices by performing tasks directly on
individual device objects. However, this approach is not very efficient unless you have only a few
devices to manage. To optimize management of a large number of devices, ZENworks lets you
organize devices into folders and groups; you can then perform tasks on a folder or group to manage
its devices.
You can create folders and groups at any time. However, the best practice is to create folders and
groups before you register devices in your zone. This allows you to use registration keys and rules to
automatically add devices to the appropriate folders and groups when they register (see “Registering
Devices” on page 27).
Section 3.1.1, “Folders,” on page 21
Section 3.1.2, “Groups,” on page 23
Section 3.1.3, “Assignment Inheritance for Folders and Groups,” on page 27
3.1.1 Folders
Folders are a great tool to help you organize devices in order to simplify management of those
devices. You can apply configuration settings, assign content, and perform tasks on any folder.
When you do so, the folder’s devices inherit those settings, assignments, and tasks.
For best results, you should place devices with similar configuration setting requirements in the
same folder. If all devices in the folder require the same content or tasks, you can also make content
or task assignments on the folder. However, all devices in the folder might not have the same content
and task requirements. Therefore, you can organize the devices into groups and assign the
appropriate content and tasks to each groups (see “Groups” on page 23 below).
Zone Configuration
21
For example, assume that you have workstations at three different sites. You want to apply different
configuration settings to the workstations at the three sites, so you create three folders (
,
Workstations/Site1
/Workstations/Site2
, and
/Workstations/Site3
) and place the
/
appropriate workstations in each folder. You decide that most of the configuration settings apply to
all workstations, so you configure those settings at the Management Zone. However, you want to
perform a weekly collection of software and hardware inventory at Site1 and Site2 and a monthly
inventory collection at Site3. You configure a weekly inventory collection at the Management Zone
and then override the setting on the Site3 folder to apply a monthly schedule. Site1 and Site2 collect
inventory weekly, and Site3 collects inventory monthly.
Creating a Folder
1 In ZENworks Control Center, click the Devices tab.
2 Click the Workstations folder.
novdocx (en) 16 April 2010
3 Click New > Folder to display the New Folder dialog box.
22 ZENworks 10 Configuration Management Administration Quick Start
novdocx (en) 16 April 2010
4 In the Name field, type a name for the new folder.
When you name an object in the ZENworks Control Center (folders, groups, bundles, policies,
and so forth), ensure that the name adheres to the following conventions:
The name must be unique in the folder.
Depending on the database software being used for the ZENworks database, uppercase
and lowercase letters might not create uniqueness for the same name. The embedded
database included with ZENworks Configuration Management is case insensitive, so
Folder 1 and FOLDER 1 are the same name and cannot be used in the same folder. If you
use an external database that is case-sensitive, Folder 1 and FOLDER 1 are unique.
If you use spaces, you must enclose the name in quotes when entering it on the command
line. For example, you must enclose Folder 1 in quotes (“Folder 1”) when entering it in the
zman utility.
The following characters are invalid and cannot be used: / \ * ? : " ' < > | ` % ~
5 Click OK to create the folder.
You can also use the
workstation-folder-create
and
server-folder-create
commands in
the zman utility to create device folders. For more information, see “Workstation Commands” and
“Server Commands” in the ZENworks 10 Configuration Management Command Line Utilities
Reference.
3.1.2 Groups
As you can with folders, you can also assign content and perform tasks on device groups. When you
do so, the group’s devices inherit those assignments and tasks. Unlike with folders, you cannot apply
configuration settings to groups.
Zone Configuration 23
Groups provide an additional layer of flexibility for content assignments and tasks. In some cases,
you might not want to assign the same content to and perform the same task on all devices in a
folder. Or, you might want to assign the same content to and perform tasks on one or more devices in
different folders. To do so, you can add the devices to a group (regardless of which folders contain
the devices) and then assign the content to and perform the tasks on the group.
For example, let’s revisit the example of the workstations at three different sites (see Section 3.1.1,
“Folders,” on page 21). Assume that some of the workstations at each site need the same accounting
software. Because groups can be assigned software, you could create an Accounting group, add the
target workstations to the group, and then assign the appropriate accounting software to the group.
The advantage to making an assignment to a group is that all devices contained in that group receive
the assignment, but you only need to make the assignment one time. In addition, a device can belong
to any number of unique groups, and the assignments from multiple groups are additive. For
example, if you assign a device to group A and B, it inherits the software assigned to both groups.
ZENworks provides both groups and dynamic groups. From the perspective of content assignments
or performing tasks, groups and dynamic groups function exactly the same. The only difference
between the two types of groups is the way that devices are added to the group. With a group, you
must manually add devices. With a dynamic group, you define criteria that a device must meet to be
a member of the group, and then devices that meet the criteria are automatically added.
novdocx (en) 16 April 2010
ZENworks include several predefined dynamic server groups (Windows 2000 Servers and Windows
2003 Servers) and dynamic workstation groups (Windows XP Workstation, Windows 2000
Workstation, and Windows Vista Workstations). Any devices that have these operating systems are
automatically added to the appropriate dynamic group.
Creating a Group
1 In ZENworks Control Center, click the Devices tab.
2 If you want to create a group for servers, click the Servers folder.
or
If you want to create a group for workstations, click the Workstations folder.
3 Click New > Server Group (or New > Workstation Group for workstations) to launch the Create
New Group Wizard.
24 ZENworks 10 Configuration Management Administration Quick Start
novdocx (en) 16 April 2010
4 On the Basic Information page, type a name for the new group in the Group Name field, then
click Next.
The group name must follow the naming conventions.
5 On the Summary page, click Finish to create the group without adding members.
or
Click Next if you want to add members to the group, then continue with Step 6.
6 On the Add Group Members page, click Add to add devices to the group, then click Next when
finished adding devices.
7 On the Summary page, click Finish to create the group.
You can also use the
workstation-group-create
and
server-group-create
commands in the
zman utility to create device groups. For more information, see “Workstation Commands” and
“Server Commands” in the ZENworks 10 Configuration Management Command Line Utilities
Reference.
Creating a Dynamic Group
1 In ZENworks Control Center, click the Devices tab.
2 If you want to create a group for servers, click the Servers folder.
or
If you want to create a group for workstations, click the Workstations folder.
Zone Configuration 25
3 Click New > Dynamic Server Group (or New > Dynamic Workstation Group for workstations)
to launch the Create New Group Wizard.
novdocx (en) 16 April 2010
4 On the Basic Information page, type a name for the new group in the Group Name field, then
click Next.
The group name must follow the naming conventions.
5 On the Define Filter for Group Members page, define the criteria that a device must meet to
become a member of the group, then click Next.
Click the Help button for details about creating the criteria.
6 On the Summary page, click Finish to create the group.
26 ZENworks 10 Configuration Management Administration Quick Start
3.1.3 Assignment Inheritance for Folders and Groups
When you assign a content to a folder, all objects (users, devices, subfolders) except groups that are
located in the folder inherit the assignment. For example, if you assign a BundleA to DeviceFolder1,
all devices within the folder (including all devices in subfolders) inherit the BundleA assignment.
However, none of the device groups located in DeviceFolder1 inherit the assignment. Essentially,
folder assignments do not flow down to groups located within the folder.
3.2 Registering Devices
When you deploy the ZENworks Adaptive Agent to a device, the device is registered in your
Management Zone and becomes a managed device. As part of the registration, you can specify the
device’s ZENworks name and the folder and groups to which you want the device added.
novdocx (en) 16 April 2010
By default, a device’s hostname is used as its ZENworks name, it is added to the
Workstations
devices to other folders and add them to groups, but this can be a burdensome task if you have a
large number of devices or if you are consistently adding new devices. The best way to manage a
large number of devices is to have them automatically added to the correct folders and groups during
registration.
To add devices to folders and groups during registration, you can use registration keys, registration
rules, or both. Both registration keys and registration rules let you assign folder and group
memberships to a device. However, there are differences between keys and rules that you should be
aware of before choosing whether you want to use one or both methods for registration.
Section 3.2.1, “Registration Keys,” on page 27
Section 3.2.2, “Registration Rules,” on page 29
Section 3.2.3, “Device Naming Template,” on page 30
Section 3.2.4, “Where to Find More Information,” on page 32
folder, and it is not given membership in any groups. You can manually move
/Servers
or
/
3.2.1 Registration Keys
A registration key is an alphanumeric string that you manually define or randomly generate. During
deployment of the ZENworks Adaptive Agent on a device, the registration key must be provided.
When the device connects to a ZENworks Server for the first time, the device is added to the folder
and groups defined within the key.
You can create one or more registration keys to ensure that devices are placed in the desired folders
and groups. For example, you might want to ensure that all of the Sales department’s workstations
are added to the
(SalesTeam1, SalesTeam2, SalesTeam3) depending on their team assignments. You could create
three different registration keys and configure each one to add the Sales workstations to the
Workstations/Sales
correct registration key, it is added to the appropriate folder and group.
To create a registration key:
1 In ZENworks Control Center, click the Configuration tab, then click the Registration tab.
/Workstations/Sales
folder and the appropriate team group. As long as each workstation uses the
folder but are divided into three different groups
/
Zone Configuration 27
2 In the Registration Keys panel, click New > Registration Key to launch the Create New
Registration Key Wizard.
novdocx (en) 16 April 2010
3 Follow the prompts to create the key.
For information about what you need to supply at each step of the wizard, click the Help
button.
You can also use the
registration-create-key
command in the zman utility to create a
registration key. For more information, see “Registration Commands” in the ZENworks 10
Configuration Management Command Line Utilities Reference.
28 ZENworks 10 Configuration Management Administration Quick Start
3.2.2 Registration Rules
If you don’t want to enter a registration key during deployment, or if you want devices to be
automatically added to different folders and groups based on predefined criteria (for example,
operating system type, CPU, or IP address), you can use registration rules.
ZENworks includes a default registration rule for servers and another one for workstations. If a
device registers without a key and you haven’t created registration rules, the default registration
rules are applied to determine the folder assignments. The two default rules cause all servers to be
added to the
The two default rules are designed to ensure that no server or workstation registration fails.
Therefore, you cannot delete or modify these two default rules. You can, however, define additional
rules that enable you to filter devices as they register and add them to different folders and groups.
If, as recommended in Section 3.1, “Organizing Devices: Folders and Groups,” on page 21, you’ve
established folders for devices with similar configuration settings and groups for devices with
similar assignments, then newly registered devices automatically receive the appropriate
configuration settings and assignments.
To create a registration rule:
/Servers
folder and all workstations to the
/Workstations
folder.
novdocx (en) 16 April 2010
1 In ZENworks Control Center, click the Configuration tab, then click the Registration tab.
2 In the Registration Rules panel, click New to launch the Create New Registration Rule Wizard.
Zone Configuration 29
novdocx (en) 16 April 2010
3 Follow the prompts to create the rule.
For information about what you need to supply at each step of the wizard, click the Help
button.
You can also use the
more information, see “Ruleset Commands” in the ZENworks 10 Configuration Management
Command Line Utilities Reference.
ruleset-create
command in the zman utility to create a registration rule. For
3.2.3 Device Naming Template
The device naming template determines how devices are named when they register. By default, a
device’s hostname is used. You can change it to use any combination of the following machine
variables: ${HostName}, ${GUID}, ${OS}, ${CPU}, ${DNS}, ${IPAddress}.
1 In ZENworks Control Center, click the Configuration tab.
2 In the Management Zone Settings panel, click Device Management.
30 ZENworks 10 Configuration Management Administration Quick Start
Loading...