Novell ZENWORKS HANDELD MANAGEMENT Administration Guide
Novell®
www.novell.com
Administration Guide
ZENworks®
Handheld Management
novdocx (en) 13 May 2009
AUTHORIZED DOCUMENTATION
7 SP1 IR4
June 17, 2009
Novell ZENworks 7 Handheld Management Administration Guide
Legal Notices
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities
on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export
laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.
Please refer to www.novell.com/info/exports/ for more information on exporting Novell software. Novell assumes no
responsibility for your failure to obtain any necessary export approvals.
Copyright © 2009 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
novdocx (en) 13 May 2009
Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent
applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the online documentation for this and other Novell products, and to get
updates, see www.novell.com/documentation.
Novell Trademarks
For a list of Novell trademarks, see the Novell Trademark and Service Mark (http://www.novell.com/company/legal/
trademarks/tmlist.html) list at http://www.novell.com/company/legal/trademarks/tmlist.html.
Third-Party Materials
All third-party trademarks are the property of their respective owners.
novdocx (en) 13 May 2009
novdocx (en) 13 May 2009
4 Novell ZENworks 7 Handheld Management Administration Guide
Contents
About This Guide 9
1 Setting Up Handheld Import 11
1.1 Creating the Handheld Service Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
1.2 Configuring the Handheld Import Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
1.3 Associating the Handheld Service Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
2 Using ZENworks Handheld Management Policies 17
2.1 Understanding ZENworks Handheld Management Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . 17
2.2 Creating Policy Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
2.3 Setting Up Container Package Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
2.3.1 Search Policy Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
2.3.2 Search Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
2.3.3 Handheld Application Search Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
2.3.4 Associating the Container Package. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
2.4 Setting Up Handheld Package and Handheld User Policies . . . . . . . . . . . . . . . . . . . . . . . . . . 29
2.4.1 BlackBerry Configuration Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
2.4.2 BlackBerry Inventory Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
2.4.3 BlackBerry Security Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
2.4.4 Palm Client Configuration Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
2.4.5 Palm Configuration Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
2.4.6 Palm Access Point Configuration Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
2.4.7 Palm File Retrieval Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
2.4.8 Palm Security Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
2.4.9 WinCE Client Configuration Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
2.4.10 WinCE Configuration Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
2.4.11 WinCE Access Point Configuration Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
2.4.12 WinCE File Retrieval Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
2.4.13 WinCE Remote Management Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
2.4.14 WinCE Security Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
2.4.15 Associating the Handheld Package or the Handheld User Package . . . . . . . . . . . . . 73
2.4.16 Associating a User Object to a BlackBerry Device . . . . . . . . . . . . . . . . . . . . . . . . . . 74
2.4.17 Scheduling Packages and Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
2.5 Setting Up Handheld Service Package Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
2.6 Viewing Policy Status Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
2.6.1 Viewing Status for a Specific Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
2.6.2 Viewing Policy Status for a Specific Handheld Device . . . . . . . . . . . . . . . . . . . . . . . 78
novdocx (en) 13 May 2009
3 Using Queries and Groups 81
3.1 Using Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
3.1.1 Creating a Query . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
3.1.2 Using Logical Operators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
3.2 Using Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
3.2.1 Creating Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
3.2.2 Viewing the Properties of a Group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
3.2.3 Changing Group Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
3.2.4 Changing the Update Schedule of Query-Based Groups . . . . . . . . . . . . . . . . . . . . . 92
3.2.5 Deleting a Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Contents 5
3.2.6 Viewing Handheld Application Objects Assigned to a Group . . . . . . . . . . . . . . . . . . 93
3.2.7 Changing a Group’s Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
4 Distributing Software to Handheld Devices 97
4.1 Understanding Handheld Application Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
4.1.1 Specifying Source Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
4.1.2 Understanding Automatic Application Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
4.1.3 Installing Software at a Predefined Time Even When the Device is Not Connected to
the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
4.2 Distributing Applications to Handheld Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
4.2.1 Creating a Handheld Application Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
4.2.2 Configuring a Handheld Application Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
4.2.3 Scheduling the Distribution of a Handheld Application Object. . . . . . . . . . . . . . . . . 104
4.3 Displaying Handheld Application Object Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
4.4 Modifying a Handheld Application Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
4.4.1 Modifying the Contents of a Handheld Application Object. . . . . . . . . . . . . . . . . . . . 107
4.4.2 Scanning for Updated Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
4.4.3 Deleting a Handheld Application Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
4.4.4 Deleting a Handheld Application Object’s Associations . . . . . . . . . . . . . . . . . . . . . 108
novdocx (en) 13 May 2009
5 Using Inventory and Reports 109
5.1 Viewing Software Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
5.1.1 Viewing Software Inventory for a Specific Handheld Device . . . . . . . . . . . . . . . . . . 111
5.1.2 Viewing Software Inventory Across All Palm OS, BlackBerry, or Windows CE Devices
in Your System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
5.1.3 Identifying Files for Windows CE Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
5.1.4 Ignoring or Identifying Windows CE Files and Applications. . . . . . . . . . . . . . . . . . . 115
5.2 Viewing Hardware Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
5.3 Viewing Network Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
5.4 Using Inventory Reports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
5.4.1 Running Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
5.4.2 Exporting Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
5.4.3 Creating Custom Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
5.5 Printing Data from the ZENworks Handheld Management Inventory Viewer. . . . . . . . . . . . . 125
6 Remotely Viewing or Controlling the IP-Enabled Windows CE Devices 127
6.1 Configuring WinCE Remote Management Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
6.2 Setting a VNC Password on the Handheld Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
6.3 Initiating a Remote View or a Remote Control Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
6.3.1 Initiating a Remote View or a Remote Control Session from a Device Object . . . . 128
6.3.2 Initiating a Remote View or a Remote Control Session from a User Object . . . . . . 129
7 Making System Configuration Changes 131
7.1 Configuring User Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
7.2 Configuring the Proxy Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
7.2.1 Configuring Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
7.2.2 Configuring Network Usage Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
7.2.3 Configuring Dial-Up Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
7.2.4 Enabling or Disabling Message Transfers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
7.2.5 Configuring Handheld Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
7.2.6 Configuring IP Communication for the ZENworks Handheld Management Access
Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
6 Novell ZENworks 7 Handheld Management Administration Guide
7.2.7 Connecting to the ZENworks Handheld Management Server . . . . . . . . . . . . . . . . . 138
7.3 Converting to Microsoft SQL Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
7.4 Compacting and Repairing the Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
7.4.1 Compacting the Server Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
7.4.2 Compacting the Proxy Service Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
7.4.3 Compacting and Repairing the Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
7.5 Configuring the ZENworks Handheld Management Access Point and the Desktop
Synchronization Integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
7.5.1 Configuring Bandwidth Usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
7.5.2 Configuring Client Retries and Power Down (or Suspend) . . . . . . . . . . . . . . . . . . . 142
7.6 Configuring the ZENworks Handheld Management IP Clients. . . . . . . . . . . . . . . . . . . . . . . . 143
7.6.1 Configuring the ZENworks Handheld Management Palm OS IP Client. . . . . . . . . . 143
7.6.2 Configuring the ZENworks Handheld Management Windows CE IP Client . . . . . . 145
A Troubleshooting 147
A.1 Error Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
A.2 ConsoleOne Status Pages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
A.3 Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
A.4 Troubleshooting Strategies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
A.5 Contacting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
novdocx (en) 13 May 2009
B Configuring SSL and HTTP Settings 157
B.1 Configuring the SSL and HTTP Communication between the ZENworks Handheld Management
Server and the ZENworks Handheld Management Access Point . . . . . . . . . . . . . . . . . . . . . 158
B.2 Configuring SSL and HTTP Communication between the ZENworks Handheld Management
Access Point and the Handheld Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
B.3 Changing the Default Ports on the ZENworks Handheld Management Server and ZENworks
Handheld Management Access Point Communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
B.4 Changing the Default Ports for the ZENworks Handheld Management Access Point and the
Handheld Devices Communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
C Security Considerations 167
D Documentation Updates 169
D.1 June 17, 2009 (Support Pack 1 Interim Release 4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
D.1.1 Appendix A: Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
D.1.2 Appendix B: Configuring SSL and HTTP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 170
D.2 July 14, 2006 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
D.2.1 Appendix C: Security Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
D.3 December 9, 2005 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
D.4 October 7, 2005 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
D.4.1 Using Inventory and Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
D.4.2 Using ZENworks Handheld Management Policies . . . . . . . . . . . . . . . . . . . . . . . . . 171
Contents 7
novdocx (en) 13 May 2009
8 Novell ZENworks 7 Handheld Management Administration Guide
About This Guide
novdocx (en) 13 May 2009
This Administration Guide consists of comprehensive, conceptual information to help you
®
understand and use Novell
ZENworks® 7 Handheld Management.
The sections include:
Chapter 1, “Setting Up Handheld Import,” on page 11
Chapter 2, “Using ZENworks Handheld Management Policies,” on page 17
Chapter 3, “Using Queries and Groups,” on page 81
Chapter 4, “Distributing Software to Handheld Devices,” on page 97
Chapter 5, “Using Inventory and Reports,” on page 109
Chapter 6, “Remotely Viewing or Controlling the IP-Enabled Windows CE Devices,” on
page 127
Chapter 7, “Making System Configuration Changes,” on page 131
Appendix A, “Troubleshooting,” on page 147
Appendix B, “Configuring SSL and HTTP Settings,” on page 157
Appendix C, “Security Considerations,” on page 167
Appendix D, “Documentation Updates,” on page 169
Audience
This guide is intended for system administrators installing ZENworks 7 Handheld Management
software. These users should be familiar with their own network and the hardware configuration of
the management zone where they intend to install this product. A working knowledge of Novell
TM
eDirectory
and Novell ConsoleOne® is required.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comment feature at the bottom of each page of the
online documentation, or go to Novell Documentation Feedback site (http://www.novell.com/
documentation/feedback.html) and enter your comments there.
Documentation Updates
For the most recent version of the ZENworks 7 Handheld Management Administration Guide, visit
the Novell ZENworks 7 Web site (http://www.novell.com/documentation/zenworks7).
Additional Documentation
For information about installing ZENworks Handheld Management, see the Novell ZENworks 7
Handheld Management Installation Guide.
About This Guide 9
Documentation Conventions
In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
®
A trademark symbol (
, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux* or UNIX*, should use forward slashes as required by your software.
novdocx (en) 13 May 2009
10 Novell ZENworks 7 Handheld Management Administration Guide
1
Setting Up Handheld Import
Novell® ZENworks® 7 Handheld Management provides simplified, hands-off management of
enterprise handheld devices.
For more information about installing ZENworks Handheld Management, see the Novell ZENworks
7 Handheld Management Installation Guide.
In order to manage the handheld devices, you must do the following:
novdocx (en) 13 May 2009
1
Import handheld devices into Novell eDirectory
The following sections provide information you need for setting up an Import policy:
Section 1.1, “Creating the Handheld Service Package,” on page 11
Section 1.2, “Configuring the Handheld Import Policy,” on page 12
Section 1.3, “Associating the Handheld Service Package,” on page 16
Ensure that the users synchronize their handheld devices using their normal synchronization
process (Microsoft* ActiveSync, Palm* HotSync, and so forth).
After the handheld objects are imported into the directory, you can begin using policy-based
management, distributing software applications to individual handheld devices or to groups of
handheld devices, collecting hardware and software inventory for all enterprise handheld
devices, and more.
Set up the policies that can be associated with handheld objects. For more information, see
Chapter 2, “Using ZENworks Handheld Management Policies,” on page 17.
TM
.
1.1 Creating the Handheld Service Package
A policy package is an eDirectory object containing one or more individual policies. A policy
package groups policies according to function, making it easier to administer them. It also provides
the means for the administrator to change policy settings and to determine how they affect other
eDirectory objects.
In ZENworks Handheld Management, the Handheld Service Package contains only the Handheld
Import policy.
You should create an Organizational Unit (OU) to hold the policy packages. Consider the following
when determining where to place this OU:
Partitions in your tree
The 256-character limit in eDirectory for the full distinguished name
The Search policy that is used to locate the policy package
To minimize tree walking, it is best to create this policy package OU at the root of the partition that
contains the objects with which the policy package is associated. It also maximizes the number of
characters that are available for naming the policy.
Setting Up Handheld Import
11
To create the Handheld Service Package:
1 In Novell ConsoleOne®, right-click the container where you want the container for the policy
packages placed, click New, then click Organizational Unit.
The New Organizational Unit window is displayed.
2 Give the container a short name, then click OK.
3 Right-click the newly created container that holds your policy packages, click New, then click
Policy Package.
4 Select Handheld Service Package, then click Next.
novdocx (en) 13 May 2009
5 Give the policy package a short name, then click Next.
6 Review the information in the Summary page, then click Finish.
1.2 Configuring the Handheld Import Policy
1 In ConsoleOne, right-click the Handheld Service Package object that is created during
Section 1.1, “Creating the Handheld Service Package,” on page 11, then click Properties.
2 Select the check box under the Enabled column for the Handheld Import policy.
This both selects and enables the policy.
12 Novell ZENworks 7 Handheld Management Administration Guide
novdocx (en) 13 May 2009
3 Click Properties.
The Location tab of the General page is displayed.
Setting Up Handheld Import 13
You can configure the Handheld Import policy on this page to enable importing of
BlackBerry*, Palm OS*, and Windows* CE devices.
In addition to the General page, ZENworks Handheld Management provides three platformspecific pages: BlackBerry, Palm, and Windows CE. If you want to specify different settings for
each type of device, you can use the appropriate platform page. For example, you could specify
different containers to hold the different types of handheld devices.
4 Click the down-arrow on the Platforms tab, then select the desired platform.
5 Fill in the fields:
Enable Platform Settings to Override General Settings: This option displays only on the
BlackBerry, Palm, and WinCE platform pages. Select this option if you want the settings
specified on the BlackBerry, Palm, or WinCE page to override those settings specified on the
General page.
Allow Importing of Handhelds: Enable this option to allow registered handheld devices to be
imported into the directory.
Create Handheld Objects In: Select an option from the drop-down list.
Selected Container: The handheld device objects are created in the container specified in
the Path field. This is an absolute DS path.
Server Container: The handheld device objects are created in the same container where
the handheld service object is created. You can specify a relative DS path from the server
container.
Associated Object Container: The handheld device objects are created in the container
that is associated with the Handheld Import policy. You can specify a relative DS path
from the associated container.
Relative Path = handheld. means to go up one level from the container to create the handheld
device object.
Path: If you are using a relative path, enter a string. The number of periods you end the path
with determines the number of relative levels. If you are using an absolute path, select the
container.
novdocx (en) 13 May 2009
NOTE: The Description box describes where the handheld device objects are created, based
on the settings you selected on the Location page. Review the description and make any
necessary changes.
6 Click the Naming tab.
14 Novell ZENworks 7 Handheld Management Administration Guide
novdocx (en) 13 May 2009
7 Fill in the fields:
Handheld Name: Displays the handheld naming convention currently defined in the Add
Name Fields and Place Them in Order list.
Whenever there is a potential name conflict (such as two handheld device objects in the same
container with the same name), the system appends a number on the end of the name that you
enter here.
Add Name Field and Place Them in Order: You must have at least one option in this list.
You can add or remove options, or click the arrows to move an option up or down the list. The
handheld device objects are named in the order these options display in the list.
The name options are:
<User Defined>: You can any text here such as the separator between the Device and
User value. For example, Device_UserName. In this example, the underscore ( _ ) is the
user defined value.
Device: The device’s name.
User: The device’s owner name or the name provided by Palm HotSync or Microsoft
ActiveSync.
Computer: The name of the Access Point to which the device is connected.
8 Click the Groups tab.
Setting Up Handheld Import 15
novdocx (en) 13 May 2009
9 Click Add, then browse for the Handheld Group objects you want this handheld device object
to belong to when it is imported.
For more information about Handheld Group objects, see Section 3.2, “Using Groups,” on
page 84.
10 Click OK to save the policy.
11 Continue with Section 1.3, “Associating the Handheld Service Package,” on page 16.
1.3 Associating the Handheld Service Package
The Handheld Import policy you configured and enabled is not in effect until you associate its
policy package with the ZENworks Handheld Management Service object directly or with a
container object.
To associate the Handheld Service Package:
1 In ConsoleOne, right-click the Handheld Service Package, then click Properties.
2 Click the Associations tab, then click Add.
3 To associate the package, browse for the ZENworks Handheld Management Service object, the
container containing the Service object, or the container object created during the installation of
ZENworks Handheld Management server components.
4 Click OK.
16 Novell ZENworks 7 Handheld Management Administration Guide
2
Using ZENworks Handheld
novdocx (en) 13 May 2009
Management Policies
For Novell® ZENworks® 7 Handheld Management to function properly, you must create the policy
packages so that you can configure, enable, and associate your planned policies.
TM
A policy package is a Novell eDirectory
policy package groups policies according to function, making it easier to administer them. It also
provides the means for the administrator to change policy settings and to determine how they affect
other eDirectory objects.
ZENworks Handheld Management has four policy packages: Container Package, Handheld
Package, Handheld Service Package, and Handheld User Package.
The following sections contain additional information:
Section 2.1, “Understanding ZENworks Handheld Management Policies,” on page 17
Section 2.2, “Creating Policy Packages,” on page 22
Section 2.3, “Setting Up Container Package Policies,” on page 22
Section 2.4, “Setting Up Handheld Package and Handheld User Policies,” on page 29
Section 2.5, “Setting Up Handheld Service Package Policies,” on page 76
Section 2.6, “Viewing Policy Status Information,” on page 76
object containing one or more individual policies. A
2
2.1 Understanding ZENworks Handheld Management Policies
The following table lists each ZENworks Handheld Management policy, indicates the package that
contains the policy, and provides a brief description of the policy.
Table 2-1 List of ZENworks Handheld Management Policies
Policy Container Description
Handheld Import Policy Handheld Service Package Lets you enable handheld import
and configure settings, such as
how handheld device objects are
named, where they are stored in
eDirectory, and which Handheld
Group objects you want certain
handheld device objects
associated with.
For more information, see
Chapter 1, “Setting Up Handheld
Import,” on page 11.
Using ZENworks Handheld Management Policies
17
Policy Container Description
Search Policy Container Package Lets you specify how far up the
tree ZENworks Handheld
Management searches for
effective policies.
For more information, see
“Search Policy” on page 24.
novdocx (en) 13 May 2009
Handheld Application Search
Policy
BlackBerry Configuration Policy Handheld Package and Handheld
BlackBerry Inventory Policy Handheld Package and Handheld
Container Package Lets you specify how far up the
User Package
User Package
tree ZENworks Handheld
Management searches for
Handheld Application objects.
For more information, see
“Handheld Application Search
Policy” on page 26.
Lets you set configuration
information for associated
BlackBerry* devices, including
the owner name for the device
and any additional information
you want to include.
For more information, see
“BlackBerry Configuration Policy”
on page 30.
Lets you enable the collection of
hardware and software inventory
from associated BlackBerry
devices.
For more information, see
“BlackBerry Inventory Policy” on
page 32.
BlackBerry Security Policy Handheld Package and Handheld
User Package
Palm Client Configuration Policy Handheld Package Lets you enable user
18 Novell ZENworks 7 Handheld Management Administration Guide
Lets you ensure that a password
is set on associated BlackBerry
devices.
For more information, see
“BlackBerry Security Policy” on
page 34.
authentication on associated
Palm OS* devices.
For more information, see
Section 2.4.4, “Palm Client
Configuration Policy,” on page 36.
Policy Container Description
novdocx (en) 13 May 2009
Palm Access Point Configuration
Policy
Palm Configuration Policy Handheld Package and Handheld
Handheld Package and Handheld
User Package
User Package
Lets you assign multiple
ZENworks Handheld
Management Access Points to a
device and also define the order
of the ZENworks Handheld
Management Access Points to
which the Palm OS device must
connect.
For more information, see
Section 2.4.6, “Palm Access
Point Configuration Policy,” on
page 43.
Lets you set general preferences,
such as auto-off, system sound,
and beam retrieve settings;
associate different software
programs with the buttons on the
Palm OS device; assign a feature
users can access when they drag
the pen from the writing area to
the top of the screen on the Palm
OS device; and specify which
software programs are allowed or
not allowed on Palm OS devices.
Also lets you configure the files
that must be automatically
deleted from the Windows CE
device.
Palm File Retrieval Policy Handheld Package and Handheld
User Package
For more information, see “Palm
Configuration Policy” on page 39.
Lets you specify files to retrieve
from the associated Palm OS
device to copy to a specified
location.
For more information, see “Palm
File Retrieval Policy” on page 45.
Using ZENworks Handheld Management Policies 19
Policy Container Description
novdocx (en) 13 May 2009
Palm Security Policy Handheld Package and Handheld
User Package
WinCE Access Point
Configuration Policy
Handheld Package and Handheld
User Package
Lets you ensure that a password
is set on the associated Palm OS
device and lets you configure
Auto Lock Configuration and
enhanced password protection.
Lets you set a user’s network
password as the device password
for the Palm OS device.
Also lets you specify self-destruct
settings to disable a Palm device
after a specified number of failed
password attempts or after a
specified number of days since
the device was last synchronized.
For more information, see “Palm
Security Policy” on page 48.
Lets you assign multiple
ZENworks Handheld
Management Access Points to a
device and also define the order
of the ZENworks Handheld
Management Access Points to
which the Windows* CE device
must connect.
WinCE Client Configuration
Policy
For more information, see
Section 2.4.11, “WinCE Access
Point Configuration Policy,” on
page 59.
Handheld Package Lets you enable user
authentication on associated
Windows CE devices.
Also lets you configure the
software or files that must be
automatically uninstalled or
deleted from the Windows CE
device.
For more information, see
Section 2.4.9, “WinCE Client
Configuration Policy,” on page 53.
20 Novell ZENworks 7 Handheld Management Administration Guide
Policy Container Description
novdocx (en) 13 May 2009
WinCE Configuration Policy Handheld Package and Handheld
User Package
WinCE File Retrieval Policy Handheld Package and Handheld
User Package
Lets you associate different
software programs or functions
with the buttons on the
associated Windows CE device;
specify which programs you want
to include on the Start menu (on a
Pocket PC) or on the desktop (on
a handheld PC); and specify
power settings for Windows CE
devices.
Also, lets you configure the
software to be uninstalled from
Windows CE device.
For more information, see
“WinCE Configuration Policy” on
page 55.
Lets you specify files to retrieve
from the associated Windows CE
device to copy to a specified
location.
For more information, see
“WinCE File Retrieval Policy” on
page 62.
WinCE Remote Management
Policy
WinCE Security Policy Handheld Package and Handheld
Handheld Package and Handheld
User Package
User Package
Lets the administrator or remote
users perform Remote View or
Remote Control operations on the
IP-enabled Windows CE devices.
For more information, see
Section 2.4.13, “WinCE Remote
Management Policy,” on page 66.
Lets you ensure that a password
is set on the Windows CE device
and configure enhanced security
options for Pocket PCs.
Lets set a user’s network
password as the device password
for the Windows CE device.
Also lets you specify self-destruct
settings to disable a Windows CE
device after a specified number of
failed password attempts or after
a specified number of days since
the device was last synchronized.
For more information, see
“WinCE Security Policy” on
page 68.
Using ZENworks Handheld Management Policies 21
2.2 Creating Policy Packages
A policy package is an eDirectory object containing one or more individual policies. Before you can
configure, enable, and associate the policies contained in a policy package, you must create the
policy package.
®
1 In Novell ConsoleOne
New, then click Policy Package.
2 Select Container Package.
or
Select Handheld Package.
or
Select Handheld Service Package.
or
Select Handheld User Package.
TIP: To list the policies that are contained in each policy package, click the name of each
policy in the Policy Packages list on the left side of the Policy Package Wizard page. The
available policies are displayed in the Policies list on the right side of the Policy Package
Wizard page.
, right-click the container that holds your policy packages, the click
novdocx (en) 13 May 2009
3 Click Next.
4 Give the policy package a short name, then click Next.
5 Review the information in the Summary page, then click Finish.
2.3 Setting Up Container Package Policies
In ZENworks Handheld Management, the Container package contains two policies: Search and
Handheld Application Search.
The following sections contain additional information:
“Search Policy Overview” on page 22
“Search Policy” on page 24
“Handheld Application Search Policy” on page 26
“Associating the Container Package” on page 29
2.3.1 Search Policy Overview
ZENworks Handheld Management policies are associated to a handheld device object in any of the
following ways:
To the handheld device object itself
To a User object
To a Handheld Group where the handheld device is a member
To a User Group where the user is a member
To a parent container of the handheld device or User object
22 Novell ZENworks 7 Handheld Management Administration Guide
The search order that ZENworks Handheld Management uses is consistent with standard eDirectory
behavior and any search policies that are in the tree. By default, ZENworks Handheld Management
starts at the handheld device or user object, followed by any Handheld groups or User groups that
the device is a member of, and then starts walking up the tree looking for policies to enforce. All
handheld policies are merged and the culmination is applied to the handheld device. If any conflicts
occur, such as two Palm Configuration policies (one associated directly to the handheld device
object and the other associated to a parent container of the handheld device object), the first policy
found is enforced. In this case, the Palm Configuration policy directly associated to the handheld
device object is enforced.
If a policy contained in a Handheld User Package and another policy in the Handheld Package
conflict, the settings in the Handheld User Package are enforced. For example, if you configure and
enable the Palm Configuration policy in the Handheld User Package, but you also have an enabled
Palm Configuration policy in the Handheld Package, the policy is the Handheld User Package takes
precedence.
The File Retrieval policies (Palm File Retrieval and WinCE File Retrieval) present exceptions to
rule that the first policy found is enforced. These policies are both plural (meaning they can be
added many times to a policy package) and cumulative (meaning that many different File Retrieval
policies with different settings can be effective for a single handheld device object, handheld group
object, or container object). Because the File Retrieval policies are plural and cumulative, no
conflicts occur when ZENworks Handheld Management encounters multiple File Retrieval policies:
every effective File Retrieval policy is enforced.
novdocx (en) 13 May 2009
The Search policy is used to limit how far up the tree ZENworks Handheld Management searches
for the effective policies. In addition to limiting how far up the tree ZENworks Handheld
Management searches for policies, both policies let you determine the searching order (object,
group, container) that ZENworks Handheld Management uses as it searches for policies. The search
order is significant because the first policy found is enforced (except for the File Retrieval policies,
as explained previously).
The Handheld Application Search policy is used to limit how far up the tree ZENworks Handheld
Management searches for handheld application objects.
If your directory contains many objects, ZENworks Handheld Management performs significant
tree-walking if no search policies are enabled. For this reason, you should make use of both the
Search policy and the Handheld Application Search policy.
The Search policy and the Handheld Application Search policy provide the following benefits
Improved security
The ability to reorder a search
Better search performance by limiting the search levels traversed in eDirectory and by avoiding
unnecessary LAN traffic
The Search policy specifies how ZENworks Handheld Management determines which policies are
associated with handheld device objects. The Handheld Application Search policy specifies how
ZENworks Handheld Management determines which handheld application objects are associated
with handheld device objects. To make either search policy effective, you associate it with a
container. Both search policies apply to handheld device or user objects within or beneath a given
container.
You can specify the number of levels above or below the location to begin the search:
Using ZENworks Handheld Management Policies 23
Table 2-2 Search Levels
Number Description
0 Limits the search to the selected level.
1 Limits the search to one level above the selected level.
For example, if you selected the handheld device object’s parent container, this
would limit the search to one level above the parent level.
-1 Limits the search to one level below the selected level.
For example, if you selected [Root], -1 would limit the search to one level below
[Root].
Without a search policy in effect, the default is to search from the parent container to [Root]. The
search checks each container up the tree towards [Root] for policy packages and handheld
application objects associated with those containers.
The default search policy recognizes the policy package associated with the handheld device object
before it looks in any group or container where such an object resides.
novdocx (en) 13 May 2009
The default search order, Object > Group > Container, can be reordered and can include as few as
one of the locations. For instance, you can exclude Group objects by setting the search order to
Object > Container.
You can avoid unnecessary LAN traffic by searching to an associated container instead of [Root].
The Search policy is required for finding other policies. You set up Search policies at a container
level. Set up as many Search policies as you need to help minimize network traffic.
2.3.2 Search Policy
The Search policy is used to limit how far up the tree ZENworks Handheld Management searches
for the effective policies.
To set up a Search policy:
1 In ConsoleOne, right-click the newly created Container Package, then click Properties.
For information on creating the Container Package, see Section 2.2, “Creating Policy
Packages,” on page 22.
2 Select the check box under the Enabled column for the Search policy.
This both selects and enables the policy.
24 Novell ZENworks 7 Handheld Management Administration Guide
novdocx (en) 13 May 2009
3 Click Properties to display the Search Level page.
4 Select the level to search to from the drop-down list:
[Root]: Search from the handheld device object to the root of the tree.
Using ZENworks Handheld Management Policies 25
Object Container: Search from the handheld device object to the parent container of the
object.
Partition: Search from the object to the partition.
Selected Container: Search from the handheld device object to the selected container.
5 If you chose Selected Container, browse to select the container.
6 To determine the searching limits in either direction, specify a number between -25 and 25.
7 Click the Search Order tab.
novdocx (en) 13 May 2009
8 Specify the policy searching order, using the arrow keys, the Add button, and the Remove
button as necessary.
NOTE: Depending on which other ZENworks products (ZENworks Desktop Management and
ZENworks Server Management) are present, ConsoleOne might display a Refresh Interval
page; however, ZENworks Handheld Management does not use the settings on the Refresh
Interval page.
9 Click OK.
10 When you have finished configuring all of the policies for this package, continue with the steps
under “Associating the Container Package” on page 29 to associate the policy package.
2.3.3 Handheld Application Search Policy
The Handheld Application Search policy is used to limit how far up the tree ZENworks Handheld
Management searches for Handheld Application objects.
26 Novell ZENworks 7 Handheld Management Administration Guide
To set up the Handheld Application Search policy:
1 In ConsoleOne, right-click the Container Package, then click Properties.
2 Select the check box under the Enabled column for the Handheld Application Search policy.
This both selects and enables the policy.
novdocx (en) 13 May 2009
3 Click Properties to display the Search Level page.
Using ZENworks Handheld Management Policies 27
novdocx (en) 13 May 2009
4 Select the level to search to:
[Root]: Search from the handheld device object to the root of the tree.
Object Container: Search from the handheld device object to the parent container of the
object.
Partition: Search from the object to the partition.
Selected Container: Search from the handheld device object to the selected container.
5 If you chose Selected Container, browse to select the container.
6 To determine the searching limits in either direction, specify a number between -25 and 25.
7 Click the Search Order tab.
28 Novell ZENworks 7 Handheld Management Administration Guide
novdocx (en) 13 May 2009
8 Specify the policy searching order.
Use the arrow keys, the Add button, and the Remove button as necessary to create your search
order.
9 Click OK.
10 When you have finished configuring all of the policies for this package, continue with the steps
under “Associating the Container Package” on page 29 to associate the policy package.
2.3.4 Associating the Container Package
The policies you configured and enabled are not in effect until you associate their policy package
with a container object.
1 In ConsoleOne, right-click the Container Package, then click Properties.
2 Click the Associations tab, then click Add.
3 Browse for the container for associating the package, then click OK.
2.4 Setting Up Handheld Package and Handheld User Policies
ZENworks Handheld Management provides Handheld Package and Handheld User Package
policies for the Palm OS, Windows CE, and BlackBerry platforms.
Each platform has its own page where you can view and configure available policies. To display a
desired platform page: In ConsoleOne, right-click the Handheld Package or the Handheld User
Package, click Properties, click the down-arrow on the Policies tab, then click the appropriate
platform: Palm, WinCE, or BlackBerry.
Using ZENworks Handheld Management Policies 29
Review the following sections for more information to help you set up the Handheld Package and
Handheld User Package policies:
Section 2.4.1, “BlackBerry Configuration Policy,” on page 30
Section 2.4.2, “BlackBerry Inventory Policy,” on page 32
Section 2.4.3, “BlackBerry Security Policy,” on page 34
Section 2.4.4, “Palm Client Configuration Policy,” on page 36
Section 2.4.5, “Palm Configuration Policy,” on page 39
Section 2.4.6, “Palm Access Point Configuration Policy,” on page 43
Section 2.4.7, “Palm File Retrieval Policy,” on page 45
Section 2.4.8, “Palm Security Policy,” on page 48
Section 2.4.9, “WinCE Client Configuration Policy,” on page 53
Section 2.4.10, “WinCE Configuration Policy,” on page 55
Section 2.4.11, “WinCE Access Point Configuration Policy,” on page 59
Section 2.4.12, “WinCE File Retrieval Policy,” on page 62
Section 2.4.13, “WinCE Remote Management Policy,” on page 66
Section 2.4.14, “WinCE Security Policy,” on page 68
novdocx (en) 13 May 2009
Section 2.4.15, “Associating the Handheld Package or the Handheld User Package,” on
page 73
Section 2.4.16, “Associating a User Object to a BlackBerry Device,” on page 74
Section 2.4.17, “Scheduling Packages and Policies,” on page 74
2.4.1 BlackBerry Configuration Policy
The BlackBerry Configuration policy lets you specify a standard owner name and additional
information that is set on the associated BlackBerry devices. For example, you could specify that
your company name, address, and telephone number be set on all associated BlackBerry devices to
help recover lost devices.
NOTE: This policy is not supported for Java-based BlackBerry devices.
The owner name and information that you specify using this policy does not affect the naming of the
device objects in eDirectory; the owner name and information you specify in this policy displays
only on the actual device.
To set up the BlackBerry Configuration policy:
1 In ConsoleOne, right-click the Handheld Package or Handheld User Package object, then
click Properties.
2 On the Policies tab, click the down-arrow, then click BlackBerry.
3 Select the check box under the Enabled column for the BlackBerry Configuration policy.
This both selects and enables the policy.
30 Novell ZENworks 7 Handheld Management Administration Guide
Loading...