May 13, 2009
The issues included in this document were identified for Novell® ZENworks® 10 Configuration Management with SP1 (10.1).
For installation instructions, see the Novell ZENworks Configuration Management Installation Guide.
For information about the new features or enhancements, see the Novell ZENworks Configuration Management Upgrade Guide.
For administrative tasks, see the Novell ZENworks 10 Configuration Management with SP1 (10.1) documentation Web site.
This product contains undocumented utilities that Novell Technical Services might use to diagnose or correct problems.
The following table contains information on the documentation content changes that were made in this Readme after the initial release of ZENworks 10 Configuration Management (10.1):
Table 1 Readme Updates
Date |
Readme Item Added or Updated |
---|---|
May 13, 2009 |
|
December 3, 2008 |
Re-organized the information in Section 2.20, Reporting |
October 8, 2008 |
|
August 18, 2008 |
Updated A Java exception error occurs when clicking the Vulnerabilities tab. |
January 23, 2009 |
Added Unsupported workstation tasks and actions are enabled for Linux devices. |
January 28, 2009 |
This section contains information about ZENworks Configuration Management issues that might occur.
This section contains information about the issues that might occur when you install ZENworks Configuration Management.
DNS, if used, must be set up correctly for ZENworks Control Center to be accessible
Zenloader does not start after installing on a machine running Windows Server 2008
Installing an external MS SQL database requires an existing path
Installing to an Oracle database fails to run the localization-updater.sql SQL script
Windows Server 2008 Core is not supported as a Primary Server or managed device
Some ZENworks partitions must be fixed in order to work with Configuration Management
ZENworks Reporting Server cannot be installed on 64-bit servers
AdminStudio ZENworks Edition requires the Primary Server to be using ports 80 and 443
Only one instance of AdminStudio must be installed in a management zone
ConfigureAction fails because of an error detected by HotSpot Virtual Machine
ZENworks Configuration Management uninstallation fails on Linux devices that have Mono 1.9-5
If you are using DNS, it must be properly set up, or some features in ZENworks might not work. For example, the ZENworks Control Center (ZCC) icon that is installed to the desktop on the server might fail to open ZCC in the browser.
Workaround: Reconfigure DNS to work properly, then such issues as ZCC not displaying should be resolved.
(Fixed in v10.1.1) The Novell ZENworks Loader service sometimes does not start after installing on Windows* Server* 2008.
Workaround: Manually start the Novell ZENworks Loader service.
If you select to install a new Microsoft* SQL database during installation of Configuration Management, the path must already exist. You cannot create the database’s directory during installation.
Workaround: Create the directory for the MS SQL database before starting the installation program.
The following error might be reported during installation to an Oracle* database:
Failed to run the sql script: localization-updater.sql, message:Failed to execute the SQL command: insert into zLocalizedMessage
Workaround: Change the character set on your Oracle database to UTF-8.
When you are installing the second server into a Management Zone, an error message might be displayed at the end of the installation that contains the following text somewhere in the message:
... FatalInstallException Name is null
However, the installation otherwise seems to complete successfully.
This error is being displayed erroneously because the program thinks that the server needs to be reconfigured, but it doesn't.
Workaround: Review the installation log file. If there are no errors there related to this error message, you can ignore it.
If you are installing to a 64-bit Windows Server 2003 or 64-bit Windows Server 2008, the installation might fail because of the Windows msiexec utility. The following message is logged in the installation log:
Msiexec returned 1603:
Workaround: None.
You cannot install the Primary Server or the ZENworks Adaptive Agent on Windows Server 2008 Core because the .NET framework is not supported on Windows Server 2008 Core.
Workaround: None.
If your environment is running the Novell ZENworks Linux Management - Dell Edition and you created ZENworks partitions on your clients, when the partition is booted to update your clients to ZENworks 10 Configuration Management, the partition no longer works and fails the update.
Workaround: Before you install ZENworks 10 Configuration Management to your environment, create a scripted imaging task and force all ZENworks partitions to run it in preparation to update to Configuration Management.
Create the following script to fix the /etc/ZUpudate.sig file contained in the initrd resource file:
export PATH=/sbin:/usr/sbin:/bin:/usr/bin:/lbin mount $ZENDEVICE /mnt/harddisk cp /mnt/harddisk/boot/loader/initrd /initrd.gz #make a backup of initrd cp /mnt/harddisk/boot/loader/initrd /mnt/harddisk/boot/loader/initrd.sav gunzip /initrd.gz mount -o loop /initrd /mnt/cdrom cp /mnt/cdrom/etc/ZUpdate.sig / dos2unix /ZUpdate.sig cp /ZUpdate.sig /mnt/cdrom/etc umount /mnt/cdrom gzip -v9c /initrd > /mnt/harddisk/boot/loader/initrd umount /mnt/harddisk
If time is not synchronized on the network before you install the ZENworks Configuration Management services, you see invalid certificate errors because the certificates have dates that are in the future, and therefore are considered invalid.
Workaround: Make sure that your network has its time synchronized before you install the Configuration Management services. Make sure to include ZENworks back-end servers in the synchronization.
ZENworks 10 Configuration Management with SP1 must be installed on the Primary Server before installing ZENworks 10 Reporting Server with SP1.
You cannot install ZENworks Reporting Server to a Primary Server running a 64-bit operating system.
If you remotely connect to a managed device by using Remote Desktop Connection (RDP), then download and install the ZENworks Adaptive Agent, the installation does not complete and the Remote Desktop Connection program stops working.
Workaround: To fix the issue, download the patch from the Microsoft Support Web site and install it on the managed device.
During product installation, you have the option to select ports other than the defaults of 80 and 443, but AdminStudio requires the Primary Server to use ports 80 and 443.
Workaround: None. To use AdminStudio, you must install it on a Primary Server that is using ports 80 and 443.
Only one instance of AdminStudio must be installed in a management zone. However, it is not possible to detect the machine that has AdminStudio installed in the ZENworks Control Center.
If you install more than one instances of AdminStudio in a management zone, the Invalid Usage error message is displayed when you run AdminStudio.
Workaround: To troubleshoot the Invalid Usage error message, do the following:
Run the removeusage.exe utility located in c:\program files\macrovision\adminstudio\8.5\common.
Uninstall the AdminStudio ZENworks Edition.
Install the AdminStudio ZENworks Edition.
If you are installing the first Primary Server on a Linux* device, and if at the end of the process that configures the database you see an error has occurred and you are given the option of continuing or rolling back, you should check the log file at /var/opt/novell/log/zenworks/ZENworks_Install_[date].log.xml. If you see the error specified below, it is safe to continue with the install.
ConfigureAction failed!:
select tableName, internalName, defaultValue from Adf where inUse =?# An unexpected error has been detected by HotSpot Virtual Machine: #SIGSEGV (0xb) at pc=0xb7f6e340, pid=11887, tid=2284317600 # #Java VM: Java HotSpot(TM) Server VM (1.5.0_11-b03 mixed mode)
#Problematic frame: #C [libpthread.so.0+0x7340] __pthread_mutex_lock+0x20
Workaround: Ignore the error message.
Workaround: None.
When you try to install the NetIdentity agent that ships with Novell Client32™ on a device that has ZENworks Configuration Management installed, the installation fails with the following error message:
An incompatible version of Novell ZENworks Desktop Management Agent has been detected
This error is displayed because the NetIdentity agent must be installed before installing ZENworks Configuration Management
Workaround: Do the following:
Uninstall ZENworks Configuration Management.
For more information on how to uninstall ZENworks Configuration Management, see the ZENworks 10 Configuration Management Installation Guide
Install the NetIdentity agent from Novell Client32.
Install ZENworks Configuration Management.
For more information on how to install ZENworks Configuration Management, see the ZENworks 10 Configuration Management Installation Guide
This section contains information about action and quick task issues when using ZENworks Configuration Management.
Linux devices as workstations are not supported, but Linux devices are supported as Primary Servers and Satellite Servers. If you click
> (or for a Satellite Server), then select a Linux device and click (or ), some unsupported workstation-related actions or quick tasks appear in the drop-down list as enabled. If you select an unsupported action or quick task, it will not work, giving an error or exception message.Workaround: Do not use any of the following unsupported workstation-related actions on Linux devices:
Also, do not use any of the following unsupported workstation-related quick tasks on Linux devices:
This section contains information about accessibility issues when using ZENworks Configuration Management.
By default, Windows does not provide keyboard support for the toolbar.
Workaround: Enable the accessibility options in Windows and use the Accessibility Wizard to enable mouse key settings. Then, mouse functions are controlled by using the numeric keypad.
This section contains information about the issues that might occur with Asset Inventory in ZENworks Configuration Management.
If you are upgrading to ZENworks Configuration Management with SP1 (10.1), it is recommended that you apply the August 2008 (or later) PRU to your current installation before performing the upgrade.
This section contains information about the issues that might occur with Asset Management in ZENworks Configuration Management.
The Asset Management Migration Utility that is included in this version of ZENworks Configuration Management does not support migrating Asset Inventory or Asset Management data to or from an Oracle database.
Workaround: None.
When submitting multiple purchase record import files, wait until the previous file has finished importing before going on to the next.
After you run a custom report, the “last run” date is not refreshed automatically.
Workaround: Press F5.
If you create and run a new report, the report does not display in the report list.
Workaround: Navigate out and then back to the page.
This section contains information about the issues that might occur when you use bundles in ZENworks Configuration Management.
Because Linux devices cannot have the ZENworks Adaptive Agent, you cannot assign bundles to be sent to them. However, in ZENworks Control Center, Directive bundles assigned to a Linux device might show as effective, which is incorrect.
Workaround: None.
If you set up an action to both back up the registry and edit the HKEY_CURRENT_USER registry entry on Windows Vista*, the action fails because all user-initiated processes in Vista run as the lowest privileged user.
Workaround: Use two different registry actions, one to back up the registry in the system context, and another to edit HKEY_CURRENT_USER in the user context.
When you create an Install Directory File bundle, the directory is installed even if its name contains spaces; however, it cannot currently be uninstalled by using the Undo Install Actions action.
Workaround: Avoid spaces in directory names if you want to enable the uninstallation of that directory.
Workaround: None.
If you launch a Launch Windows Thin Client Application action configured with the RDP Session on a 64-bit managed device, the action might fail.
Workaround: Apply the KB925876 patch.
If you use the 64-bit Internet Explorer to launch ZENworks Control Center, then click the browse icon to browse to and select an icon from the icon resources such as an.exe, .dll, or .ico file, the first icon of the resource file is selected by default. You cannot select any other icon.
Workaround: Use the 32-bit Internet Explorer to launch ZENworks Control Center.
This section contains information about the issues that might occur with CASA in ZENworks Configuration Management.
CASA does not completely authenticate via the HTTP proxy during initial authentication, but instead contacts the Primary Server directly. After authentication, all CASA traffic goes through the HTTP proxy when using the ZENworks Adaptive Agent Logout/Login feature.
Workaround: Access rules must allow access to ports 80, 443, and 2645. Additionally, HTTP forward proxy settings must be configured in two locations:
Device Management in ZENworks Configuration Management uses the WinInet HTTP protocol. Therefore, forward proxy settings must be configured in Internet Explorer*: Click
> > > > .Device Management in ZENworks Configuration Management uses CASA authentication, which uses WinHTTP Services. WinHTTP requires proxycfg.exe. For example:
proxycfg -p forward_proxy_IP_address:8080
For more information on proxycfg.exe, see ProxyCfg.exe, a Proxy Configuration Tool.
This section contains information about the issues that might occur when you use the Closest Server rules in ZENworks Configuration Management.
When you use this option, be sure to include at least one server in the Configuration section of the rule. Otherwise, after a managed device has been refreshed with this configuration, it cannot subsequently obtain new zone configuration data of any kind because it no longer knows of any servers to contact for this information.
After you create an L4 switch definition in the Default Closest Server Rules page, then add it to one or more custom Closest Server rules, any modifications that you make to the L4 switch definition (including definition deletions) are not propagated to any of the custom Closest Server rules.
This section contains information about the issues that might occur when you use the Discovery and Deployment functions in ZENworks Configuration Management.
It is normal for a Web browser to resend information in order to refresh a page. ZENworks auto-updates the data on a Deployment page every 5 seconds, so you should not need to refresh the Deployment page after running a Discovery task. If you do refresh the Deployment page in ZENworks Control Center after running a Discovery task, you are asked to confirm the resend in order to refresh the page. Do not do this, or the Discovery task runs again.
Workaround: Do not refresh the Deployment page after running a Discovery task. Instead, exit the page and return to see any changes.
Orphaned or to-be-deleted files from a pre-task or post-task action during a deployment task that uses a proxy are not cleaned up.
For example, if you run the deployment task from a Linux server through a Windows proxy, there is a folder created in the zenworks_installation_directory\novell\zenworks\bin\_rfu_cache directory on the Windows device that contains the pre-task or post-task command file. If you delete the task in ZENworks Control Center, the command file is left on the Windows proxy device. However, all command files older than five days are removed when another deployment task is run by using the same Windows proxy.
Workaround: To immediately delete the orphaned files from the zenworks_installation_directory\novell\zenworks\bin\_rfu_cache directory, you must manually delete it.
Even if you deselected the
option when you created the deployment task, you still do not get a reboot message when you deploy to Windows Vista or Windows Server 2008.Workaround: None.
(Fixed in v10.1.1) When you are creating the LDAP Discovery task for a Linux Primary Server, you are prompted to configure the Windows proxy even though the LDAP Discovery task for Linux Primary Server does not require the Windows proxy to be configured. However, you are not prompted to configure the Windows proxy if it has been configured at the management zone level.
Workaround: Before creating the a LDAP Discovery task, configure the Windows proxy at the management zone level:
In ZENworks Control Center, click the
tab.In the Management Zone Settings panel, click
> .Configure the Windows Proxy settings.
During the ZENworks Adaptive Agent installation, couple of ZENworks related files might be reported as a malicious software by the anti-virus software. Consequently, the installation abruptly stops.
Workaround: Do the following on the managed device where you want to install the ZENworks Adaptive Agent:
Manually add System_drive:\windows\novell\zenworks to the Exclusion list of the anti-virus software installed on the managed device.
Install the ZENworks Adaptive Agent.
This section contains information about the issues that might occur for access to files in ZENworks Configuration Management.
You can uninstall ActiveX* controls or Firefox* extensions.
ActiveX Controls: Go to c:\windows\downloaded program files, right-click nfileupload class, then select .
Firefox Extension: In Firefox, click
> , select , then click .This section contains information about the issues that might occur when using Imaging in ZENworks Configuration Management.
(Fixed in v10.1.1) The ZENworks Image Explorer (zmgexp) crashes when you select a file or directory within an add-on image, then click > .
Workaround: Use the following ways to view the property of a file or directory within an add-on image:
If you have the Imaging component of ZENworks 7 Desktop Management installed, use Image Explorer (imgexp.exe). For more information on Image Explorer (imgexp.exe), see the ZENworks 7 Desktop Management documentation.
If you have only ZENworks Configuration Management installed, contact Novell Support.
(Fixed in v10.1.1) If you add, remove, or configure the Imaging Satellite Server role on a managed device that is upgraded from the previous version of ZENworks Configuration Management, the Imaging Satellite Server task is assigned to the device only during the next device refresh schedule. If you want the task to be immediately assigned, you must manually refresh the device in one of the following ways:
In the
tab > the , select the check box next to the devices you want to refresh, click > .On the managed device, right-click the ZENworks icon, then click
.However, the following error message might be logged in the device’s message log in ZENworks Control Center when you refresh the device even though the Imaging Satellite Server task has been successfully executed:
ERROR{}
The following error message might be additionally logged if the Imaging Satellite Server role is added to the device:
Promotion of the corresponding ZMD to Imaging Server Failed.Enable the Debug option and Check the ZMD Log file for more Details.
Workaround: Ignore the error messages.
You cannot perform Imaging operations if the Primary Server does not use the default ports (80 or 443).
Workaround: Do the following:
Manually edit novell-zenimgweb.conf to update HTTP_PORT and HTTPS_PORT with the values entered for HTTP and HTTPS during the ZENworks Configuration Management installation. The novell-zenimgweb.conf file is located in the /etc/opt/novell/zenworks/preboot/ directory on Linux and in the %ZENWORKS_HOME%\conf\preboot\ directory on Windows.
Restart the Novell ZENworks Preboot service.
On Linux: At the server console prompt, enter /etc/init.d/novell-pbserv restart.
On Windows: Do the following:
From the Windows desktop
menu, click > .Double-click
> .Start the Novell ZENworks Preboot Service.
(Fixed in v10.1.1) You cannot perform Imaging operations on the Windows Imaging Satellite Server if the Primary Server does not use the default ports (80 or 443).
Workaround: Do the following on the Imaging Satellite Server:
Manually edit %ZENWORKS_HOME%\conf\preboot\novell-zenimgweb.conf to update HTTP_PORT and HTTPS_PORT with the values entered for HTTP and HTTPS during the ZENworks Configuration Management installation.
Restart the Novell ZENworks Preboot service.
From the Windows desktop
menu, click > .Double-click
> .Start the Novell ZENworks Preboot Service.
This section contains information about the issues that might occur when logging in to various locations in ZENworks Configuration Management.
A Microsoft security fix (see Microsoft Knowledge Base article 312461) disallows certain characters in DNS names by not returning cookies where those characters are used in the server’s name. Without cookies being returned, state information cannot be preserved across HTML requests, so the user cannot log in to ZENworks Control Center.
The only characters allowed in Windows for DNS names are the alphabetical characters (a‑z), numbers, and the hyphen. For example, you cannot use an underscore character. Use a hyphen instead.
This is not an issue with the Firefox browser, even when it is run on Windows.
Workarounds:
Reference the IP address instead of its DNS name.
Reference a valid DNS name for the IP address the server is using. For example, your server name might be A_Server.mycompany.com, but the DNS registration for the IP address might be Aserver.mycompany.com, which will work.
If you only use Internet Explorer to run ZENworks Control Center, do not use underscores in your server names.
After an image containing the ZENworks Adaptive Agent has been restored on a Windows Vista device, nothing is displayed to indicate what is happening. After awhile, the device suddenly reboots.
Workaround: None.
This section contains information about the issues that might occur during migration to ZENworks Configuration Management.
If you create an Application object in ZENworks 7 that creates or deletes a registry value in HKEY_LOCAL_MACHINE and then migrate it to ZENworks Configuration Management, the Migration Utility converts the Application object to an MSI. When the migrated MSI is installed, the registry entry is created or deleted in HKEY_CURRENT_USER instead of HKEY_LOCAL_MACHINE.
Workaround: Perform the following steps to migrate applications with only registry changes as individual action instead of an MSI:
Launch the Migration utility.
Click the
icon, then click .Select the
option.Migrate the application with registry changes to destination zone. The application is migrated as a Windows Bundle with Regedit action.
Add-on images that are created by exporting applications in traditional ZENworks are not valid in ZENworks Configuration Management. If these add-on images are migrated in combination with a base image or otherwise, they should be deleted.
Workaround: Manually delete the add-on image from ZENworks Configuration Management.
Migration of AOT or AXT applications to MSI application is comparatively slower on a Windows Vista device.
Workaround: None.
This section contains information about the issues that might occur when you use NAT with ZENworks Configuration Management.
In both a public and private network where static NAT is configured between the networks, content might not be pushed down to the devices you are managing.
Workaround: Configure the DNS server with the DNS name of the ZENworks server, and map the DNS name to the public IP address.
This section contains information about the issues that might occur when you use Patch Management in ZENworks Configuration Management.
Microsoft System Installer (MSI) might need to be updated for some patches
Multiple reboots might occur when rebooting the server after a patch has been deployed
A "Please try again later" error is given when running Patch Validation
A Java exception error occurs when clicking the Vulnerabilities tab
At the end of your paid patch subscription, your subscription license indicates an expired status and Patch Management ceases to download new patch content on a daily basis.
To renew a lapsed Patch Management subscription license, follow the instructions in TID 3077372 in the Novell Support Knowledgebase.
In earlier releases of ZENworks Patch Management, a patch showed its status as PATCHED or NOT PATCHED, regardless of whether the patch was brand new or completely outdated. This often caused many more patches to show as NOT PATCHED than were actually necessary for deployment to a given target device.
This issue has been addressed in many of the new advanced content patches provided with the ZENworks 10 Configuration Management (10.1):
When a patch is superseded, it is automatically disabled
If the patch is re-enabled and detected, in most cases the patch shows NOT APPLICABLE because it has been replaced by a more recent patch
While this is inconsistent with the behavior of earlier versions of ZENworks Patch Management, clearly this change is for the better as only the patches that currently need to be installed are reported or analyzed on each device.
Workaround: None necessary.
Deployment of certain .NET patches might require that the latest MSI be installed. Otherwise, you can receive errors when deploying those patches.
Workaround: Prior to deploying .NET patches, verify whether an MSI version is a prerequisite. If necessary, create a bundle to deploy the latest MSI (version 3.1 or later) to your systems. MSIs are available from Microsoft.
If the deployment schedule type includes both the
and options, when the device becomes active, the deployment of the patch does not start on the first of its scheduled recurring dates.Workaround: None. The patch will be deployed when the next recurring date occurs.
After a patch has been deployed, the server might reboot several times until the Discover Applicable Updates function is able to run and report the results of the patch back to ZENworks.
Workaround: Always deploy patches to the ZENworks Servers separately, and without a reboot to avoid this issue. (A reboot is the default option in the Deploy Remediation wizard.)
An error similar to the following might be displayed when running Patch Validation:
The content for 12792c5f8d17904f39e1746310c2665a is not accessible at this time. Please try again later.
Workaround: Run
to re-fetch the content of the patch bundle.(Fixed in v10.1.1) If you use the Database Creation Utility to set up a ZENworks database, the default SQL file shipped with ZENworks 10 Configuration Management causes the Vulnerabilities tab in ZENworks Control Center to display a Java exception error.
Patch Management provides a different version of the SQL file that includes its information, which allows the Vulnerabilities tab in ZENworks Control Center to work properly.
Workaround: Do one of the following procedures for your database type to enable the Vulnerabilities tab:
From a command line on the Primary Server that’s hosting the database, run the following command:
zman dgc
Specify your ZENworks Management Zone username and password.
When the database username and password are displayed, note the username and copy the password.
To open the Sybase database administrative management tool, run the dbisql command on the Primary Server where the database is installed:
Linux: /opt/novell/zenworks/share/bin32s/dbisql
Windows: ZENworks_home\share\ASA\win32\dbisql
This opens the Interactive SQL window and the Connect dialog box. For Linux, you must have the GUI running to display them.
On the
tab in the Connect dialog box, specify the noted username in the field and paste the copied password into the field.On the
tab in the Connect dialog box, specify the database server name, select the ZENworks database file, then click to close the dialog box.In the interactive SQL window, click
> and select the following SQL file:
ZENworks_installation_DVD\upgrade\disk1\instdata\sql\sql-anywhere\upgrade\pmr-r1\z-nrm-patchlink-sapphire-datamodel.sql
Click the
button to apply the SQL script.Script execution actions are displayed while the script is running.
The Vulnerabilities tab should display correctly in ZENworks Control Center after the script has finished running.
On your Sybase database server, run the dbisql command.
This opens the Interactive SQL window and the Connect dialog box. For Linux, you must have the GUI running to display them.
To determine the dbisql command’s location, refer to your Sybase SQL Anywhere documentation.
On the
tab in the Connect dialog box, specify the user ID and password for your external Sybase database.On the
tab in the Connect dialog box, specify the database server name, select the ZENworks database file, then click to close the dialog box.In the interactive SQL window, click
> and select the following SQL file:
ZENworks_installation_DVD\upgrade\disk1\instdata\sql\sql-anywhere\upgrade\pmr-r1\z-nrm-patchlink-sapphire-datamodel.sql
Click the
button to apply the SQL script.Script execution actions are displayed while the script is running.
The Vulnerabilities tab should display correctly in ZENworks Control Center after the script has finished running.
On your database server, open your MS SQL Server database administration management tool.
Refer to your MS SQL Server documentation.
Apply the following script to your ZENworks MS SQL Server database:
ZENworks_installation_DVD\upgrade\disk1\instdata\sql\sql-server\upgrade\pmr-r1\z-nrm-patchlink-sapphire-datamodel.sql
The Vulnerabilities tab should display correctly in ZENworks Control Center after the script has finished running.
On your database server, open your Oracle database administration management tool.
Refer to your Oracle database documentation.
You can also apply the SQL script manually against your Oracle database.
Apply the following SQL script to your ZENworks Oracle database on your database server:
Linux: /opt/novell/zenworks/share/datamodel/oracle/nrm-patchlink-sapphire-datamodel.sql
Windows: ZENworks_home\share\datamodel\oracle\nrm-patchlink-sapphire-datamodel.sql
where the ZENworks_home path refers to your Primary Server. The SQL file resides on your Primary Server, which might be different than your database server.
The Vulnerabilities tab should display correctly in ZENworks Control Center after the script has finished running.
This section contains information about the issues that might occur when you use policies in ZENworks Configuration Management.
On 64-bit versions of Windows Server 2003 servers, only the Browser Bookmarks policy, SNMP policy, Printer policy, Local File Rights policy, and the Windows Group policy device-related settings are applied if they are associated to the device.
Workaround: None.
In both a public and private network where static NAT is configured between the networks, a policy might not be pushed down to the devices you are managing.
Workaround: Configure the DNS server with the DNS name of the ZENworks server, and map the DNS name to the public IP address.
Uninstall does not roll back the previously enforced Printer policies.
Workaround: Disassociate the Printer policy from the users or devices to unenforce the policy. After unenforcing the policy, uninstall ZENworks.
The iPrint nipp.exe client installer does not support a silent installation.
Workaround: Use iPrint nipp-s.exe or nipp.zip for a silent installation.
The policy does not support driver installation of .exe drivers.
Workaround: None
The iPrint client is not supported on 64-bit versions of Windows Server 2003 and Windows Server 2008 devices.
Workaround: None.
Support for network printer prompting for user credentials is not provided
Workaround: None.
The Windows Group policy containing the local group policy settings is not applied if the operating system of the device where the policy is applied is different from the device where the policy is created.
Workaround: Remove the System Requirement from the Windows Group policy and apply the policy. However, the security settings are applied only if the operating system version of the device where the policy is applied is later than the operating system version of the device where the policy is created.
Software restrictions in security settings are not enforced if the
option is selected.Workaround: In the
tab, select to enforce the software restrictions.Log-on and Log-off scripts that launch GUI applications do not functional properly on terminal server and Windows Vista devices
On the terminal server and Windows Vista devices, the log-on and log-off scripts launching GUI applications do not functional properly because the Graphical User Interface is not launched on the desktop.
Workaround: Use Directive bundles to launch the GUI applications:
Create a Directive bundle.
Add a Launch Windows Executable action to launch a GUI application, such as mspaint.
Assign the bundle to a device.
Select
, then select the schedule type as .Select the
or event to trigger the schedule.Environment variables for the user are not supported in the Group policy login scripts
The Group policy login scripts do not support the environment variables for users on Vista, Win2k3, and Win2k8 devices.
Workaround: None.
User settings fail to unenforce on Windows Server 2008 device
On a Windows Server 2008 device, the Group policy user settings associated to a user are not unenforced when the user logs out.
Workaround: None.
The Browser Bookmarks policy settings are not removed from the user’s Favorites when the ZENworks Adaptive Agent is uninstalled.
Workaround: None.
If both user-associated and device-associated policies are effective for a device, only the policy that takes precedence according to the Policy Conflict Resolution settings is applied. However, the Effective status for both policies is displayed as Success in the ZENworks Adaptive Agent icon.
Workaround: None.
The Roaming Profile policy is not supported for the Windows Vista and Windows Server 2008 terminal session managed devices.
Workaround: None.
In the Local File Rights policy, if the
access right is denied for the Administrators or Authenticated Users group and the option is selected, then the policy fails. However, if the access right is denied for the Administrators or Authenticated Users group, the policy is successful only during the first enforcement.Workaround: None
This section contains information about the issues that might occur when you use Personality Migration in ZENworks Configuration Management.
While saving the settings and data to a .pnp file, if you choose to use the to span the content to multiple files, you must specify a password in the option.
Workaround: None
Workaround: Before migrating the printer settings from the source device to the destination device, do the following:
Create a directory named PrinterDrivers in any of the logical drives such as C:, D:, or E:.
Download and copy the unzipped driver to the PrinterDrivers directory
(Fixed in v10.1.1)The security settings and the digital signatures of the Adobe Reader* 7.0 on a Windows device are not migrated to Adobe Reader 8.0 on another Windows device.
Workaround: None.
Workaround: Before migrating the personality settings, manually create the local users on the destination device and then launch the bundle to migrate the personality.
(Fixed in v10.1.1) Workaround: None
You cannot launch a bundle to migrate the personality settings of an Active Directory domain user currently logged in to the device if you specify the same user as domain name\username in
field ( > > > ).Workaround: To migrate the personality settings of the currently logged in Active Directory domain user, use the
option ( > > > ) in the ZENworks Personality Migration Template Builder.This section contains information about the issues that might occur with registration in ZENworks Configuration Management.
If you enter zac unr /?, the help shows an example using the -f switch, but doesn’t explain its purpose.
The -f switch forces a device to unregister in the event that the zac unregister command alone does not unregister the device.
This section contains information about the issues that might occur when you use the Remote Management feature in ZENworks Configuration Management.
On Windows Vista managed devices, mouse and keyboard locks do not function if the Aero theme is enabled.
Workaround: Do not use the Aero theme.
The Remote Management viewer installation might fail. This error is inherent to the MSI framework.
Workaround: Perform either of the following steps:
Uninstall the Remote Management viewer by using Add/Remove Programs, then reinstall it.
Use the Microsoft Windows Installer Cleanup Utility to clean up the application, then reinstall it. This utility can be downloaded from Microsoft Support.
On Windows Vista devices, the Remote Management viewer fails even though the security prompt is successfully completed.
Workaround: Add the server running ZENworks Control Center to the list of trusted sites and retry.
Workaround: Click the
icon on the Remote Management viewer, then press the Esc key to exit the Secure Attention Sequence (SAS) window. Then, click the icon again on the Remote Management viewer.Workaround: None.
Workaround: None.
If the device is powered off by using a hard shutdown, you cannot use Wake-on-LAN to wake up the device.
Workaround: None.
If you initiate a Remote Control session on a Windows XP device on which a Remote Desktop connection is active, the Remote Control screen blacks out.
Workaround: To remotely control a Windows XP device, ensure that the user has locally logged in to the device.
The ZENworks Reporting solution is based on BusinessObjects Enterprise* XI. This section contains issues that might occur when you use ZENworks Reporting.
The ZENworks Reporting solution has the following limitations:
The reporting universes in this release of Reporting Server will be enhanced to improve the user experience in Custom Reporting. A future release of Reporting Server will refresh the universes. However, the future release will not be backward compatible. Most of the Predefined reports will remain intact functionally, but custom reports created in this or previous releases of ZENworks Configuration Management will not be transferable to a future release of Reporting Server.
You cannot use Crystal Reports* with ZENworks Configuration Management Reporting Universe.
ZENworks Reporting is not supported on Windows Server 2008.
When you use the Reporting feature in ZENworks Configuration Management, you might see the issues listed below. To troubleshoot other error messages that you might encounter while working with BusinessObjects Enterprise XI, see the BusinessObjects XI Release 2 Error Message guide.
Workaround: Restart the device.
Workaround: Do one of the following:
Configure the DSN of the ZENworks database to set it to Windows NT Authentication:
Edit the properties of BusinessObjects Enterprise Services on the ZENworks server:
Workaround: On the Windows server where ZENworks Control Center is launched, add the appropriate DNS entry in the %Windows_root%\systems32\drivers\etc\hosts file.
Workaround: On the Windows device where ZENworks Control Center is launched, add the appropriate DNS entry in the %Windows_root%\systems32\drivers\etc\hosts file.
The following message is logged into the %ZENWORKS_HOME%\logs\zrsuninstall.log file:
ERROR_INSTALL_ALREADY_RUNNING
Workaround: Do the following:
Open the Windows Task Manager and stop all instances of msiexec.exe and setup.exe.
Uninstall ZENworks Reporting Server.
Workaround: None
However, this is not recommended.
(Fixed in v10.1.1)On a SLES 10 server connected to a Sybase* database, you might encounter the following exception if you add the object while creating a new Web Intelligence document by connecting through the ZENworks Configuration Management Universe in the BusinessObjects Enterprise InfoView ( > > > > > ).
The server encountered an internal error () that prevented it from fulfilling this request.
The BusinessObjects Enterprise InfoView crashes after encountering this error.
Workaround: Do the following to restart the BusinessObjects Enterprise InfoView:
Log in as root at the command line.
Enter the command /etc/init.d/BobjEnterprise115 stop; /etc/init.d/BobjEnterprise115 start.
To avoid this error, do the following each time before you run the query to create the Web Intelligence document:
In the
pane, go to > and select .Add Locale to the
pane.Click
to filter the locale for the de value.Click
to view the locales in the list.Include all the values except de in to the
pane.Click
to create a new Web Intelligence document.ZENworks Reporting fails when you log in to the ZENworks Control Center by using an administrator account (such as Administrator@windowdomain.com) that was created by using the user source.
Workaround: To log in to the ZENworks Control Center with the administrator account that was created by using the user source, use only the username, such as Administrator.
This section contains information about the issues that might occur with System Update in ZENworks Configuration Management.
If you changed the default timeout value for the ZENworks Control Center and then upgrade your ZENworks system, the timeout value is reset to the default setting of 30 minutes.
If you want to reset the value back to your preferred setting, you must change it manually. For more information, see Changing the Timeout Value for ZENworks Control Center in the ZENworks 10 Configuration Management System Administration Reference.
If you attempt to use the zman sucd command to cancel an update that is already downloaded to your ZENworks Server, the update might remain in a canceling state and the following error message is displayed:
Unable to delete update until the cancellation process has completed. Please try again later.
Workaround: If the update that you want to cancel has already been downloaded, use the zman sudu --force command to delete the update and resolve the error.
If a server’s connection to the ZENworks database is lost while downloading an update, the download does not resume after reconnecting. Attempting to use the Cancel Download action results in the update hanging in the Cancel state.
Workaround: Use the zman sudu --force command to delete the update.
If you use spaces between words in the
field in the E-mail Notification panel ( tab > page > > > panel), the message are not be sent.Workaround: Do not use spaces. Use dashes instead of spaces.
If you apply an update on a Windows 2008 machine and select the
option, the machine might reboot instead of letting the user decide whether to reboot.Workaround: Set the
option.The device does not reboot; however, the user is periodically requested to reboot the device, which continues until the device is rebooted.This section contains information about the issues that might occur with authoritative user sources in ZENworks Configuration Management.
The LDAP user cannot access fully qualified contexts that contain extended characters.
Workaround: None.
This section contains information about the issues that might occur with the ZENworks Adaptive Agent in ZENworks Configuration Management.
The ZENworks Adaptive Agent is installed on Linux Primary Servers to enable software updates. Although Linux servers appear as managed devices in ZENworks Control Center, any actions performed on them, such as assignments, QuickTasks, and so on, will fail.
ZENworks resources are loaded according to the locale of the process that retrieves them. When using regional settings, the ZENworks Windows service might be configured to use a different language than the user is configured to use. The result is that the strings from both languages are displayed.
Workaround: Do one of the following:
Install the native language operating system
Change the default user language to match the language displayed by the user
Workaround: On the Windows Vista managed device, use the login GINA to log in as a ZENworks user.
This section contains information about the issues that might occur when using ZENworks Control Center in ZENworks Configuration Management.
During installation, the setup checks to see if the default HTTP port (80) and HTTPS port (443) are in use. If the ports are in use by another application (such as IIS), you are prompted to use alternative ports. In this case, you must access ZENworks Control Center via the port it is using and not access IIS.
Workaround: Although http://Primary_Server_IP_address works if ZENworks Control Center is using port 80, http://Primary_Server_IP_address:### (where ### is the port Tomcat is using) always works.
When Microsoft SQL Server 2005 is installed on non-English (U.S.), there are differing sort orders and collations offered. This means that the ordering of lists in ZENworks Control Center is affected, including devices, bundles, and so on.
Workaround: When you install an SQL Server, it selects a default based on the locale of the server. Review the Microsoft documentation to determine which collation option to use when installing your MS SQL Server.
This section contains information about the issues that might occur when you use the zman command in ZENworks Configuration Management.
zman disables the echoing of passwords in Linux by turning the echo off on the controlling terminal. For example, /dev/pts/0. When you switch from one user to another user, the new user does not have file permissions on the controlling terminal.
Workaround: Before switching to the new user, give Read and Write file permissions to the new user on the controlling terminal. Run tty to display the current controlling terminal.
Using the man zman command for Simplified Chinese and Traditional Chinese doesn’t display any help. It only displays the tilde (~) character.
Workaround: None.
Workaround: Before executing the rpsv and rpgn commands, ensure that the specified destination path has the read-write-execute (rwx) permissions for all Linux users.
In this documentation, a greater-than symbol (>) is used to separate actions within a step and items in a cross-reference path.
A trademark symbol (®, ™, etc.) denotes a Novell trademark; an asterisk (*) denotes a third-party trademark
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please refer to the Novell International Trade Services Web page for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.
Copyright © 2008-2009 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page and one or more additional patents or pending patent applications in the U.S. and in other countries.
For Novell trademarks, see the Novell Trademark and Service Mark list.
All third-party trademarks are the property of their respective owners.