Safely Disabling Deployment Solution 6.9 and Plug-ins?
Created: 21 Febrero 2012 | 10 comments
We are currently performing a migration from Altiris Deployment Solution 6.9 in favor of SCCM 2007. Is there a safe and efficient way to disable the deployment solution plug-in (aclient) and corresponding policies so as to enable the migration without "hacking and slashing" the Altiris deployment environment? I would like to retain the current structure and components of Altiris in case we come across unforeseen issues with the migration.
Thanks.
Discusión Filed Under:
Propiedad del Grupo:
Comentarios Comentarios • Ir al último comentario
If I were in your shoes I would simply run a job on each system to uninstall the aclient, it can be done with a simple batch job, Altiris script job, or manually of course from a command line. Is there a reason this wouldn't work for your environment?
Shannon DuBey CNA, MCP, A+
CMS/SMS 6.x - 7.1
Patch Management & Inventory Expert
Shannon DuBey
CMS/SMS 6.x & 7.x
I agree with Sdubey. You could disable the Dagent/Aclient service on the clients in the event you thought you might move back to DS. But if not, I would simply do an uninstall of the agent using the -remove -silent switches.
Dave Durkee
Thanks for your quick feedback.
DaveDurkee wrote, "You could disable the Dagent/Aclient service on the clients in the event you thought you might move back to DS."
If this was the preferred method--keeping our foot in the Altiris Deployment door so-to-speak--what is the most efficient way of disabling the DAgent/AClient and corresponding policies?
Thanks.
I would just stop the Altiris services and set them to disabled.
Mike Clemson, Senior Systems Engineer, ASC
Intuitive Technology Group -- Symantec Platinum Partner
intuitivetech.com
Would you recommend disabling these services through Group Policy? Thanks.
Sure, or I'm pretty sure Altiris itself could handle this.
Why not just turn off your DS? Or why not use SCCM to disable services, once it's functional on a new client that already runs Altiris?
Mike Clemson, Senior Systems Engineer, ASC
Intuitive Technology Group -- Symantec Platinum Partner
intuitivetech.com
Would we have to perform any cleanup on the NS/DS side of things to disable any active policies?
For DS I wouldn't bother doing anything, it shouldn't interfere with SCCM any more than it interferes with NS. I've been in lots of places where DS is used to upgrade NS agents from 6 to 7, for example. The AClient/DAgent don't really have policies as such. If you want to disable the agent without removing it then Group Policy is a good option.
If you do have NS you could maybe "pause NS activities" although events will build up on the clients until the Altiris Agent is removed. Otherwise you could just disable all agent, inventory and software delivery polices on the NS.
Authorised Symantec Consultant (ASC) with Endpoint Management Limited, an Authorised Symantec Delivery Provider based in the UK.
Connect Etiquette: "Mark as Solution" posts that fix your problem, thumbs up for useful
Yes, we have an NS. Ideally, I want to suspend all active deployment policies and suspend the AClient and DAgent so that way I do not have to uninstall it nor remove any policies on the NS/DS side of things. More or less this is like an insurance policy whereby if something occurs in SCCM where we have to revert back to use Altiris, we have only suspended the DS activity instead of removing policies and agents. This would make it easier to revert back to Altiris.
It sounds like disabling the agents using GPO seems to be a pretty easy and safe solution. Any disagreement? So, when it comes to suspending (e.g., disabling) policies on the NS/DS side of things, is there a quick and efficient way of doing this?
Thanks again for everyone's feedback.
GPO is fine. You could also use the AClient, if you have it, then turn off the DS or remove access to it. The AClient isn't going to run any sort of recurring process like an NS Agent might, so this is a pretty safe method and allows you to maintain control during the in between phase, where the NS Agent is off but SCCM is not there yet.
Alternatively, my favorite method is to use SCCM to disable it, since that confirms SCCM is on the client and functional. If you need to re-enable later, you can use GPO Logonscripts, psexec, or RAAD.
Mike Clemson, Senior Systems Engineer, ASC
Intuitive Technology Group -- Symantec Platinum Partner
intuitivetech.com
¿Usted tiene gusto de contestar?
Inicio de sesión o Registrar para fijar su comentario.