App Sense Management Center Administrator Guide

| Management Center
Administrator Guide
The information contained in this document ("the Material") is believed to be accurate at the time of
printing, but no representation or warranty is given (express or implied) as to its accuracy, completeness or
correctness. AppSense Limited, its associated companies and the publisher accept no liability whatsoever
for any direct, indirect or consequential loss or damage arising in any way from any use of or reliance
placed on this Material for any purpose.
Copyright in the whole and every part of this manual belongs to AppSense Limited ("the Owner") and may
not be used, sold, transferred, copied or reproduced in whole or in part in any manner or form or in or on
any media to any person other than in accordance with the terms of the Owner's Agreement or otherwise
without the prior written consent of the Owner.
Trademarks
AppSense and the AppSense logo are registered trademarks of AppSense Holdings Ltd. Microsoft,
Windows and SQL Server are trademarks or registered trademarks of Microsoft Corporation. Novell,
Novell eDirectory, and Novell Netware are trademarks or registered trademarks of Novell Corporation.
Other brand or product names are trademarks or registered trademarks of their respective holders.
Document Information
Publication: 1
Document Version: APMS70-12-110107-1
AppSense Management Center Administrator Guide page 2

© 1999-2007 AppSense Ltd. All Rights Reserved.
Contents
About this Guide .......................................................................................................................................... 6

Terms and Conventions .......................................................................................................................... 6
Documentation ....................................................................................................................................... 7
Management Center Architecture................................................................................................................ 8
Components .......................................................................................................................................... 8
The Management Console ..................................................................................................................... 9
The Management Server ....................................................................................................................... 9
The Database ....................................................................................................................................... 9
The Product Consoles ......................................................................................................................... 10
The Managed Computers .................................................................................................................... 10
System Requirements ............................................................................................................................... 11
Connectivity and Accounts .................................................................................................................... 11
Database ............................................................................................................................................. 11
Management Server ............................................................................................................................. 12
Management Console ........................................................................................................................... 13
Client Communications Agent ................................................................................................................ 13
Security Model ........................................................................................................................................... 14
Security Challenges .............................................................................................................................. 15
Authentication and Authorization ............................................................................................................ 15
Securing Communications using SSL ..................................................................................................... 15
Management Center Workflow .................................................................................................................. 16
Workflow ............................................................................................................................................. 17
Troubleshooting ......................................................................................................................................... 21
Product Consoles Fail to Connect to a Secure Management Server .......................................................... 21
CCA Fails to Connect to a Management Server ...................................................................................... 22
CCA Fails to Connect to a Management Server when SSL State Changes ................................................ 22
CCA Fails to Connect to a Non-secure Management Server ..................................................................... 23
Reference .................................................................................................................................................. 25
Console Overview ................................................................................................................................ 25
Console Layout................................................................................................................................... 25
Home View .......................................................................................................................................... 26
Deployment Groups View ...................................................................................................................... 32
Overview ............................................................................................................................................ 33
Unassigned Computers ....................................................................................................................... 34
Directory Groups and Computer Groups ............................................................................................... 36
Configuring Groups ............................................................................................................................. 37

Move Computers ................................................................................................................................ 47
Alerts View ........................................................................................................................................... 48
All ...................................................................................................................................................... 49
Alert Rules ......................................................................................................................................... 50
Delete Events ..................................................................................................................................... 54
User Rights View .................................................................................................................................. 55
Packages View .................................................................................................................................... 57
All Packages ...................................................................................................................................... 58
Agents ............................................................................................................................................... 59
Configurations .................................................................................................................................... 60
Package Installer ................................................................................................................................ 61
Event details ........................................................................................................................................ 62
Events........................................................................................................................................................ 63
Application Manager Events .................................................................................................................. 63
Environment Manager Events ................................................................................................................ 64
Performance Manager Events ............................................................................................................... 66
Management Center Events .................................................................................................................. 68

Figures
Figure 1 Management Center Architecture 8

Figure 2 AppSense Management Center Security Model 14
Figure 3 Management Center Workflow 16
Figure 4 Connecting to the Management Server 17
Figure 5 Setting up user accounts 17
Figure 6 Setting up packages 18
Figure 7 Setting up deployment groups 19
Figure 8 Setting up alert rules 20
Figure 9 Management Console: Home View 26
Figure 10 Connect to Server dialog box 31
Figure 11 Management Console: Deployment Groups 32
Figure 12 Move Computers dialog box 47
Figure 13 Management Console: Alerts View 48
Figure 14 Delete Events dialog box 54
Figure 15 Management Console: User Rights 55
Figure 16 Management Console: Packages View 57
Figure 17 Package Installer dialog box 61
Figure 18 Event Details dialog box 62

About this Guide
Terms and Conventions
About this Guide
This guide includes information about the AppSense Management Center which provides a system
for managing and deploying AppSense security and performance software to managed computers
on the corporate network. The Management Center includes mechanisms for centralized alert and
event monitoring and policy configuration.
This guide includes details about the setup of Management Center components and provides a
model of the recommended security framework. The guide also provides a comprehensive
reference to the Management Console.
For more information about the installation and set up of the AppSense Management Center, see
the AppSense Management Center Installation Guide.
Terms and Conventions

Table 1 shows the textual and formatting conventions used in this document:
Table 1 Document Conventions
Convention Use
Bold Highlights items you can select in Windows and the product interface, including
nodes, menus items, dialog boxes and features.
Code Used for scripting samples and code strings.
Italic Highlights values you can enter in console text boxes and titles for other guides and
Helps in the documentation set.
> Indicates the path of a menu option. For example,

“Select File > Open" means "click the File menu, and then click Open."
Note — Highlights important points of the main text or provides supplementary

information.
Tip — Offers additional techniques and help for users, to demonstrate the advantages
and capabilities of the product.
Caution/Warning — Provides critical information relating to specific tasks or indicates

important considerations or risks.
Procedure — Indicates a series of steps for performing a task.

About this Guide
Documentation
Documentation
The AppSense documentation set includes guides for installing, configuring and evaluating
AppSense products, and Helps which provide reference to the product interfaces and procedures
for performing common actions.
You can access the Helps from the product consoles and download product guides in PDF format
from the AppSense website at:
http://www.appsense.com

Management Center Architecture
Components
The AppSense Management Center provides a system for managing and deploying AppSense
software to managed computers on the corporate network and includes mechanisms for
centralized alert and event monitoring, and policy configuration.
Figure 1 Management Center Architecture
Components
The Management Center includes the following:
The Management Console
The Management Server
The Database
The Product Consoles
The Managed Computers

Components
The Management Console

The Management Console provides an interface to the Management Server and the other
components of the Management Center allowing you to control deployment groups, users, event
data and alerts, configurations and packages, and registered computers.
The Management Console includes the following views:
Home — Allows you to manage server connections, monitor authentication with a server, view
deployment group status, view alerts status and monitor system events.
Deployment Groups — Allows you to manage and monitor Deployment Groups with controls
for handling group membership, installation schedule, event filtering policies and package
assignments, monitoring for alerts and events and computer management settings.
Alerts — Allows you to manage alerts and alert rules.
User Rights — Allows you to manage access rights to the Management Console and views
within the console, as well as manage access to product consoles and configurations.
Packages — Allows you to manage AppSense software agent and configuration packages on
the Management Server.
The Management Server

The Management Server manages communications with the SQL database server for data access
and storage, provides security control, communications for managing network discovery services
and software deployment to managed computers, resource management and system auditing.
Management Server security controls network authorization of managed computers and
Management Consoles.
Communications for deployment includes download schedules, group management and file
transfers, and network discovery services for integration with Active Directory.
System auditing manages event data access and storage via the Management Console alert
rules which includes mechanisms for generating SNMP and SMTP alert notifications.
For information about the system requirements for any of the Management Center
components, see the AppSense Management Center Installation Guide.
The Database
The Management Center relies on the availability on the network of a pre-installed SQL server for
the storage and retrieval of AppSense software agents, configuration packages, license packages,
and event and alert data.
The SQL database server is administered by the Management Server and can be installed locally
on the Management Center computer or on a separate computer.

Components
The Product Consoles

The consoles for each of the management products (Application Manager, Environment Manager
and Performance Manager) allow you to configure and save the configurations to the Management
Server database for adding to deployment groups and deploying to managed computers.
For more information about connecting product consoles to the Management Server, see the
relevant product guides or the AppSense Management Center Installation Guide.
The Managed Computers

The Client Communications Agent (CCA) is installed on managed computers to manage
communications between the product agent and the AppSense Management Center.
The CCA polls the Management Server to manage the download and installation of agents,
configurations and software package updates, and also sends event data generated by the
product agents to the Management Server.
The CCA can be downloaded and installed directly on managed computers from the
Management Server web site.
The CCA can also be deployed by other methods such as Active Directory group policy
objects, or third party deployment solutions such as SMS.

System Requirements
Connectivity and Accounts
System Requirements
This section provides details of system specifications, supported operating systems, database
servers and additional requirements for each of the AppSense Management Center components
and managed computers, including the following:
Database
Management Server
Management Console
Client Communications Agent

The Management Server must be able to access Active Directory for authentication in order to
authorize incoming connections.
The Management Console must be used with a domain user account which has the correct
permissions for accessing the computer hosting the Management Server.
The Computer hosting the Management Console requires outgoing access for HTTPS or
HTTP.
Database
The SQL database can be installed on the same computer hosting the Management Server, or
separately.
When installing a Microsoft MSDE 2000 or Microsoft SQL Server 2000 database server, start the
SQL database service manually in the Start > Programs menu before proceeding with the
AppSense Management Server installation. There is no need to reboot the server machine.
If the SQL database server is located on a different computer than the AppSense
Management Server, ensure that TCP/IP is enabled to allow a remote connection to the
database server.
Supported Database Servers

Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition
Microsoft SQL Server 2000 SP3 or later
Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)

System Requirements
Management Server
Management Server
The computer hosting the Management Server requires the following:
Microsoft Windows Server 2003.
Microsoft Windows Installer 3.1 (included in Microsoft Windows Server 2003 Service Pack 1).
You can download and install Microsoft Windows Installer 3.1 from the following link:
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=889482fc-
5f56-4a38-b838-de776fd4138c
Microsoft .NET Framework 2.0.

Internet Information Services (IIS) 6.0.
Ensure that the Management Server default web site includes anonymous access enabled
with valid credentials for the default user.
For more information, see Troubleshooting: CCA Fails to Connect to a Non-secure
Management Server.
Ensure that Background Intelligent Transfer Service (BITS) Server Extensions in IIS 6.0 are
installed and ready, as follows:
Enable BITS.
Add/Remove Windows Components > Windows Components Wizard > Application Server
> Internet Information Services (IIS) > Background Intelligent Transfer Service (BITS)
Server Extensions.
Allow BITS.
Start > Programs > Administrative Tools > Internet Information Service (IIS) Manager >
Web Service Extensions > BITS Server Extensions > Allow
Microsoft Windows Installer 3.1.
Requirements for SSL Communications

The Management server and managed computers are members of an Active Directory domain.

System Requirements
Management Console
Management Console
The computer hosting the Management Console requires the following:
Microsoft .NET Framework 2.0.
A computer account under the same Domain as the Management Server.
Microsoft Windows Installer 3.1 (included in Microsoft Windows Server 2003 Service Pack 1).
5f56-4a38-b838-de776fd4138c

The computer hosting the Client Communications Agent (CCA) requires the following:
Supported Operating Systems

Microsoft Windows XP Professional SP2
Microsoft Windows Server 2003
Microsoft Windows 2000 SP4
Required Components
WinHTTP 5.1 (including BITS 2.0).
Before proceeding with the installation, check in system Services to ensure that the
Background Intelligent Transfer Service (BITS) service is installed and the startup type is
set to Manual or Automatic. Otherwise, the installation of the CCA cannot proceed.
Windows Installer 3.1 (included in Microsoft Windows Server 2003 Service Pack 1).
5f56-4a38-b838-de776fd4138c
Microsoft Internet Explorer 6.0

Security Model
Security Model
The AppSense Management Center can be implemented in a secure distributed environment with
Active Directory integration, Secure Socket Layers (SSL) for encrypted communications,
authenticated Management Server and database connections.
Figure 2 AppSense Management Center Security Model

Security Model
Security Challenges
Security Challenges
The security model shown in Figure 2 for implementing an AppSense Management Center
installation addresses the following types of security threats which may pose a challenge to the
system:
System integrity — Attempts to tamper with configuration and agent packages distributed to
managed machines through the introduction of malware or modifications to software packages
undermine the security policies which the management software is required to implement.
Data confidentiality — Event and alert data is continuously relayed to the SQL database via the
Management Server and could be vulnerable to the threat of access by unauthorized users.
Authentication and Authorization

Authentication using Active Directory integration ensures that AppSense Management and
product software is only accessed or modified by authorized administrative users.
Connections from the Management Server to the database are Windows authenticated.
An appropriate certificate issued by a Certification Authority, following enterprise policy and
procedure and installed on the Management Server, ensures the server can be validated
before client connections are established. Client connections are from managed computers
and computers hosting the Management console, product consoles and Licensing console.
Securing Communications using SSL

SSL provides confidentiality and integrity of communications to ensure sensitive data is accessible
only by authorized users, including:
Event data
Agents and agent configuration data
For information about setting up a self-signed SSL certificate on Windows Server 2003 with SQL
Server 2005 Express Edition, see the AppSense Management Center Installation Guide.
If you are setting up SSL certificates on web servers using other supported operating systems and
Microsoft SQL Servers, see the following for further information:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/secnetht16.asp

Management Center Workflow
This section provides an overview of the steps for setting up the AppSense Management Center
and managed computers ready for deploying product Agents and configuration packages.
Figure 3 Management Center Workflow

Workflow
Workflow
Configure and set up the Management Center according to the following steps, as shown in
Figure 3:
Step 1 Connect to the Server

After launching the Management Console for the first time, in Start > Programs > AppSense,
connect to the Server by clicking the link in the Overview panel or selecting Connect in the
Actions menu.
Figure 4 Connecting to the Management Server
The server supports only one Management Console connection at a time.

Ensure that you provide a valid Management Server URL and prefix the address appropriately with
HTTPS or HTTP depending on whether you are implementing the Management Center in a secure
Active Directory domain with SSL encryption and a valid certificate or in a workgroup environment.
In the Connect to Server dialog box, select Automatically connect on startup to ensure the
console connects automatically whenever launched.
Step 2 Set Up User Accounts

The Management Console installs with an Administrator account assigned to the local user
performing the installation. You may wish to assign additional user accounts with full administrative
rights or partial rights for viewing alerts and events.
Figure 5 Setting up user accounts

Workflow
The User Rights view allows you to add users and groups. Select the Add Users or Add Groups
option in the Actions menu to launch the Select Users or Groups dialog box to create a user
policy. Click Refresh to update the view.
Check the required policies to apply to the new account. You can display a detailed list of the
policies and the rights they each entitle the user or group by selecting the new user or group in the
tree view in the left-hand panel.
Step 3 Install Packages

Check the availability of packages in the Packages view and, where appropriate, load and install
existing packages on the network.
Figure 6 Setting up packages
The Management Server installation automatically saves AppSense product agents to the
Management Server database. Software configuration and license packages are also
automatically saved to the database when configured in the product and licensing consoles
operating in Deployment mode. Consoles operate in Deployment mode when the Management
console is installed on the same computer.
You can load additional packages, such as software and license configurations, which have
already been saved to MSI packages on the local computer or network using consoles installed in
standalone mode.
For more information about installing product consoles on the management computer
without installing the product agents, see the AppSense Management Center Installation
Guide.

Workflow
Step 4 Create Deployment Groups

Set up deployment groups to specify client computer poll periods, group membership, installation
schedules, event filters and package assignments, alert and events, and monitoring for specific
computers in the group.
Figure 7 Setting up deployment groups
Polling periods and local event logging

The default polling period is 5 minutes for client machines to check for changes to the deployment
group settings and assigned packages. The default poll period for uploading events is set to 5
minutes.
Client computer events can be set to log locally to the Application Event log and to locally held files
in XML format, for monitoring purposes.
Membership
Group membership is assigned by supplying Active Directory root OU paths using the LDAP
protocol in directory groups or using computer names in computer groups.
Directory group paths can be validated and exceptions can also be added to exclude specific
groups of computers within an OU directory.
Installation Schedule
Configure the software download installation schedule times for the deployment groups.
Configurations are installed immediately upon download.
Event Filtering
Select events to generate for product software and the Management Center. You may wish to
avoid selecting high volume alerts except for specific monitoring purposes over limited periods of
time to avoid inundating the system. The selected events can be used for setting up alert rules to
generate notifications.

Workflow
Step 5 Set Up Alert Rules

Create Alert rules in the Alerts view specifying combinations of the event ID, computer name and
user name and configure alert rule notifications using mail server details for e-mail and SNMP
messages about critical events you wish to monitor.
Figure 8 Setting up alert rules
Step 6 Install the CCA on Managed Computers

The Client Communications Agent (CCA) can be downloaded from the Management Server
website and installed manually or using a command line prompt to install silently. For more
information about the CCA installation methods, see Installing the Client Communications Agent.
The CCA can also be distributed and installed via third-party deployment mechanisms.
Once the CCA is installed, the service registers with the Management Server at the website
address you supplied during installation. Once the CCA has downloaded the deployment group
settings, the service implements the policies to install software, generate events and poll the server
for further changes and package updates. The CCA regularly polls the server for updates and
changes to the deployment policy.
Ensure that you provide a valid Management Server URL and prefix the address appropriately with
HTTPS or HTTP depending on whether you are implementing the Management Center in a secure
Active Directory domain with SSL encryption and a valid certificate or in a workgroup environment.

Troubleshooting
Product Consoles Fail to Connect to a Secure Management Server
Troubleshooting
This section provides procedures for troubleshooting issues you may encounter with your
Management Center implementation.
CCA Fails to Connect to a Management Server
CCA Fails to Connect to a Management Server when SSL State Changes
CCA Fails to Connect to a Non-secure Management Server

A certificate error occurs when connecting to a self-signed secure server from an AppSense
product console using the Connect to server option in the Action menu.
The following error message is displayed: "A problem occurred while trying to connect to the
Management Server"
The connection fails unless the self-signed certificate located on the server is manually copied from
the Management Server to the computer hosting the console.
Perform the following steps to copy a self-signed certificate from a Management Server:
The computer hosting the product consoles on which you are installing the certificate must
be in the same Active Directory domain as the Management Server from which the
certificate is imported.
1. Launch the web browser and enter the Management Server URL:
https://<Server Name>/ManagementServer
A security warning message displays notifying you that there is a problem with the certificate.
2. Click View Certificate to display the Certificate dialog box and select the Certification Path
tab.
3. Highlight the certificate with the exclamation mark, and select View Certificate.
4. In the Details tab, click Copy to File to launch the Certificate Export Wizard.
5. Click Next to select a format for the certificate and click Next to proceed.
6. Browse to a location for temporarily storing the file and supply a file name.
7. Click Next to view the summary details and click Finish to complete the wizard.
8. In Control Panel, launch Internet Options and select the Content tab.
9. Click Certificates and select the Trusted Root Certification Authorities tab.
10. Click Import to launch the Certificate Import Wizard and follow the steps to select the file you
saved and complete the Wizard to install the certificate.

Troubleshooting

When a computer hosting the CCA fails to connect to the server, check the Windows Event Log for
event 9750 which indicates there has been a connection failure with the Management Server.
A connection failure can occur for the following reasons and you are recommended to check the
these items and take the suggested actions:
Incorrect URL
Uninstall the CCA and reinstall ensuring that you enter the correct URL to the Management
Server using HTTP for non-secure servers and HTTPS for secure servers.
<https>://<Management Server Name>
SSL State change to the Management Server
For more information, see CCA Fails to Connect to a Management Server when SSL State
Changes.
Management Server untrusted certificate is not installed on client computer.
For more information, see CCA Fails to Connect to a Non-secure Management Server.
CCA Fails to Connect to a Management Server when SSL State Changes

When the state of the web site Secure Socket Layers (SSL) configuration is changed, either from
the enabled or the disabled state, the web site must be restarted to allow the CCA to connect to the
correct URLs for downloading packages or uploading events to the Management Server.
Restart the web site as follows:
1. On the Management server launch Internet information Services (IIS) Manager.
2. In the left hand navigation panel, expand the server node and highlight the Default Web Site
node.
3. Select Stop in the Action menu or toolbar and click Start to restart the web site.

Troubleshooting

The CCA does not register with a non-secure Management Server after the CCA service starts.
Perform the following steps to test whether the CCA is able to connect to the Management Server
and, if necessary reconfigure Management Server default website with anonymous access
enabled and a valid password for the default anonymous account.
To test the connection to the Management Server

Launch the web browser on the computer hosting the CCA and enter the following URL to
check connectivity with the Management Server:
http://<Server Name>/ManagementServer/Deployment/Manifest.aspx
The check returns an HTTP 401 error if the anonymous user account is configured incorrectly.
The default anonymous account must have a valid password.
Anonymous access on the Management Server must be enabled.
To reset the default anonymous user account password

1. Launch the Computer Management Console in Start > Programs > Administrative Tools >
Computer Management.
2. In the left hand navigation panel, expand System tools > Local Users and Groups > Users.
3. Highlight the default anonymous user account and right-click to select Set Password.
The default anonymous user account is called the Internet Guest Account and the
default name format is IUSR_<Computer Name>.
4. A warning message displays with a prompt to proceed or cancel the action.

Select Proceed to display the Set new password for IUSR_<Computer Name> dialog box.
5. Enter and confirm the new password and click OK.
To enable anonymous logging

1. Launch the IIS Manager console in Start > Programs > Administrative Tools > Internet
Information Services (IIS) Manager.
2. In the left hand navigation panel, expand the following nodes:
Web Sites > Default Web Site > ManagementServer > Deployment
3. Highlight the Deployment node and select Properties in the right-click or Action menus.
4. Select the Directory Security tab and click Edit under Authentication and access control to
launch the Authentication Methods dialog box.
5. Ensure Enable anonymous logging is selected and enter the new password for the default
anonymous user account.

Troubleshooting
6. Click OK to confirm the new password settings and close the IIS Manager dialog box.
7. On the computer hosting the CCA, retest the connection to the Management Server in To test
the connection to the Management Server.
A successful connection returns the following XML code in the browser:
<?xml version="1.0" encoding="utf-16" ?>
<reply>OK</reply>

Reference
Console Overview
Reference
This section provides a complete reference to the AppSense Management Console for managing
the settings, configurations, packages and computers registered with the AppSense Management
Server, and includes:
Console Overview
Home View
Deployment Groups View
Alerts View
User Rights View
Packages View
Event details
Console Overview
The AppSense Management Console allows you to manage AppSense software deployment
groups, alerts and alert rules, users and software packages. Deployment groups include settings
for group membership, installation schedules, event filtering, packages, alerts, events and
computers.
Console Layout
The Management Console includes the following areas:
Navigation Pane
The navigation pane provides centralized navigation for accessing the tree view list of components
in the selected view.
View Selection Bar

The View Selection Bar is located in the lower half of the Navigation Pane and allows you to
select panes for managing the following system views:
Home — Manages the server connection and provides connection status information, quick
links and status of user authentication, deployment groups and alerts.
Deployment Groups — Manages deployment groups including group membership, installation
schedules, event filtering, package control, alerts, events and computer management.
Alerts — Manages alerts and alert rules for AppSense software events sent to the server from
client computers.
User Rights — Manages user rights policies for the Management Console.
Packages — Manages agent and configuration software packages.

Reference
Home View
Breadcrumb Bar
The breadcrumb bar displays across the main View Area and indicates the path of the current
view.
View Area
The View Area is the main work area and displays the settings, controls and views of the selected
node in the navigation panel. The View Area also includes the Actions area in the right-hand
column which displays the available controls in the current view.
Home View
The Home view allows you manage server connections, monitor authentication with a server, view
deployment group status, view alerts status and monitor system events.
Figure 9 Management Console: Home View

Reference
Home View
The display in the navigation tree, View Area and Actions Area varies depending on whether a
Management Server is connected.
The availability of views in the console depends on the rights of the currently connected user. For
more information, see User Rights View.
The left-hand navigation tree expands to display the Management Server. The Management
Console can only connect to one Management Server at any time.
The left-hand navigation pane includes a navigation tree view which includes the following nodes
and dialog boxes:
Overview
<Connected Server>
System Events
Connect to Server
Overview
The Overview area presents a summary of the server connection according to the connection
status of the Management Server.
Connection
Indicates the connection status with a Management Server:
Not Connected — No server is connected.
Click the link to launch the Connect to Server dialog box for connecting the Management
Console to a Management Server.
<Server path and name> Connected — Indicates the name and path of the currently connected
Management Server.
Click the link to display the following server details:
Table 2 Management Server Overview
Property Value
Groups The number of deployment groups configured on the server.
New Alerts The number of new alerts currently active on the system.
New Critical Alerts The number of new alerts marked as critical which are currently active
on the system.
Database Server Name The name of the server hosting the database.
Database Name The name of the database.
Database Status The online status of the database.

Reference
Home View
Table 2 Management Server Overview (continued)
Property Value
Database Size The current size of the database.
Database Transaction Log Size The size of the database transaction log.
Database Current Date Local time of the computer hosting the Management Server database.
Authentication
Indicates the status of the user authentication on the connected server:
Not Authenticated — No server is connected.
Authenticated — Indicates the access rights of the currently connected user to manage
deployment groups, alerts, user rights and software packages, including the following:
Table 3 User Authentication
Access Rights Description

Administrator When selected, allocates full user rights which display all Management Console
views and allow users to manage users and access rights.
This option provides the following:
Deployment Groups – Provides access for managing the deployment groups
view.
Alerts – Provides access for managing alerts and alert rules.
User Rights – Provides access to the User Rights view for managing users.
Packages – Provides access to the Packages view and allows users to manage
AppSense agents and configurations using the product consoles.
Deployment Provides access to view all configurations, deployment groups, alerts, alert rules and
events and management of the deployment group settings.
Packages Provides access to the Packages view and allows the user to upload new packages
and delete existing packages. Users can also edit product configurations using
AppSense product consoles.
View Packages Provides access to the Packages view but users cannot make changes. Users also
have read-only access to AppSense product configurations using the product
consoles.
Alerts Provides access to the Alerts View for managing alerts and alerts rules.

Reference
Home View
Groups
Indicates the number of deployment groups configured on the connected server:
No Groups — No server is connected.
<n> Groups — Indicates the number of Deployment Groups which currently exist on the
Management Server.
Deployment Groups allow you to manage policies for specifying and scheduling software for
download and installation on groups of computers.
Click the link to manage deployment groups in the Deployment Groups View.
Alerts
Indicates the number of alerts currently active on the server:
No Alerts — No server is connected.
<n> New Alerts (<n> Critical) — Indicates the number of new alerts and also the number of
new critical alerts.
Alert Rules allow you to specify the event criteria to match with an incoming event to generate
an alert. Alert rules allocate a severity for an alert and matches against the specified event ID.
Alert rules can also match against any value for computer or user to generate more specific
alerts.
Click the link to manage alerts in the Alerts View.
Actions
The Actions area on the right-hand side of the console allows you to connect to a server or
disconnect the currently connected server.
Connect — Launches the Connect to Server dialog box for connecting to a Management
Server.
Disconnect — Disconnects the current server connection.
<Connected Server>
The connected server is listed in the node below the top-level management server node in the
left-hand panel and, when selected, displays details about the connected server.
Server details
Provides system details about the currently connected server.

Reference
Home View
Table 4 Connected Server System Details
Property Value
Groups The number of deployment groups on the server.
New alerts The number of new alerts.
New Critical Alerts The number of new alerts showing critical status.
Database Server Name Name of the server on which the database is installed.
Database Name Name of the database.
Database Status Online status of the database: Online/Offline
Database Size Maximum capacity of the database.
Database Transaction Log Size Current size of the database transaction log.
Database Current Date Current date and time on the database host system.
Server Version Software version of the Management Server.
Actions
Disconnect — Disconnects the currently connected server.
System Events
The System Events node provides a view listing current events.
The system events list includes the following:
ID — Indicates the reported event ID number.
Date/Time — Time the event was received by the Management Server.
Computer — Name of the computer on which the event originated.
User — User profile for which the event was generated.
You can select to view details of an event in the Event details dialog box with scrolling options for
displaying the details of other events in the list.
Actions
Refresh — Refreshes the System Events list.
Show Event Details — Launches the Event details dialog box displaying information about the
currently highlighted event.

Reference
Home View
Connect to Server
The Connect to Server dialog box displays when you select the link to connect to a Management
Server in the Home View of the Management console.
Figure 10 Connect to Server dialog box
The dialog box displays the details of the last connected server and includes the following settings:
Settings
URL — Drop-down list displaying the list of recently used Management Servers. You can select
from the list or type the URL of a server using the following syntax:
http://<server name>:<port 80>/ManagementServer
The dialog box displays the last connected server, by default.
Server Name — Text box in which you can enter the name of the server to which you wish to
connect.
The server name you enter here is automatically updated in the URL field.
You can also launch the Select Computers dialog box to browse for a server and select one
from the list by clicking the ellipsis button (...).
Path — Displays the path of the selected web server on the host computer.
The path you enter here is automatically updated in the URL field.
Automatically connect on startup — When selected, the console automatically connects to the
Management Server to which the Console last connected on startup, unless the server is not
available.

Reference

The Deployment Groups view allows you to manage and monitor Deployment Groups with
controls for handling settings, alerts, events and computers.
Figure 11 Management Console: Deployment Groups
The left-hand navigation pane displays a navigation tree view of the connected server.
The Deployment Groups view includes the following nodes:
Overview
Unassigned Computers
Directory Groups and Computer Groups
Configuring Groups
Move Computers

Reference
Overview
The Overview node lists details of all assigned and unassigned computers registered with the
server, and includes the following:
Table 5 Deployment Groups List
Detail Description
Type Deployment group type:
Unassigned Group – Computers on the network installed with a Client
Communications Agent (CCA) which have registered to the server but are not
assigned to an existing Deployment Group.
Directory Group – Group includes computers which can be browsed in Active
Directory using the LDAP protocol.
Computer Group – Group includes any computers on the network.
Group Group name. Groups are listed alphabetically.

Double-click a group to navigate to the correct group in the tree.
Computers Number of computers in the group.
Alerts Number of alerts for computers in the group.
Click anywhere on a deployment group list item to jump to the relevant group in the tree.
Actions
The Actions area on the right-hand side of the console allows you to create and delete
deployment groups.
New Directory Group — Creates a new group under the Directory Groups node.
New Computer Group — Creates a new group under the Computer Groups node.
Delete — Deletes the group selected in the list. Computers in the group are moved to the
Unassigned Computers.

Reference
Unassigned Computers
The Unassigned Computers node includes computers which are registered to the Management
Server but do not match the membership criteria of existing Directory Groups or Computer
Groups.
If an existing deployment group is deleted, computers within the deleted group are moved to this
node.
When a Computers sub-node is selected, the View Area displays the following panels:
Overview Panel
The Overview area displays in the upper panel of the View Area and includes the following
details:
Table 6 Unassigned Group Overview
Column Description
Name Name of the unassigned computer.
When a computer is selected for deletion from the system, the Pending
delete status is appended to the name shown in this column.
Alerts The number of current alerts.
Last Response Last time the computer contacted the server.
Management Panel
The Management Panel area displays in the lower panel of the View Area and divides into
separate tabs, and includes the following details:
Table 7 Unassigned Group Management
Tab Details Description

Alerts ID Alert ID.
Rule Alert rule which the alert matches.
Severity Alert severity.
Computer Computer from which the alert originated.
Group Group to which the computer belongs.
Date/Time Time the alert is raised on the Server.
Status Current status of the alert.

Reference
Table 7 Unassigned Group Management (continued)
Tab Details Description

Events ID Event ID.
Date/Time Time the event is raised on the client computer.
Computer Computer on which the event occurred.
User User for which the event occurred.
Packages Name Name of the package.
Version Version of the package.
Product Product with which the package is associated.
Installation Status Indicates the installation status of a package and includes the
following:
Installed
Pending Install
Pending Uninstall
Computer Details Property Computer hardware and system properties.
Value Computer hardware and system details.
Actions
The Actions area on the right-hand side of the console allows you to move computers to other
groups, delete computers from the database or view event information.
Move — Allows you to move the selected computer to another group.
Select the computer you wish to move and click Move to launch the Move Computers dialog
box. Select a destination group for the computer and click Move to relocate the computer to the
selected deployment group.
Refresh — Refreshes the list of computers in this group.
Delete — Deletes selected computers from the system.
Deleted computers remain listed in this group until all software packages have been removed
with Pending delete status displayed next to the computer name in the overview panel.
Agents and packages are deleted as follows:
Client Communications Agent (CCA) — The CCA uninstalls after product agents have
uninstalled, according to the Installation Schedule.
Product Agent — The AppSense product agents uninstall according to the Installation
Schedule.
Configurations — Configurations are uninstalled immediately.

Reference
Unregister — Unregisters the computer from server.
If you select this option before the packages and agents have successfully been deleted
from this computer, the CCA reregisters the computer again on the next poll period.
Show Event Details — Launches the Event details dialog box for viewing information about the
selected event.
Directory Groups and Computer Groups

Directory Groups include path references to OU groups or computers which can be browsed in
Active Directory using the LDAP protocol. Computer groups include references to any computers
on the network.
Computer group settings apply in precedence to Directory Group settings when a computer
is included in both types of groups.
The groups in the tree can be expanded to display lower level nodes for managing the deployment
group settings, alerts, events and individual computers belonging to the group. For more
information, see Configuring Groups.
The following details display when the Directory Groups or Computer Groups node is selected:
Table 8 Directory and Computer Groups Lists
Details Description
Group Name of the directory or computer group. Groups are listed
alphabetically.
Double-click a group to navigate to a group in the tree.
Computers Number of computers in the group.
Alerts Number of alerts currently raised on the computer.
Actions
The Actions area on the right-hand side of the console allows you to create new groups and
delete existing groups selected in the list.
New Directory Group/New Computer Group— Creates a new group.
Delete — Deletes existing groups selected in the list. Computers in deleted groups are moved
to the Unassigned Computers group.

Reference
Configuring Groups
Each group in the Directory Groups node and Computer Groups node includes sub-nodes for
managing group membership settings, alerts, events and packages assigned to the group. The
links in each group node direct you to the relevant management nodes or you can expand the
group node to select the management sub-nodes, which include:
Settings
Alerts
Events
Computers
Settings
The Settings node provides options for client computer checks, uploads and local event logging,
and sub-node settings for group membership, installation schedule, event filtering and package
assignments.
The Settings node includes the following sections:
Polling
Machine Poll Period — Sets the frequency the client computer checks the server for changes
to the deployment group. When new settings, agents or configurations are detected, the client
downloads the relevant components and installs them.
Configurations are installed immediately when the download is complete.
Product agents are installed according to the installation schedule. Expand the settings
node to display the Installation Schedule sub-node to configure the settings for installing
agents.
The default machine poll period is 1 minute.
Upload Poll Period — Sets the frequency with which client computers upload event data.
The default upload poll period is 5 minutes.
The range of polling minutes includes: 1, 2, 5 or 15 minutes. The options for setting the poll
period are limited to avoid overloading the demand on network bandwidth which very short
poll periods would cause and the risk of missing critical updates and downloads that much
longer poll periods might cause.
Local Events
Log events locally — When selected, client computers store events locally in the System Event
Log.
Log events to the local file — When selected, client computers record events in the specified
file.

Reference
Settings Sub-nodes
Expand the settings node in the navigation tree to display the following sub-nodes:
Membership
Event Filtering
Packages
Membership
The Membership sub-node allows you to add computers to a Computer Group or specify the
directory path for computers to add to Directory Groups.
The Membership node includes the following sections:
Directory Groups
Root OU Node — Enter the path of the Active Directory root Organization Unit (OU) node or
select the ellipsis button (...) to launch a browser with the Active Directory list for selecting OU
root nodes and computers.
All computers registered in this node on which the Client Communications Agent (CCA) is
installed, are registered by the Management Server in this deployment group. Use the
Exceptions to exclude computers or child OUs from this group policy.
Include child OUs — When selected, includes all child OUs of the root node you specified in
Root OU Node.
Exceptions — Add computers or child nodes you wish to exclude from membership of the
current group by selecting the Add Exception in the Actions menu.
Submit — Click to commit any changes to the database.
A notification prompts you to commit any unsaved changes if you attempt to navigate away
from the page. A notification also warns you if there are any errors on the page.
Actions
Validate changes — Checks that the Root OU node path is a valid reference, root and
exception paths are valid. Checks that the settings for this directory group do not overlap
with other directory group settings. Also checks that Root and Exception objects specified
are of the correct type, such as, Domain, OU, Computer, as appropriate for the
specification.
Add Exception — Launches a browser with the Active Directory list for selecting a child
node of the root OU directory to exclude from the group membership policy.
Delete Exception — Deletes the highlighted exception from the list.

Reference
Computer Groups
Computer — Add computers you wish to add to the membership of the current group.
<Click here to create a new entry> — Enter the path to a computer that you wish to add to
the membership of this group. Otherwise, select the ellipsis button (...) to launch the Select
Computers browser to find and select computers on the network to add to the group
membership.
Actions
Add — Launches the Select Computers browser to find and select a computer on the
network to add to the group.
Delete — Deletes the computer selected in the list.
The Installation Schedule sub-node allows you to set the times and frequency for installing
software packages downloaded by computers belonging to this group.
Software agents are installed according to the installation schedule for the deployment
group. Configuration and license packages are installed immediately upon download by the
CCA from the Management Server.
The Installation Schedule node includes the following sections:
Disable (No software will be installed) — When selected, no software is installed.
Configurations are installed immediately.
Immediately (Software is installed as soon as it is downloaded) — Agent software is installed
immediately after the computer has completed downloading software packages.
Schedule (Software is installed on the configured schedule)— Software is installed according
to the specified days and times enabled in the list:
Table 9 Installation: Schedule
Column Description
Day Day of the week on which the installation is performed. Includes Sunday to Saturday.
You can specify a specific occurrence of the day in the month on which to apply this
setting in Day of the Month.
Start Start time of the installation.
End End time of the installation.
Enabled When selected, the day is included in the installation schedule.

Reference
Submit — Click to commit any changes to the database.

A notification prompts you to commit any unsaved changes when you attempt to navigate away
from the page.
Event Filtering
The Event Filtering sub-node allows you to specify which events client computers send to the
Management Server for each product agent. You can also select to display user and computer
names in events anonymously.
Events can be generated for:
Application Manager
Environment Manager
Management Center
Performance Manager
The Event Filtering node includes the following sections:
Anonymous Logging
Always use anonymous USER name in events — Events for actions by specific users are
reported without recording the user name.
Always use anonymous MACHINE name in events — Events for actions performed on specific
computers are reported without recording the computer name.
Event Filter
Provides expandable lists of events by product which you can select either individually or by
product group to generate and send to the Management Server.
For information relating to specific events, see Events.
Table 10 Event Filter
Column Description
Product event ID Indicates the product name and the four digit event ID numbers for the events
available for the selected product.
Event description Description of the event.

You may wish to disable certain types of events which are generated in large quantity
to avoid inundating the server.
Enabled Select to enable an event.

Select this option in the top level list item to enable all events in the group.

Reference
Actions
Toggle All — Toggles the enabled status selection for all products.
Toggle For Product — Toggles the enabled status selection for a highlighted top-level list item.
This action is only enabled when the top level list item is highlighted.
Toggle Selected — Toggles the enabled status selection of the highlighted list item.
Packages
The Packages sub-node allows you to manage the list of software packages assigned to the
current group for download to the client computers and also provides the list of packages currently
available on the server. Software packages include software agents and configurations for:
Application Manager
Environment Manager
Performance Manager
Management Center
License Manager
When the installation schedule for a group is disabled, a warning is displayed in the
assigned packages panel notifying you that the packages will not be installed. The warning
is removed if the packages are unassigned from the group or if the installation schedule is
enabled.
The Packages node includes the following sections:
Assigned Packages
Table 11 Assigned Packages
Column Description
Name The assigned software package title.
Required version Version number of the assigned software package required for download.
When Set To Latest is selected, the latest available version of a software package is
installed.
Product The product to which the software package belongs.

Reference
Available Packages
Table 12 Available Packages
Column Description
Name The software package title.
Latest Latest version number of the software package.
Product The product to which the software package belongs.
Actions
Refresh — Refreshes the current list.
Assign — Adds the highlighted software package in the Available Packages list to the
Assigned Packages list.
Unassign — Removes the highlighted package from the Assigned Packages list.
Set To Latest — Flags the software package to install the latest available version.
Alerts
The Alerts node allow you to manage the list of alerts for all the members of the current
deployment group and provides a list of the events raised for the selected item in that group in a
tabbed panel in the lower area of the view. Actions allow you to process alerts by flagging alerts or
deleting alerts from the list.
For managing alerts for all groups, see Alerts View.
The Alerts node includes the following sections:
Alerts
Table 13 Deployment Groups: Alerts Node
Column Description
ID ID of the event for which the alert is generated.
Rule Alert rule.
Severity Severity level based on the alert rule.
Computer Computer name on which the alert originated.

Reference
Table 13 Deployment Groups: Alerts Node
Column Description
Group Deployment group from which the alert originated.
Date/Time Time the alert is raised on the Server.
Status Status of the alert: Acknowledged, Resolved, New.
Events
Table 14 Deployment Groups: Alerts Node Events
Column Description
ID Event ID.
Computer Computer on which the event occurred. This may be reported as anonymous if
Always use anonymous MACHINE name in events is selected in Event
Filtering.
User User action which caused the event. This may be reported as anonymous if
Always use anonymous USER name in events is selected in Event Filtering.
Actions
Refresh — Refreshes the current list of alerts.
Acknowledge Selected — Flags selected alerts as acknowledged.
Resolve Selected — Flags selected alerts as resolved.
Delete Selected — Deletes all selected alerts.
Delete All — Deletes all alerts.
selected event.

Reference
Events
Events lists the events raised by computers in the current deployment group according to the
configuration settings in the Event Filtering node.
The Events node includes the following section:
Events
Table 15 Deployment Groups: Events Node
Column Description
ID Event ID.
Computer Computer on which the event occurred. This may be reported as anonymous if
Always use anonymous MACHINE name in events is selected in Event
Filtering.
User User action which caused the event. This may be reported as anonymous if
Always use anonymous USER name in events is selected in Event Filtering.
Actions
Refresh — Refreshes the current list of events.
selected event.
Computers
Computers allows you to monitor the list of computers in the current deployment group.
Management options include monitoring alerts, events, AppSense software agent and
configuration packages and computer details for each computer in the group.
The Computers node includes the following sections:
Computers
Table 16 Deployment Groups: Computers Node
Column Description
Name Computer name.
Alerts Number of active alerts.
Last Response Date and time of the last alert sent to the server.

Reference
Control Tabs
Table 17 Deployment Groups: Computers Node Control Tabs
Tab Description
Alerts The Alerts tab allows you to monitor alerts for the selected computer, and includes:
ID – ID of the event for which the alert is generated.
Rule – Alert rule.
Severity – Severity level of the alert based on the alert rule criteria.
Computer – Computer on which the alert originated.
Group – Deployment group from which the alert originated.
Date/Time – Time the alert is raised on the Server.
Status – Status of the alert: Acknowledged or Resolved.
Events The Events tab allows you to monitor events on the selected computer, and includes:
ID – ID of the event.
Date/Time – Date and time the event occurred.
Computer – Computer on which the event occurred.
User – User which caused the event.
Packages The Packages tab allows you to view packages on the selected computer, and includes:
Name – Title of the software agent and configuration package on the currently selected
computer.
Version – Version number of the current software package on the selected computer.
Product – The product to which the package belongs.
Installation Status – Indicates the installation status of a package and includes the following:
- Installed
- Pending Install
- Pending Uninstall
Computer details The Computer details tab displays information about the selected computer, and includes:
Property – Computer hardware and system properties.
Value – Computer hardware and system details.

Reference
Actions
Move — Launches the Move Computers dialog box for selecting a different group to relocate
the highlighted computer.
Refresh — Refreshes the display after an action has been performed.
Delete — Deletes selected computers from the system.
Deleted computers remain listed in this group until all software packages have been removed
with Pending delete status displayed next to the computer name in the overview panel.
Agents and packages are deleted as follows:
Client Communications Agent (CCA) — The CCA uninstalls after product agents have
uninstalled, according to the Installation Schedule.
Product Agent — AppSense product agents uninstall according to the Installation
Schedule.
Configurations — Configurations are uninstalled immediately.
Unregister — Unregisters the computer from server.
If you select this option before the packages and agents have successfully been deleted
from this computer, the CCA reregisters the computer again on the next poll period.
Restore — Restores a computer set to delete or unregister.

selected event.

Reference
Move Computers
This dialog box launches when you select a computer to move to a different deployment group.
Figure 12 Move Computers dialog box
You can select this option in the Computers node of any computer group.
1. Select a group from the list and click Move in the Actions menu.
The computer is relocated to the new group.
2. Check the destination group to view the computer in the new location.

Reference
Alerts View
Alerts View
The Alerts view allows you to manage alerts and alert rules.
Figure 13 Management Console: Alerts View
Alerts are generated by the server when events are received from computers in each deployment
group.
Alert rules allow you to specify the events for which alerts are generated and additionally, criteria
for matching events originating on specific computers from specific users. Alert rules also define
actions for generating alerts via SNMP and SMTP e-mail notifications.
The left-hand navigation pane includes a navigation tree view of the alert filters and alert rules and
includes the following nodes:
All
Alert Rules
Delete Events

Reference
Alerts View
All
Alert filters sort and handle alerts for events generated by computers in all deployment groups,
shown in Table 18, according to the rules you define in Alert Rules.
For more information about managing alerts for specific deployment groups or computers, see the
Alerts section in Configuring Groups.
You can filter alerts according to a range of criteria including the acknowledged and resolved states
which you apply using the available actions. You can also delete alerts from the lists of alerts or
according to the acknowledged or resolved states.
Expand the top level node to display specific alert filter criteria.
Alert Filters
Table 18 Alert Filters
Filter Description
All Displays alerts from computers across all deployment groups.
New in last day Displays alerts generated by events on the current date.
Critical Alerts for critical severity events.
High Displays alerts for high severity events.
Medium Displays alerts for medium severity events.
Low Displays alerts for low severity events.
New Displays alerts for new events.
Acknowledged Displays alerts flagged as acknowledged.
Resolved Displays alerts flagged as resolved.

Reference
Alerts View
Actions
Delete Events — Launches the Delete Events dialog box allowing you to select events in a
date and time range to delete from the database.
Refresh — Refreshes the Alerts view to display current events.
Acknowledge Selected — Flags the selected alerts as acknowledged.
Resolve Selected — Flags the selected alerts as resolved.
Delete Selected — Deletes all selected alerts.
Delete All — Deletes all alerts.
Show Event Details — Launches the Event details dialog box displaying information about the
currently highlighted event.
Alert Rules
Alert Rules allow you to set up alerts for AppSense events sent from client computers to the
Management Server by specifying criteria to match with incoming events to generate alerts and
alert rule policies such as severity levels and SNMP and SMTP e-mail notifications.
Alert Rules
Table 19 Alerts: Alert Rules
Column Description
Rule Name of the current alert rule.
Enabled When selected, enables the highlighted alert rule.
Actions
New Rule — Creates a new Rule sub-node below the Alert rules node.
Enable — Enables the highlighted rules and processes related event types to generate alerts
according to rule policies.
Disable — Disables the highlighted rules.
Delete — Deletes the highlighted rules.
Alert Rules sub-nodes

After creating a rule in the Alert rules node, expand the following nodes to configure the rule:
Rule
Criteria
Actions

Reference
Alerts View
Rule
The rule node allows you to specify alert rule names, descriptions, status and severity and view
rule criteria and actions. The Actions area on the right-hand side of the console allows you to edit
the criteria and actions for the rule in the Criteria and Actions nodes.
The Rule node includes the following sections:
Rule Settings
Rule Name — Editable text box for entering a rule name which should include the number of
the event to which the rule applies for easy reference.
Rule Description — Editable text box for entering a rule description. The text box expands to
allow you to enter detailed descriptions. Click OK to confirm the description you have entered.
Severity — Drop-down list for selecting a severity level to apply to the alert rule.
Status — Drop-down list from which to select options to enable or disable the current rule.
Criteria List
The Criteria list provides details of the alert rule criteria. You can edit these criteria by expanding
the Rule node to display the Criteria node or by selecting the action button in the right-hand
Actions panel.
The Criteria list includes:
Event ID — Events with this ID number generate alerts of this type. For event ID numbers and
their descriptions, see the Event Filtering node in the console Deployment Groups.
Computer Name — Events on this computer generate alerts of this type.
User Name — Events caused by this user on the specified computer generate alerts of this
type.
User names must be entered using a double slash between the domain or computer
name and the user name. For example: MyDomain\\MyUser or MyComputer\\MyUser.
Actions List
The Actions display provides details of the alert rule actions to perform when an alert of this type is
generated. You can edit these actions by expanding the Rule node to display the Actions node or
by selecting the action button in the right-hand Actions panel.
Actions include:
SMTP — Indicates whether SMTP e-mail generation is enabled or disabled.
SNMP — Indicates whether SNMP trap generation is enabled or disabled.

Reference
Alerts View
Actions
Edit criteria — Switches the view to the Criteria sub-node for specifying event ID, computer
name and user name criteria for generating alerts based on the current rule.
Edit Actions — Switches the view to the Actions sub-node for configuring SNMP and SMTP
e-mail notifications about alerts generated by this rule.
Delete Rule — Deletes the highlighted rules.
Criteria
Criteria allow you to specify details of the events which generate this alert and filters to indicate
specific computers on which the events occur and specific users causing the events. You can use
any combination of these values to create the alert rule.
Criteria values support the use of regular expressions for specifying multiple values or ranges.
Delimiter characters must be used where appropriate. For example, when specifying a domain and
computer name or user name, such as:
Domain\\Computer or Domain\\User.
The Criteria node includes:

Event ID — Enter the ID number of the event type for which you wish to generate this alert. Use
regular expressions to specify multiple values or ranges.
Computer Name — Enter the name of the computer from which the specified event must
originate to generate this alert. Use regular expressions to specify multiple values or ranges.
User Name — Enter the name of the user that causes the specified event to generate this alert.
Use regular expressions to specify multiple values or ranges.
Actions
Alert rule actions allow you specify whether to generate SNMP traps and e-mail notifications when
alert criteria are met.
The Actions node includes links to the SMTP and SNMP sub-nodes for configuring and enabling
notifications via SMTP and enabling SNMP traps for the current alert type.
SMTP
The SMTP node allows you to enable or disable e-mail notifications and configure the user to
which e-mail notifications are sent about this alert.
SMTP Enable
Enable SMTP — When selected, SMTP e-mail notifications are enabled according to the
configuration settings when alert rule criteria are met.

Reference
Alerts View
SMTP Configuration
SMTP configuration settings allow you to specify the server to which e-mails are sent and the
e-mail header details including To, From and Subject details.
Expand Server Settings and E-mail Settings to display the configuration settings.
Table 20 Alert Rules: SMTP Configuration
Property Configuration
Server Settings N/A
Server Enter the path to the e-mail server through which e-mail notifications
are sent to the specified user.
User Name User name with which the Management system accesses the e-mail
server.
Password Password for the user profile with which the Management System
accesses the e-mail server.
E-mail Settings N/A
To Address to which e-mail notifications are sent about the current alert.
From Address from which e-mail notifications are sent about the current
alert.
Subject Subject line displayed in e-mail notifications about the current alert.
SNMP
The SNMP node allows you to enable or disable trap generation when alert rule criteria are met.
SNMP Configuration
Enable SNMP — When selected, SNMP traps are generated when alert rule criteria are met.

Reference
Alerts View
Delete Events
The Delete Events dialog box allows you to delete events from the database within a specified
date and time range, or all events.
Figure 14 Delete Events dialog box
The Delete Events dialog box includes the following settings:
Settings
Delete all events — Deletes all events in the Management Server database. Disables the date
and time range selection options.
From — Allows you to specify a start date and time for events to delete from the database.
To — Allows you to specify an end date and time for events to delete from the database.
You can enter date and time values or select a date from the calendar which displays
when you expand the drop-down list for each setting. The time values can be adjusted
either by entering values directly or using the keyboard arrow keys to scroll to the
required hour, minute and second values.
Skip events that are associated with an alert — Events associated with an alert are not deleted
from the database.

Reference
User Rights View
User Rights View

The User Rights view allows you to manage user and group access rights to the Management
Console and product agent and configuration management.
Figure 15 Management Console: User Rights

Reference
User Rights View
The left-hand navigation pane includes a navigation tree view for viewing the rights of all groups
and users and sub-nodes for viewing the rights of specific groups and users.
You apply rights to groups or users by enabling the options in the View Area.
Access Rights
Table 21 User Rights
Column Description
Groups/Users Name of the groups or users to which user rights are assigned.
Administrator When selected, allocates full user rights which display all Management Console
views and allow users to manage users and access rights.
This option provides the following:
Deployment Groups – Provides access for managing the deployment groups
view.
User Rights – Provides access to the User Rights view for managing users.
Packages – Provides access to the Packages view and allows users to
manage AppSense agents and configurations using the product consoles.
Deployment Provides access to view all configurations, deployment groups, alerts, alert rules
and events and management of the deployment group settings.
Packages Provides access to the Packages view and allows the user to upload new
packages and delete existing packages. Users can also edit product
configurations using AppSense product consoles.
View Packages Provides access to the Packages view but users cannot make changes. Users
also have read-only access to AppSense product configurations using the
product consoles.
Alerts Provides access to the Alerts View for managing alerts and alerts rules.
Sub-nodes
The following nodes are available in the User Rights view:
All Users and Groups — When selected, displays a list of all users and groups. See Table 21
for details about the settings available for each user or group.
Groups — When selected, displays a list of all groups registered with the server. See Table 21
for details about the settings available for each specific group.
Users — When selected, displays a list of all assigned users. See Table 21 for details about
the settings available for each specific user.
By default, the user who installed the Management Server and Management Console is listed
in the Users node with Administrator access rights.

Reference
Packages View
Actions
The following actions are available according to the node selected:
Add User/Add Group— Launches the Select Users or Groups dialog box for adding users or
groups to the list.
Refresh — Updates the list.
Delete — Deletes the highlighted groups and users from the list.
Packages View
The Packages view allows you to manage AppSense software agent and configuration packages
on the Management Server.
Figure 16 Management Console: Packages View
The Packages view includes the following nodes and sub-nodes:

All Packages
Agents
Configurations
Package Installer

Reference
Packages View
All Packages
The All packages node displays the list of all AppSense software agents and configuration
packages available on the Management Server and includes actions which allow you to add and
delete software MSI packages.
The All packages node includes the following:
All Agents and Configurations
Table 22 Packages: All Agents and Configurations
Column Description
Name Name of the software package.
Type Type of package:

Agent.
Configuration.
Product Product to which the software package is related,

including one of the following:
Application Manager
Communications Agent
Environment Manager
Performance Manager
License Manager
Size Size of the software package MSI file.
Actions
Add Package — Launches the Browse for package dialog box which allows you to navigate
the network to select a package to add to the list of available packages on the server. Once you
have selected an agent or configuration package, the Package Installer dialog box displays
allowing you to install the agent or configuration package in the database.
Refresh — Refreshes the list of packages after making changes.
Remove — Deletes the highlighted packages from the server.

Reference
Packages View
Agents
The Agents node displays the list of AppSense software agent packages available on the
Management Server and includes actions which allow you to add and delete packages.
The Agents node includes the following:
All Agents
Table 23 Packages: All Agents
Column Description

Agent.
Configuration – Not displayed in this list.
Product Product to which the software agent package is related,

including one of the following:
Application Manager
Communications Agent
Environment Manager
Performance Manager
Actions
Add Agent — Launches the Browse for package dialog box which allows you to navigate the
network to select an agent package to add to the list of available packages on the server.
Once you have selected a package, the Package Installer dialog box displays for adding the
agent package to the database.

Reference
Packages View
Configurations
The Configurations node displays the list of all AppSense software configuration packages
available on the Management Server and includes actions which allow you to add and delete
software MSI packages.
The Configurations node includes the following:
All Configurations
Table 24 Packages: All Configurations
Column Description

Agent – Not displayed in this list.
Configuration.
Product Product to which the software package is related, including one of the
following:
Application Manager
Environment Manager
Performance Manager
License Manager
Actions
Add Configuration — Launches the Browse for package dialog box which allows you to
navigate the network to select a package to add to the list of available packages on the server.
Once you have selected a package, the Package Installer dialog box displays for adding the
configuration package to the database.

Reference
Packages View
Package Installer
The Package Installer dialog box displays when you have selected an AppSense software agent
or configuration package and allows you to add the package to the Management Server database.
Figure 17 Package Installer dialog box
The Management Server installation process automatically saves all AppSense agents to the
Management Server database. Configurations created and modified in consoles operating in
Deployment mode are also automatically saved to the database.
This dialog box is only usually required for loading packages to the database under the following
circumstances:
Updating versions of product agent packages.
Uploading configuration packages saved to disk as MSI packages.
Configuration packages created by product management consoles operating in standalone
mode.
The Package Installer dialog box includes the following:
Settings
Name — Displays the name of the Agent or configuration package and allows you to edit the
name.
Manufacturer — Displays the manufacturer details.
Version — Displays the version number of the package. The agent version represents the
version of the product while the configuration version represents an incremental value each
time you modify an existing configuration.
Product — Drop down list allowing you to select the product type.

Reference
Event details
Event details
The Event details dialog box displays when you double-click an event in the System Events node
of the Home View navigation pane or when you select Show Event Details in the Actions pane
on the right-hand side of the View area.
Figure 18 Event Details dialog box
The Event details dialog box allows you to scroll through the list to reveal details about events,
and includes:
Date
Time
Event ID
Product
User
Computer
Scroll arrows — Scroll through the events in the list to display in the dialog box.
Description — Provides additional detail about the event. The lower panel of this area includes
event details by category.

Events
Application Manager Events
Events
This section provides details about events which can be configured in the Management Center
deployment group configurations and raised by deployed CCAs hosted on the same computers.
Environment Manager Events
Performance Manager Events
Management Center Events
Table 25 Application Manager Events †
Event ID Description Default Text Type
8095‡ No Configuration found AppSense Application Manager cannot find a valid Error
configuration.
8096‡ Configuration Upgraded A configuration for a previous version of AppSense Error

Application Manager has been detected and upgraded.
8099‡ Invalid license AppSense Application Manager software is not Error

licensed.
9000 Denied Execution An application was denied the request to execute Warning
according to the policies of the configuration.
9001 Allowed Execution An application was allowed to execute according to the Information
policies of the configuration
9002 Overwrite Changed Owner An allowed executable was overwritten and the Warning
ownership changed to the user performing the
overwrite.
9003 Rename Changed Owner A prohibited executable was renamed and the Warning
ownership changed to the user performing the file
rename.
9004 Application Limit Denial The number of allowed instances of an executable was Warning
exceeded and the executable was prohibited from
running.
9005 Time Limits Denial An attempt was made to run an executable outside the Warning
time frame specified in the Time Limits rule and was
prohibited from running.
9006 Self-Authorization A self-authorizing user has run an executable. Warning

The event information includes the following details
about how the executable has run:
For each session, always or once.

Events
Table 25 Application Manager Events (continued)†

9007 Self-Authorization Allow A self-authorizing user has allowed an executable to Warning
run.
9095 No Configuration found AppSense Application Manager cannot find a valid Error
configuration.
9096 Configuration Upgraded A configuration for a previous version of AppSense Error

Application Manager has been detected and upgraded.
9099 Invalid license AppSense Application Manager software is not Error

licensed.
† Events are reported to the local Windows Event Log according to the Deployment Group Events settings and
also to the Management Server by the CCA, unless otherwise indicated.
‡ System event. Reported only to the local Windows Event Log.
Table 26 Environment Manager Events †
8399‡ Invalid License AppSense Environment Manager software is not Warning

licensed.
9300 Self healing process started. A process being monitored for self healing stopped and Information
has not been restarted.
9301 Self healing registry a registry key being monitored for self healing was Information
replaced. changed and has now been reset.
9302 Self healing registry A registry key being monitored for self healing was Information
removed. inserted and has now been removed.
9303 Self healing file replaced. A file being monitored for self healing was removed Information
and has now been replaced.
9304 Self healing file removed. A file being monitored for self healing was added and Information
has now been removed.
9305 Self healing service stopped. A service being monitored for self healing started and Information
has now been stopped.
9306 Self healing service started. A service being monitored for self healing stopped and Information
has now been restarted.
9400 Lockdown edit control An edit control has had a blocked drive entered into it. Information
blocked drive.

Events
Table 26 Environment Manager Events (continued)†

9401 Lockdown edit control An edit control has had blocked text entered into it. Information
blocked text.
9402 Lockdown accelerator key(s) An application has had accelerator key(s) blocked. Information
blocked.
9403 Lockdown dialog blocked. An application has had a dialog box blocked. Information
9404 Lockdown MSAA access An application has had access blocked for a control Information
blocked. using MSAA detection.
9405 User logon action success A user logon action completed successfully. Information
9406 User logon action fail A user logon action failed to complete successfully. Information
9407 User logoff action success. A user logoff action completed successfully. Information
9408 User logoff action fail A user logoff action failed to complete successfully. Information
9409 Computer startup action A computer startup action completed successfully. Information
success
9410 Computer startup action fail A computer startup action failed to complete Information
successfully.
9495 Environment Manager not AppSense Environment Manager cannot find a valid Warning
configured configuration.
9496 Unsupported configuration A configuration for a previous version of Environment Warning

detected Manager has been detected. This configuration must
be upgraded using the Environment Manager Console.
9501 Removable storage device The user has tried to access a device which has been Information
has been disabled disabled.
9502 Removable storage device The user has tried to access a device which has read- Information
has read-only access only access.
‡ System event. Reported only to the local Windows Event Log.

Events
Table 27 Performance Manager Events †

9100 User Memory Usage Amount of memory consumed by a user has exceeded Information
Warning a warning level set in a user memory limit.
9101 User memory usage warning Amount of memory consumed by a user has fallen Information
lapsed back to a safe (non-warning- level as defined in a User
Memory Limit.
9102 User memory usage blocked Amount of memory available to this user as defined in Warning
a User Memory rule has been exceeded. No more
memory allocation will be allowed.
9103 User memory usage Amount of memory consumed by a user has fallen Information
blocking lapsed back to a safe (non-blocked) level as defined in a User
memory limit.
9104 Thread Throttling Clamping Total CPU Usage has exceeded a threshold and will be Information
On clamped.
9105 Thread Throttling Clamping Total CPU Usage has fallen under a threshold and Information
Off clamping will stop.
9106 Application CPU Usage An Application has exceeded its CPU Usage limit. Information
clamping On
9107 Per Application memory Memory usage for a particular application has Information
Usage Exceeded exceeded a threshold.
9108 Per Application Memory Memory usage for a particular application has dropped Information
Usage Reduced below a threshold.
9109 Per Application Memory An application has be terminated because it used too Warning
Usage Terminated much memory.
9110 Application CPU Usage An application has now fallen below its CPU Usage Information
Clamping Off limit and will no longer be clamped.
9111 Bandwidth Quota Usage Warning threshold has been reached for the amount of Information
Warning data allowed to be transmitted via a quota rule.
9112 Bandwidth Quota Usage Amount of data allowed to be transmitted according to Information
exceeded a quota rule has been exceeded.
9113 Bandwidth Throughput Information

imposed
9114 Bandwidth Throughput Information

removed
9115 Working set trimmed Working set for an application has been trimmed. Information

Events
Table 27 Performance Manager Events (continued)†

9116 CPU Affinity changed CPU Affinity of an application has changed. Information
9117 Statistics upload successful PM successfully uploaded data to the statistics Information
collation agent.
9118 Statistics upload failed PM failed to upload data to the statistics collation Error
agent.
9119 Per Application Hard Memory usage for a particular application has reached Warning
Memory Limit Reached its maximum limit
9195 Configuration not found PM cannot find a valid configuration. Error
9196 Configuration upgraded A configuration for a previous version of AppSense Error

performance manager has been detected and
upgraded.
9197 Driver not found The AppSense Performance Manager driver could not Error
be found.
9198 Driver retry success Found the Appsense Performance manager driver on Information
second, or later attempt.
9199 Invalid license AppSense Performance Manager is not licensed. Error
9200 Application Analyzed Appsense Performance Manager is not licensed. Information
9201 Component Analyzed AppSense Performance Manager has analyzed an Information

application.
9202 Component Optimized AppSense Performance Manager has optimized a Information

component.
9203 Component failed to AppSense Performance Manager has failed to Warning

Optimize optimize a component
9299 Invalid License Optimizer software is not licensed. Error

Events
Table 28 Management Center Events †

Alert Services
9700 Action Notification Success.- Alert Rule <alert rule> dispatched a <Action type> Information
an action notification is notification successfully.
dispatched successfully.
9701 Action Notification Failure.- Alert Rule <alert rule> failed to dispatch a <action Information
an action notification fails to type> notification.
dispatch.
Management Console and Web Service
9702 Package Modified-An agent Package <name> (<version>) of type <type> was Information
or configuration was created <action>.
or deleted.
9703 User Modified.-A user was User <name> was <action>. Access rights are Information
created, modified or deleted. <Access Rights>.
9707 Events Purged. Events <Count> events were deleted from the database. Information
within the database were
purged.
Priority Communications
9704 Priority Event Failure A Machine <Machine Name> uploaded a priority event Information
priority event fails to upload but there was a problem.
to the Management Server.
9705 Event Upload Failure-Events Machine <Machine Name> tried to upload events but Information
failed to upload to the there was a problem.
Management Server.
9710 AppSense install/uninstall AppSense Agents and configurations successfully Information

successful installed/uninstalled
9711 AppSense install/uninstall AppSense Agents and configurations unsuccessfully Information

unsuccessful install/uninstall
9750‡ Connection Failure The Communications Agent failed to connect to the Information
Management Server.
9751‡ Successful Registration The Communications Agent successfully registered Information

with the Management Server.
9752‡ Successfully joined a group The communications agent successfully joined its Information
assigned group.

Events
Table 28 Management Center Events (continued)†

Watchdog
8000‡ Service Started AppSense <product> Service Started Information
8001‡ Service Stopped AppSense <product> Service Stopped Information
8501‡ Watchdog service started The service <Service Name> has been restarted. Information
8502‡ Watchdog service ended The service <Service Name> has ended unexpectedly. Information
unexpectedly This has occurred <Restart Count> times. The
watchdog will now attempt to restart the service.
8503‡ Watchdog service is The service <Service Name> has failed to restart. The Information
unrecoverable watchdog attempted 10 restarts. No further action will
be taken.
8504‡ Watchdog service The service <Service Name> has been terminated. Information
terminated This occurred because the service entered a <Service
State> state for a period of at least n seconds.
9090 Service Ended The service <service name> has ended unexpectedly. Information
Unexpectedly.-Generated This has occurred <service restart count> times. The
when service ends watchdog will now attempt to restart the service.
unexpectedly.
9091 Service Restarted Service <Service Name> restarted. Information

(Application Manager). -
Generated when service
restarts.
9092 Service Terminated The Service <Service Name> has been terminated. Information
(Application Manager). - This occurred because the service entered a <Service
Generated when service is State> state for a period of at least <Poll Time>
terminated due to being in seconds.
the starting or stopping state
for a prolonged period.
9093 Service Unrecoverable The service <Service Name> has not been restarted. Information
(Application Manager). - The watchdog attempted <Restart Count> restarts. No
Generated when service has further action will be taken.
exceeded restart attempts.
9190 Service Ended Unexpectedly The service <service name> has ended unexpectedly. Information
(Performance Manager). - This has occurred <service restart count> times. The
Generated when service watchdog will now attempt to restart the service.
ends unexpectedly.

(Performance Manager). -
restarts.

Events
Table 28 Management Center Events (continued)†

(Performance Manager) - This occurred because the service enetered a <Service
(Performance Manager). - The watchdog attempted <Restart Count> restarts. No
9390 Service Ended Unexpectedly The service <service name> has ended unexpectedly. Information
(Environment Manager).- This has occurred <service restart count> times. The
Generated when service watchdog will now attempt to restart the service.
ends unexpectedly.

(Environment Manager). -
restarts.
(Environment Manager). This occurred because the service enetered a <Service
(Environment Manager). The watchdog attempted <Restart Count> restarts. No
‡ System events. Reported only to the local Windows Event Log.


App Sense Management Center Administrator Guide

Enviado por

Dados do documento

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

App Sense Management Center Administrator Guide

Enviado por

Direitos autorais:

Formatos disponíveis

| Management Center

Document Version: APMS70-12-110107-1

AppSense Management Center Administrator Guide page 2

About this Guide .......................................................................................................................................... 6

AppSense Management Center Administrator Guide page 3

AppSense Management Center Administrator Guide page 4

Figure 1 Management Center Architecture 8

AppSense Management Center Administrator Guide page 5

About this Guide

Terms and Conventions

Table 1 Document Conventions

Code Used for scripting samples and code strings.

> Indicates the path of a menu option. For example,

Note — Highlights important points of the main text or provides supplementary

Caution/Warning — Provides critical information relating to specific tasks or indicates

Procedure — Indicates a series of steps for performing a task.

AppSense Management Center Administrator Guide page 6

AppSense Management Center Administrator Guide page 7

Management Center Architecture

Figure 1 Management Center Architecture

AppSense Management Center Administrator Guide page 8

The Management Console

The Management Server

AppSense Management Center Administrator Guide page 9

The Product Consoles

The Managed Computers

AppSense Management Center Administrator Guide page 10

Connectivity and Accounts

Supported Database Servers

AppSense Management Center Administrator Guide page 11

Microsoft .NET Framework 2.0.

Requirements for SSL Communications

AppSense Management Center Administrator Guide page 12

Client Communications Agent

Supported Operating Systems

Microsoft Internet Explorer 6.0

AppSense Management Center Administrator Guide page 13

Figure 2 AppSense Management Center Security Model

AppSense Management Center Administrator Guide page 14

Authentication and Authorization

Securing Communications using SSL

AppSense Management Center Administrator Guide page 15

Management Center Workflow

Figure 3 Management Center Workflow

AppSense Management Center Administrator Guide page 16

Step 1 Connect to the Server

Figure 4 Connecting to the Management Server

The server supports only one Management Console connection at a time.

Step 2 Set Up User Accounts

Figure 5 Setting up user accounts

AppSense Management Center Administrator Guide page 17

Step 3 Install Packages

Figure 6 Setting up packages

AppSense Management Center Administrator Guide page 18

Step 4 Create Deployment Groups

Figure 7 Setting up deployment groups

Polling periods and local event logging

AppSense Management Center Administrator Guide page 19

Step 5 Set Up Alert Rules

Figure 8 Setting up alert rules

Step 6 Install the CCA on Managed Computers

AppSense Management Center Administrator Guide page 20

Product Consoles Fail to Connect to a Secure Management Server

AppSense Management Center Administrator Guide page 21