Configuration Control

Is there a way to “force” avast client config? (remotely configuring avast4.ini from the console for all machines)

Too bad you didn’t mention what version of Avast. That will make a lot of difference. But in the mean time have a look at http://www.avast.com/i_idt_168.html#3

That will certainly be capable of doing so, if I understand it correctly.

i supposed so… i am running that beta, but apart from the resident protection policy it seems that’s not possible to force avast4 settings… updating etc…

Like it doesn’t work or you don’t know how to set it?
What options would you like to set, exactly?

The avast “policies” are set as properties of the groups in the Computer Catalog (including the root folder).

ok, there we go! i didn’t know where to find it… :slight_smile:

Network Managere seems to be running fine enough so far (apart from the minor annoyances i told in other posts)

great job!!

Thanks, it still needs some work but with the help of beta-testers like you it should now be fairly easy…

BTW how many computers do you have in the catalog right now? Just the Genoa office? And how many computers would that be if you managed to get there all the offices (as far as Lecce and the Sicilia branch)? :slight_smile:

Do you have WinXP everywhere or other OS’s as well? Does each branch have its own domain? And how are those connected - just via the Internet?

alright:
so far i have only the genoa branch computers in catalog (about 30), i would like to deploy to every branch office (Sicilia, Rome, Milan etc…) if i suppose all branches and one other genoa subnetwork that would close 100 pcs… I have 80% winXP , the remaining rest is win98 (which is giving me some problems with the service right now), some linux pcs (mine :smiley: ) and 2 win2k servers… and 5 linux (MDK) servers… the branches are connected via the internet, and Rome branch only has a domain server.

So all the machines are in the same NT domain? Or any of them are actually out of the domain (i.e. in a workgroup)?

avast should work OK on the W98 machines but you can’t use the deployment task on them – it only works on NT-based OS’s.

yes, i had read that, no prob, i created a silent install and seems to be working fine! :slight_smile: all machines in genoa are in the same domain, apart one workgroup (20 PCs on the 50 here), the others are away and not connecting to our local domain server, but all branches have broadband… so… i’ll try VERY remote deployment… :smiley:

So you have those connected via VPN?

I.e. are they available via “Network Neighbourhood” (i.e. NetBios)?

Not yet, VPN is scheduled to be implemented genoa-rome in july, and just a thought for the other smaller branches… i might as well try to speed that up anyways…

OK, that means the following:

  • you’ll probably not be able to use a deployment task for remote installation on those non-Genoa machines. As they’re not in the network neighbourhood, there’s no way for AMS to push the installation packages onto them

  • remote administration should work, though. Of course, provided that the AMS in Genoa is directly addressable from the Internet (i.e. has a public IP address or there’s a NAT firewall with a fixed IP address that is configured so that it’s forwarding all traffic on ports 6000,6002,6011,5033 onto the AMS).

  • it would be worth puting the remote machines to a different group in the Computer Catalog and make the POP interval from the AMS and the entropy a bit higher - to prevent congestion of the Internet connection in the branch offices.

exactly how i did & suppose it could have worked… everything is fine but… it cannot update…

20/05/2004 10.10.12 1085040612 HP27372415262\Administrator 3064 Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7.
20/05/2004 10.12.13 1085040733 HP27372415262\Administrator 3064 Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7.
20/05/2004 10.13.22 1085040802 HP27372415262\Administrator 3064 Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7.
20/05/2004 10.13.45 1085040825 NT AUTHORITY\SYSTEM 468 Function setifaceUpdatePackages() has failed. Return code is 0x2000000A, dwRes is 2000000A.
20/05/2004 10.13.45 1085040825 NT AUTHORITY\SYSTEM 468 An error has occured while attempting to update. Please check the logs.

What do you think?

firewall is configured as u told, connection works because i see the pc in Bologna in his group… the only thing not working seems the update…

Can you get me the file \setup\setup.log from that machine in Bologna? It would be worth inspecting to see what exactly is failing…

Anyway it might even be worth trying to have a special mirror at each site… - otherwise, all the machines would be downloading updates from Genoa which may not be the best choice…

yes, i suppose so… but bologna (for instance) is a 2 pcs branch… i don’t know if it would be worth creating a mirror there… considered we have 10Mbits broadband it’s not much of a problem! i’ll get the log!

You’re right, it’s probably stupid to have a mirror for 2 machines…

But maybe the Roma or other place – if there’s 20+ machines, it may be worth doing (and it’d be helpful for us to test the 2nd level mirrors, too :)).

Looking forward to seeing the log.

Ciao
Vlk

that pc is fine now… after another reboot all seems fine and updating works… but now my console crashes when looking into AEB computer group see the log…

another 1

Could you please try replacing the asaAdmin.exe (the admin. console main exe) with the one here: http://cat.asw.cz/~vlk/asaAdmin.zip – and also make sure to put there the pdb (the symbols file) - to the same folder (“program files\alwil software\management tools” by default).

Then re-invoke the crash – now the crash report should show more info (better stack trace etc…).

Thanks
Vlk

tryed to… but now it just hangs indefinitely…