Wiki source code of Agentenplaner

Last modified by Jannis Klein on 2024/08/13 07:31

Show last authors
1 {{aagon.priorisierung}}
2 80
3 {{/aagon.priorisierung}}
4
5 {{aagon.floatingbox/}}
6
7 The Agent Tasks configure all the scanning and maintenance options for working on the ACMP Clients. Here you can define the intervals at which the scanners should run. You can also change the start conditions and enable/disable settings. The Client Actions can also be used to push individual scanners to the Agent independently of the selected start interval.
8
9 It is possible to create almost any number of Agent scheduler templates with their own start conditions for groups of computers.
10
11 {{figure}}
12 (% style="text-align:center" %)
13 [[image:63_ClientManagement_Agentenplaner1351.png]]
14
15 {{figureCaption}}
16 Agent Tasks
17 {{/figureCaption}}
18 {{/figure}}
19
20 The Agent Scheduler is divided into two sections, Agent Tasks and Maintenance. The Agent Tasks section contains the scanners that read information from the Clients. The Maintenance section contains the scanners that enable Agent configurations. If you have many Clients in use, the settings in the Agent Tasks section are particularly important to avoid overloading the ACMP Server.
21
22 {{aagon.infobox}}
23 The scanners run serially and can only be run one after the other, not simultaneously. Take this into account when working as it may cause delays in execution.
24 {{/aagon.infobox}}
25
26 |**Agent Tasks**|**Description**|**Special Features**
27 |Defender Scanner|(((
28 Collects Microsoft Defender scan results and status information.
29
30 Examples:
31 - Quarantine information
32 - Signature version and signature age
33 - Event log items of Defender
34 )))|The Defender Scanner collects various info about the installed Windows Defender. The Defender Scanner is activated when you go through and exit the First Step Wizard of Defender Management. In addition, you can configure which Event types are to be inventoried. By default, "Information" is disabled because the database would otherwise grow unnecessarily due to the many event messages.
35 |File Scanner|(((
36 Searches your Clients for files
37
38 File types:
39 - .exe
40 - .dll
41 - .sys
42 - .jar
43 )))|With the file scanner it is possible to read out software on the Clients that has not been installed in the classical way (e.g. in-house developments). You can then use this, for example, in License Management. You will find configuration options for this under the [[settings>>doc:ACMP.64.ACMP-Solutions.System.Einstellungen.ACMP Agent.WebHome||anchor="HACMPTask"]].
44 |Hyper-V Scanner|Scans your Clients for Hyper-V Guests|With the help of the scanner, the guests are read from the Hyper-V host. The difference criterion for unique identification can be made in the settings (Verlinkung). In addition, guests can be excluded via a block list.
45 |Managed Software Scanner|Scans your Clients for Managed Software|The Managed Software Scanner scans the Managed Software installed on the Client. With the scan function, the ACMP Server determines a possible deficit between the installed version and the available version that the Client has installed.
46 |Rule Scanner|Checks the rules assigned to the Clients|You can use the Rule Scanner to find specific files, registry keys and values on the Client. Please note that a search of an entire drive may take a long time for the scanner to complete.
47 |Security Scanner|Scans the Windows Security Center|The data of the Windows Security Center ("Windows Security") is read out and passed on to ACMP. Here you can display the info as to whether the settings, parameters and antivirus solutions are still up to date.
48 |Software Scanner|Scans MSI / setup software and store apps and, if required, user-specific software|The scanner reads out the installed software listed under "Control Panel and Programs". The scan function gives you exact details about what software is installed on the Clients. You can specify under the [[settings >>doc:ACMP.64.ACMP-Solutions.System.Einstellungen.ACMP Agent.WebHome||anchor="HACMPTask"]]which items are to be ignored by the software scanner. User-specific software can also be read out. Note that Updates and System Components are disabled by default, as this would cause many items to be read out for the Clients.
49 |System Scanner|(((
50 Scans hardware information of the machine.
51
52 Examples:
53 - Computer name
54 - Computer domain
55 - Hard disk allocation
56 - Network cards
57 )))|This is relevant, for example, if you change the computer name during operation and it has not yet been updated in ACMP. The new name would only be recorded and displayed after the computer scanner has run through.
58 |Vulnerability Scanner|Scans the Client for existing vulnerabilities|The vulnerability scanner updates the vulnerability definition file. The file is used to check whether vulnerabilities exist on the Client.
59 |Windows Updates Scanner|Scans already installed and pending Windows Updates of the machine|The Windows Update Scanner scans the Clients for already installed and pending Windows Updates.
60 |**Maintenance**| |
61 |ACMP Agent Update/installation time frame|Agents are allowed to install ACMP Updates during this time window.|The time window can be used to configure when an Update can be installed for the Agent.
62 | | |
63
64 {{aagon.infobox}}
65 We recommend that you do not change this setting, as the default setting guarantees a 24/7 update/installation window and an incorrect configuration may prevent an update and thus disrupt the communication between the ACMP Server and the ACMP Agent. Please note that the Agent update can also be performed during normal business hours without any problems.
66 {{/aagon.infobox}}
67
68 |Restart ACMP Agent|Restarts the ACMP Agent|This maintenance option allows you to restart the ACMP client service. Also note that this job triggers the start condition "ACMP Agent Start".
69 |Settings Watch|Updates the Client Task Settings for the Client|Updates the scan intervals of the Agent Tasks and the file repositories. If you change the conditions of the scanners in the Agent Tasks (e.g. the conditions of a point in time), the settings are updated after the defined interval.
70 |Update Defender Configuration Profiles|Sets the settings of the Defender Configuration on the Clients and updates them if necessary.|The Defender Scanner applies or updates the configurations according to assigned configuration profiles.
71 |Update Jobs & Configuration Profiles|(((
72 Queries the ACMP Server for the Jobs unassigned to it.
73
74 Examples:
75 - Container Jobs
76 - Pending pushed Jobs
77 )))|During the execution of the Job Scanner, all Jobs assigned to the Client and pending are determined. This includes the Jobs that have been linked via a container, but also those that have been pushed to the Client but not yet received. For Clients that are in the home office and cannot be reached by the ACMP Server, we recommend using a short interval. This enables prompt execution of pushed Jobs.
78
79 In front of each setting you can see whether it is an active task ([[image:image-20220519131909-1.png]]) or an inactive task ([[image:grafik.png]]).
80
81 ACMP comes with a default template. If you do not assign a custom template via the container, the default template will be used. You can create and configure as many templates as you like; the assignments to Clients are made via the Containers. You can also create Client-specific templates that are based on individual Agent Scheduler templates for a single Client. For example, you can use different templates to map the settings and requirements of mobile devices and fixed workspaces on the local network.
82
83 To switch between different templates, you can use the pull-down menu and select the required template.
84
85 = Manage templaes =
86
87 The ribbon bar allows you to add ([[image:image-20220519131940-3.png]]), rename ([[image:clock-edit.png||alt="grafik.png" height="16" width="16"]]) or delete ([[image:image-20220519131940-5.png||height="16" width="16"]]) templates. Settings can be taken from a template to be selected.
88
89 {{figure}}
90 (% style="text-align:center" %)
91 [[image:ACMP_63_Agentenplaner_Vorlage_erstellen_%971.PNG]]
92
93 {{figureCaption}}
94 Create a new template
95 {{/figureCaption}}
96 {{/figure}}
97
98
99 == Configururing templates ==
100
101 If you want to change the settings of the different start conditions in the Agent Tasks, double-click on the desired job and a dialogue window opens.
102
103 {{figure}}
104 (% style="text-align:center" %)
105 [[image:ACMP_63_Agentenplaner_Einstellungen_ändern_%820.PNG]]
106
107 {{figureCaption}}
108 Start condition
109 {{/figureCaption}}
110 {{/figure}}
111
112 = Start conditions =
113
114 First specify whether the task should be active or inactive. Check the //Activated// checkbox if you want to change the start conditions.
115
116 In addition to the activated start conditions, you can also define the network connection options. Using the network connection options, you can also define whether the scanner should take metered connections into account and therefore not start the scanner. Next, find the start condition you want the scanner or maintenance to follow.
117
118 The start conditions specify when the job is to be executed. For some conditions you can specify specific dates, for others you can define the specific actions while working on the service.
119
120 Recurring elements:
121
122 * **Execute only within the time window**: Here you can define a self-specified time window in which the task is to be carried out. The time window allows you to specify both hours and minutes.
123
124 {{aagon.versionierungsbox}}
125 Please note that the checkbox "Execute once" is no longer available in ACMP from version 6.3.
126 {{/aagon.versionierungsbox}}
127
128 |**Start condition**|**Explanation**
129 |ACMP Agent start|(((
130 - Executions are executed when the ACMP Agent is started (manually via service management or restarting the machine).
131
132 - The condition is also executed via the maintenance option "Restart ACMP Agent".
133
134 * - Example: The computer is restarted.
135 )))
136 |As soon as possible|(((
137 - With the settings, the task is executed as soon as possible.
138
139 - Note that this start condition implies a single execution!
140 )))
141 |Date interval|(((
142 - Dynamically calculated times can be defined during execution.
143
144 * - Example: The first day of the month.
145 )))
146 |Day of month|- The condition is executed on all the days you specify in the month. Executions are only executed in months with the selected days.
147 |Day of week|- Executions are started when you specify one or more days of the week. In addition, there is the option that every nth day of a month should be taken into account.
148 |Last day of every month (deprecated)|(((
149 - The scanner is executed on the last day of each month.
150
151 * - Please note that this is a deprecated start condition. We recommend that you use the "Date interval" setting instead.
152 )))
153 |Login|(((
154 - The condition is executed as soon as a user logs on to the system or terminal server.
155
156 * - Example: The user logs on to the computer.
157 )))
158 |Shut down|(((
159 - The start condition is executed when the Client is shut down. For this purpose, the user is first logged off and only then are the Jobs executed.
160
161 * - Special feature: Commands that run in the user context are not executed (e.g. all commands of the category Dialogs, as well as Lock manual input, Unlock manual input, Get idle time, Lock workstation, Get/Set default printer and If user is (not) in group).
162 )))
163 |Specific date|- You can only run the scanner on a specific date by specifying a date.
164 |Specific time|- The condition is executed daily at a specific time that you can set.
165 |Start interval|(((
166 - Within the start condition you can define an interval (minutes, hours, days) when the task should always start.
167
168 - Note that the start behavior of random time windows is only available with the interval setting "days".
169 )))
170 |Start time|- Executions begin with the start date, which you can specify. You can also specify a finish date, which means that there is no automatic refresh of the data when the date is reached.
171 |Time frame|- A specific time slot with a start and end time can be set.
172
173 Finally, save your changes so that the scanners or maintenance tasks can start under the new start conditions. Note that the start conditions are updated on the Client when the scanner has run through "Update settings".
174
175 == Special behaviour of the start conditions ==
176
177 {{aagon.infobox}}
178 Please note a special behaviour for the "Time Window" option. If you use this in combination with the start conditions "Day of week", "Day of month" or "Specific date" and the time window extends beyond one day (e.g. 22:00 - 02:00), the Client Task would only be executed on this specific date. This also applies if the time window still extends into the next day. Therefore, always check the date first and only then the time window. For example, if you want to execute a scanner only in the evening, it would run until 23:59, but not until the actual end of the specified time window.
179 {{/aagon.infobox}}
180
181 {{aagon.infobox}}
182 In the start conditions "Start interval" and "Time frame" there is the option "Start at a random time within the time window". We recommend that you use this start condition. This ensures that the scan data is sent to the Server at a staggered time. If many scan data are sent at the same time, the import may only be carried out with a time delay.
183 {{/aagon.infobox}}
184
185
186 = Assigning an Agent Scheduler template from a Container =
187
188 If you have already created a container, you can also assign an Agent Scheduler template to it from the details view. You can find the currently assigned Agent Scheduler template via the //Agent Tasks// category of the same name. This can be changed using either the ribbon buttons or the context menu.
189
190 Note that priority determines which template is used by the Client. If the Client is in more than one Container, the template from the Container with the highest priority will always be used. This has to be taken into account when assigning and, if necessary, adjusted in the priority of the container.
191
192 {{figure}}
193 (% style="text-align:center" %)
194 [[image:ACMP_63_Agentenplaner_Container_%.PNG]]
195
196 {{figureCaption}}
197 Unassigned Agent Planner Template
198 {{/figureCaption}}
199 {{/figure}}
200
201 {{aagon.infobox}}
202 When Multi-Tenancy is enabled, the Global Containers have a higher weighting than the Client Containers.
203 {{/aagon.infobox}}
204
205 = Individual Agent Planer Template via the Client Details =
206
207 Via the Client Details, you can enable an individual agent template that specifically applies only to the selected Client. The template has the highest priority and takes effect before assignments via containers. Navigate to the //Software// > //Computer// > //Agent// //Tasks// menu item under the Client Details and check the Enable //Client-Specific Template// checkbox to make individual changes to the template.
208
209 Once you have enabled the template and configured it appropriately, save the changes and the agent will reflect the custom agent scheduler template after the "Update Settings" scanner is executed.
210
211 {{figure}}
212 (% style="text-align:center" %)
213 [[image:ACMP_63_Agentenplaner_Client_Details_%.PNG]]
214
215 {{figureCaption}}
216 Client specific template
217 {{/figureCaption}}
218 {{/figure}}
219
220 = Ability to check Executions =
221
222 Using the "ACMP Agent Statuses" Query, you can check when a scanner last ran and whether the inventoried data has been updated.
223
224 {{figure}}
225 (% style="text-align:center" %)
226 [[image:ACMP Agent Statuses.PNG]]
227
228 {{figureCaption}}
229 ACMP Agent Statuses
230 {{/figureCaption}}
231 {{/figure}}
232
233 = Customize System Settings for Agent Tasks =
234
235 In the System Settings you can adjust the settings for the software and file scanner for the Agent Tasks. To do this, navigate in the ACMP Console to //System// > //Settings// > //ACMP// //Agent// > //Agent// //Task//.
236
237 {{figure}}
238 (% style="text-align:center" %)
239 [[image:63_SystemEinstellungen_ACMPTask_Scanner_748.png]]
240
241 {{figureCaption}}
242 Scanner settings
243 {{/figureCaption}}
244 {{/figure}}
245
246 {{aagon.infobox}}
247 Please note that Updates and System Components create many items in the database. Unless this information is needed, we recommend that you leave the default configurations set.
248 {{/aagon.infobox}}
249
250 {{aagon.infobox}}
251 You can customize the hard disk usage to allow the computer to continue working during the scan.
252 {{/aagon.infobox}}
© Aagon GmbH 2025
Besuchen Sie unsere neue Aagon-Community