Agent Tasks

Last modified by jklein on 2025/07/24 09:21

The Agent Tasks configure all the scanning and maintenance options for working on the ACMP Clients. Here you can define the intervals at which the scanners should run. You can also change the start conditions and enable/disable settings. The Client Actions can also be used to push individual scanners to the Agent independently of the selected start interval.

It is possible to create almost any number of Agent scheduler templates with their own start conditions for groups of computers.

“Overview

Overview of Agent Tasks

The Agent Tasks templates are divided into two areas: the Agent Tasks area and the Maintenance area. The Agent Tasks area lists the scanners that read the information on the client. The Maintenance area lists the scanners that enable the agent configurations. If you have many Clients in use, the settings in the Agent Tasks are particularly relevant to prevent possible overloading of the ACMP Server.

Hinweis  Note:  

The scanners run serially and can therefore only be executed one after the other and not simultaneously. Please take this into account during your work, as it may cause delays in execution.

Scanners and configuration profiles

Depending on the operating system family, different scanners and configuration profiles are available in the various agent planner templates. If you do not assign a template you have created yourself via the containers, the standard templates will be used. You can create and configure as many templates as you like; they are assigned to clients via the containers. You can also create client-specific templates that refer back to individual agent planner templates for a single client. Using different templates, you can, for example, map the settings and requirements of mobile devices and fixed workstations in the local network.

Before making the respective settings, you can see whether it is an active task (image-20220519131909-1.png) or an inactive task (grafik.png).

Default - Windows

Agent TasksDescriptionSpecial features
File ScannerSearches your Clients for files

File types:
- .exe
- .dll
- .sys
- .jar

With the file scanner, it is possible to read software on the clients that has not been installed in the traditional way (e.g., in-house developments). You can then use these in License Management, for example. You can find configuration options for this under Settings.
Defender ScannerCollects Microsoft Defender scan results and status information

Examples:
- Quarantine information
- Signature version and signature age
- Event log entries of Defender
The Defender Scanner collects various information about the installed Windows Defender. The Defender Scanner is activated when you go through and exit the First Step Wizard from Defender Management. In addition, you can configure which event types are to be inventoried. By default, “Information” is disabled, as the database would otherwise grow unnecessarily due to the large number of event messages.
Hyper-V ScannerScans your Clients for Hyper-V guestsThe scanner reads the guests from the Hyper-V host. The distinguishing criterion for unique identification can be set in the Settings menu. Guests can also be excluded via a block list.
Managed Software ScannerScans your Clients for Managed SoftwareThe Managed Software Scanner scans the Managed Software installed on the Client. With the scan function, the ACMP Server determines a possible deficit between the installed and available version that the Client has installed.
Rule ScannerChecks the rules assigned to the ClientsWith the Rule Scanner, you can find specific files, registry keys, and values on the Client. Please note that searching an entire drive may result in a long execution time for the scanner.
Vulnerability ScannerScans the client for existing vulnerabilitiesThe Vulnerability Scanner ensures that the vulnerability definition file is updated. The file is used to check whether vulnerabilities exist on the client.
Security ScannerScans the Windows Security CenterThe data from the Windows Security Center (“Windows Security”) is read and forwarded to ACMP. Here you can display information on whether the settings, parameters, and antivirus solutions are still up to date.
Software ScannerScans MSI / Setup software and Store apps and, if necessary, user-specific softwareThe scanner reads the installed software listed under “Control Panel and Programs”. The scan function provides you with detailed information about the software installed on the Clients. Under Settings you can specify which elements should be ignored by the software scanner. User-specific software can also be read. Please note that Updates and System components are disabled by default, as this would result in many entries being read for the client.
System ScannerScans hardware information of the machine

Examples:
- Computer name
- Computer domain
- Hard disk usage
- Network cards
- Operating system and BitLocker information
This is relevant, for example, if you need to change the computer name during operation and it has not yet been updated in ACMP. The new name would only be recorded and displayed after the system scanner has run.
Windows Updates ScannerScans the machine for already installed and pending Windows UpdatesThe Windows Update Scanner scans the Clients for already installed and pending Windows Updates.
Maintenance  
Defender Configuration watchSets the settings of the Defender configuration on the client and updates them if necessaryThe Defender Scanner applies the configurations according to the assigned configuration profile or updates them.
Update Jobs & Configuration ProfilesQueries the ACMP Server for the jobs assigned to it

Examples:
- Container jobs
- Pending pushed jobs
During execution, all jobs assigned to the client and pending jobs are determined. This includes jobs that have been linked via a container, but also those that have been pushed to the client but not yet received. For clients that are in the home office and cannot be reached by the ACMP Server, we recommend using a short interval. This enables timely execution of pushed jobs. BitLocker configurations are also updated.

Default - Unix

Agent TasksDescriptionSpecial features
Software ScannerScans Unix applicationsThe scanner reads the installed software. The scan function provides you with detailed information about the software installed on the clients.
System ScannerScans the operating system and hardware information of the machine (e.g., computer name, domain, hard disk usage, network cards, operating system information)This is relevant, for example, if you need to change the computer name during operation and it has not yet been updated in ACMP. The new name would only be recorded and displayed after the system scanner has run.
Maintenance  
Job ScannerCollects information about linked and  jobs that are still to be executed. Also executed when the agent starts. 

Manage templates

The ribbon bar allows you to add templates (image-20220519131940-3.png), rename them (“grafik.png”) or delete them (image-20220519131940-5.png). In the second step, the settings can be transferred from an existing template. You can customize these settings.

Start conditions

If you want to change the start conditions of a scanner in the Agent Tasks, double-click on the desired scan job and a dialog window will open.

Hinweis  Note:  

There are currently fewer start conditions available for scan and maintenance jobs for the Unix operating system family than for the Windows operating system family.

“Start

Start conditions Windows operating system family

“Start

Start conditions for the Unix operating system family

First, specify whether the task should be active or inactive. Select the Enabled checkbox if you want to change the start conditions.

In addition to the activated start conditions, you can also define the network connection options. The network connection options also allow you to specify whether the scanner takes metered connections into account and therefore does not start the scanner. Then find the desired start condition according to which the scanner or maintenance should be performed.

The start conditions specify when the job should be executed. For some conditions, you can specify specific dates, while for others you can define specific actions to be performed while working on the service.

Recurring elements:

  • Execute only within the time window: Here you can specify a time window in which the task should be executed. The time window can be specified in hours and minutes.

Version note  Version note:  

Please note that the “Execute once” checkbox is no longer available in ACMP version 6.3 and higher.

Start conditionExplanation
LoginThe condition is executed as soon as a user logs on to the system or terminal server.
  • Example: The user logs on to the computer.
Specific timeThe condition is executed daily at a specific time that you can specify.
Specific dateYou can only run the scanner on a specific date by specifying a date.
Date intervalDynamically calculated times can be defined during execution.
  • Example: The first day of the month.
ShutdownThe start condition is executed when the client is shut down. To do this, the user is first logged off and only then are the jobs executed.
  • Special feature: Commands that run in the user context are not executed (e.g., all commands in the Dialog category, as well as Lock manual input, Unlock manual input, Get idle time, Lock workstation, Get/Set default printer, and If user is (not) in group).
Last day of each month (deprecated)The scanner is executed on the last day of each month.

Hinweis  Note:  

This is a deprecated start condition. We recommend that you use the “Date interval” setting instead.

As soon as possibleWith this setting, the task is executed as soon as possible.

Hinweis  Note:  

This start condition implies a one-time execution!

Start of agentThe execution is performed when the agent starts (manually via the service management or by restarting the machine).
  • Example: The computer is restarted.
Start timeExecution begins at the start time you specify. You can also specify a finish date, which means that the data will not be automatically refreshed when that date is reached.
Start intervalWithin the start condition, you can define an interval (minutes, hours, days) at which the task should always start. 

Hinweis  Note:  

The start behavior of random time windows is only available for the interval setting “Days”.

Day of the weekExecution starts when you specify one or more days of the week. There is also the option of including every nth day of a month.
Day of the monthThe condition is executed on all days of the month that you specify. The execution is only carried out in months with the selected days.
Time windowA specific time window with a start and end time can be specified.

Finally, save your changes so that the scanners or maintenance tasks can start under the new start conditions.

Special behavior of the start conditions

Hinweis  Note:  

Please note a special behavior for the “Time window” option. If you use this in combination with the start conditions “Day of the week,” “Day of the month,” or “Specific date” and the time window extends beyond one day (e.g., 10:00 p.m. – 2:00 a.m.), the client task would only be executed on that specific date. This also applies if the time window extends into the next day. Therefore, always check the date first and then the time window. For example, if you only want to execute a scanner in the evening, it would run until 11:59 p.m., but not until the actual end of the specified time window.

Hinweis  Note:  

In the start conditions “Start interval” and “Time window,” there is the option “Start at a random time within the time window.” We recommend that you use this start condition. This ensures that the scan data is sent to the server at different times. If a large amount of scan data is sent at the same time, the import may be delayed.

Assigning an agent planner template via containers

If you have already created a container, you can also assign an agent planner template to it via the detail view. You can find the currently assigned agent planner template in the category of the same name Agent Tasks. This can be changed either via the buttons in the ribbon bar or the context menu.

Depending on which operating system family the container is assigned to, only agent scheduler templates with the same operating system family can be linked. Also note that the priority determines which template is used by the client. If the client is located in multiple containers, the template from the container with the highest priority is always used. This must be taken into account during assignment and, if necessary, customized in the priority of the container.

“Linking

Linking an agent planner template in a container

Hinweis  Note:  

When multi tenancy is enabled, global containers have a higher weighting than client containers.

Individual agent scheduler template via the Client Details

Via the Client Details, you can enable an individual agent template that applies specifically to the selected client. The template has the highest priority and takes precedence over assignments via containers. Navigate to the menu item Software > Computers > Agent Tasks in the Client Details and select the Enable client-specific template checkbox to make individual changes to the template.

Once you have activated and configured the template, save the changes and the agent will be taken into account during the next update.

“Use

Use client-specific agent scheduler template

Option to check execution

Using the supplied query ACMP Agent Statuses, you can check when a scanner last ran and whether the inventoried data has been updated. To do this, click on the small arrow displayed to the left of the client name in the results list of the executed query. This opens the detailed view of the scanner data.

“Check

Check execution of scanner jobs

Customize system settings for the Agent Tasks

In the system settings, you can configure the settings for the software and file scanner for the Agent Tasks. To do this, navigate to System > Settings > ACMP Agent > Agent Task in the ACMP Console.

“Settings

Settings for software and file scanners 

Hinweis  Note:  

Please note that updates and system components generate many entries in the database. If this information is not required, we recommend that you leave the default settings unchanged.
 

Hinweis  Note:  

You can customize the hard disk usage so that you can continue working on the computer during the scan.

© Aagon GmbH 2025
Besuchen Sie unsere Aagon-Community