Symantec ALTIRIS CLIENT MANAGEMENT SUITE 7.0 SP2 -... User manual

Altiris Inventory Solution™
from Symantec User Guide
Version 7.0 SP2

Altiris Inventory Solution™from Symantec User Guide
The software described in this book is furnished under a license agreement and may be used
only in accordance with the terms of the agreement.
Documentation version 7.0 SP2
Legal Notice
Copyright © 2009 Symantec Corporation. All rights reserved.
Symantec, the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the
product are trademarks or registered trademarks of Symantec Corporation or its affiliates
in the U.S. and other countries. Other names may be trademarks of their respective owners.
The product described in this document is distributed under licenses restricting its use,
copying, distribution, and decompilation/reverse engineering. No part of this document
may be reproduced in any form by any means without prior written authorization of
Symantec Corporation and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS,
REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO
BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL
OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING,
PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED
IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in
Commercial Computer Software or Commercial Computer Software Documentation", as
applicable, and any successor regulations. Any use, modification, reproduction release,
performance, display or disclosure of the Licensed Software and Documentation by the U.S.
Government shall be solely in accordance with the terms of this Agreement.

Symantec Corporation
20330 Stevens Creek Blvd.
Cupertino, CA 95014
http://www.symantec.com

Technical Support
Symantec Technical Support maintains support centers globally. Technical
Support’s primary role is to respond to specific queries about product features
and functionality. The Technical Support group also creates content for our online
Knowledge Base. The Technical Support group works collaboratively with the
other functional areas within Symantec to answer your questions in a timely
fashion. For example, the Technical Support group works with Product Engineering
and Symantec Security Response to provide alerting services and virus definition
updates.
Symantec’s maintenance offerings include the following:
■A range of support options that give you the flexibility to select the right
amount of service for any size organization
■Telephone and Web-based support that provides rapid response and
up-to-the-minute information
■Upgrade assurance that delivers automatic software upgrade protection
■Global support that is available 24 hours a day, 7 days a week
■Advanced features, including Account Management Services
For information about Symantec’s Maintenance Programs, you can visit our Web
site at the following URL:
www.symantec.com/techsupp/
Contacting Technical Support
Customers with a current maintenance agreement may access Technical Support
information at the following URL:
www.symantec.com/techsupp/
Before contacting Technical Support, make sure you have satisfied the system
requirements that are listed in your product documentation. Also, you should be
at the computer on which the problem occurred, in case it is necessary to replicate
the problem.
When you contact Technical Support, please have the following information
available:
■Product release level
■Hardware information
■Available memory, disk space, and NIC information
■Operating system

■Version and patch level
■Network topology
■Router, gateway, and IP address information
■Problem description:
■Error messages and log files
■Troubleshooting that was performed before contacting Symantec
■Recent software configuration changes and network changes
Licensing and registration
If your Symantec product requires registration or a license key, access our technical
support Web page at the following URL:
www.symantec.com/techsupp/
Customer service
Customer service information is available at the following URL:
www.symantec.com/techsupp/
Customer Service is available to assist with the following types of issues:
■Questions regarding product licensing or serialization
■Product registration updates, such as address or name changes
■General product information (features, language availability, local dealers)
■Latest information about product updates and upgrades
■Information about upgrade assurance and maintenance contracts
■Information about the Symantec Buying Programs
■Advice about Symantec's technical support options
■Nontechnical presales questions
■Issues that are related to CD-ROMs or manuals

Maintenance agreement resources
If you want to contact Symantec regarding an existing maintenance agreement,
please contact the maintenance agreement administration team for your region
as follows:
[email protected]Asia-Pacific and Japan
[email protected]Europe, Middle-East, and Africa
[email protected]North America and Latin America
Additional enterprise services
Symantec offers a comprehensive set of services that allow you to maximize your
investment in Symantec products and to develop your knowledge, expertise, and
global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
These solutions provide early warning of cyber attacks, comprehensive threat
analysis, and countermeasures to prevent attacks before they occur.
Symantec Early Warning Solutions
These services remove the burden of managing and monitoring security devices
and events, ensuring rapid response to real threats.
Managed Security Services
Symantec Consulting Services provide on-site technical expertise from
Symantec and its trusted partners. Symantec Consulting Services offer a variety
of prepackaged and customizable options that include assessment, design,
implementation, monitoring, and management capabilities. Each is focused on
establishing and maintaining the integrity and availability of your IT resources.
Consulting Services
Educational Services provide a full array of technical training, security
education, security certification, and awareness communication programs.
Educational Services
To access more information about Enterprise services, please visit our Web site
at the following URL:
www.symantec.com
Select your country or language from the site index.

Technical Support ............................................................................................... 4
Chapter 1 Introducing Inventory Solution ........................................ 11
About Inventory Solution .............................................................. 11
About Inventory Pack for Servers .................................................... 12
What’s new in this version of Inventory Solution ............................... 13
About what you can inventory ........................................................ 13
Supported Inventory Solution platforms .......................................... 15
Components of Inventory Solution .................................................. 16
What you can do with Inventory Solution ......................................... 17
Methods for gathering inventory .................................................... 18
Where to get more information ....................................................... 20
Chapter 2 Using the Inventory home page ....................................... 23
About the Inventory home page ...................................................... 23
Chapter 3 Preparing managed computers for inventory ............... 25
Preparing managed computers for inventory and metering .................. 25
About the Inventory and Application Metering plug-ins ...................... 27
Installing the Inventory and Application Metering plug-ins ................. 28
Upgrading the Inventory and Application Metering plug-ins ................ 29
Uninstalling the Inventory and Application Metering plug-ins ............. 29
Chapter 4 Gathering inventory on managed computers ............... 31
About gathering inventory on managed computers ............................ 32
About inventory policies and tasks ................................................. 33
About predefined inventory policies ................................................ 34
About methods for gathering software inventory ............................... 36
About using Inventory Solution with the Software Catalog Data
Provider ............................................................................... 38
How Inventory Solution works with the Software Catalog Data
Provider ............................................................................... 39
Gathering inventory on managed computers ..................................... 41
Using predefined inventory policies ................................................ 42
Contents

Manually creating and modifying inventory policies and tasks ............. 43
Selecting computers and scheduling inventory tasks .......................... 44
Inventory policy options ................................................................ 45
Inventory advanced options ........................................................... 46
Inventory advanced options: Data Classes tab .................................... 47
Inventory advanced options: Files Properties Scan Settings tab ............ 47
Inventory advanced options: Run options tab .................................... 51
About detailed file inventory .......................................................... 53
About targeted software inventory .................................................. 54
Gathering detailed file inventory .................................................... 55
Running a targeted software inventory ............................................ 56
Chapter 5 Gathering inventory using stand-alone
packages ......................................................................... 59
About gathering inventory using stand-alone packages ....................... 59
Gathering inventory using stand-alone packages ............................... 60
Creating and editing stand-alone inventory packages ......................... 60
Stand-alone inventory package options page .................................... 61
Running stand-alone inventory packages on target computers ............. 64
Stand-alone inventory package command-line switches ...................... 66
Manually reporting stand-alone inventory data ................................. 67
Chapter 6 Gathering custom inventory ............................................. 69
About gathering custom inventory .................................................. 69
Gathering custom inventory .......................................................... 71
Creating and customizing the data class ........................................... 72
Creating a custom inventory script task ........................................... 74
About creation interfaces .............................................................. 76
Viewing custom inventory data ...................................................... 79
Chapter 7 Viewing inventory data and reports ................................ 81
Viewing inventory data ................................................................. 81
Using inventory reports ................................................................ 81
About using the Resource Manager to view inventory data .................. 82
Using the Resource Manager to view inventory data ........................... 84
Chapter 8 Metering and denying applications ................................. 85
About metering and denying applications ......................................... 85
About how application metering works ............................................ 88
About blacklisting applications ....................................................... 88
About configuring applications for metering ..................................... 89
Contents8

Metering and denying applications .................................................. 89
Configuring Application Metering policies ........................................ 90
Defining applications to meter or deny ............................................. 92
Application metering policy options ................................................ 93
Application definition details ........................................................ 96
Application metering start, stop, and denial events ............................ 99
About application summary data ................................................... 101
About how application metering summary is sent ............................ 104
Managing application metering data .............................................. 105
Viewing application metering data ................................................ 105
Chapter 9 Gathering baseline inventory .......................................... 107
About baseline inventory ............................................................. 107
About baseline files ..................................................................... 108
Compiling a file baseline snapshot ................................................. 109
File baseline task options ............................................................. 110
File Configuration Editor dialog box ............................................... 112
File Snapshot Editor options ......................................................... 121
Creating a Registry Baseline Snapshot task ..................................... 123
Registry Baseline Task page ......................................................... 123
Registry Configuration Editor options ............................................ 125
Registry Snapshot Editor options .................................................. 128
Index ................................................................................................................... 129
9Contents

Contents10

Introducing Inventory
Solution
This chapter includes the following topics:
■About Inventory Solution
■About Inventory Pack for Servers
■What’s new in this version of Inventory Solution
■About what you can inventory
■Supported Inventory Solution platforms
■Components of Inventory Solution
■What you can do with Inventory Solution
■Methods for gathering inventory
■Where to get more information
About Inventory Solution
Obtaining and analyzing accurate inventory data is an important part of managing
and securing your network. Inventory Solution lets you gather inventory data
about computers, users, operating systems, and installed software applications
in your environment. You can collect inventory data from the computers that are
running the following platforms: Microsoft Windows, UNIX, Linux, and Mac.
See “Where to get more information”on page 20.
An application metering feature also lets you monitor and deny the usage of
applications on your network.
1
Chapter

You use policies and tasks to perform inventory and application metering
functions. The policies and tasks are easily configured and managed using a central
Web console. The inventory data is stored in the Altiris CMDB database. This
CMDB provides a central store of data that is used across the Symantec
Management Platform. After you have gathered inventory data or metered
applications, you can analyze the data using predefined or custom reports.
For more information, see topics about the CMDB in the Symantec Management
Platform Help.
You can collect the following kinds of inventory data:
■Hardware and operating system
■Software
■File properties
You can use predefined inventory policies to gather inventory with little effort.
See “About predefined inventory policies”on page 34.
You can also use additional Symantec products to gather inventory data from
handheld computers, Microsoft Windows, UNIX, Linux, and Mac servers, and
network devices.
See “About what you can inventory”on page 13.
See “Supported Inventory Solution platforms”on page 15.
See “Components of Inventory Solution”on page 16.
See “Methods for gathering inventory”on page 18.
You can also use Altiris Inventory Pack for Servers, which is a separate product
that lets you gather server-based inventory data from servers.
See “About Inventory Pack for Servers”on page 12.
About Inventory Pack for Servers
Altiris Inventory Pack for Servers is a separate product with a separate license
that gathers server-based inventory data from servers. It runs on top of Inventory
Solution and uses the same Inventory plug-ins, policies, and tasks.
You can gather the following types of server-based inventory data:
■Microsoft Windows server operating systems
■Red Hat Enterprise Linux
■SUSE Linux Enterprise Server
Introducing Inventory Solution
About Inventory Pack for Servers
12

■VMware ESX
■ORACLE
■Microsoft SQL Server
■mySQL
■Microsoft Exchange Server
■Microsoft DHCP Server
■Microsoft DNS Server
■Microsoft RAS Server
■Microsoft IIS
■Apache
■Network load balancing
■System DSN
For a complete list of supported platforms and versions, see the Inventory Solution
Release Notes.
See “Where to get more information”on page 20.
See “Supported Inventory Solution platforms”on page 15.
You can use predefined inventory policies to gather inventory with little effort.
See “Using predefined inventory policies”on page 42.
What’s new in this version of Inventory Solution
For a list of what's new in this release, see the Inventory Solution Release Notes.
See “Where to get more information”on page 20.
About what you can inventory
You can gather different types of inventory data. Inventory data is stored in the
data classes that are stored in the CMDB.
13Introducing Inventory Solution
What’s new in this version of Inventory Solution

Table 1-1 Inventory types
DescriptionOption
The data that is gathered when the Altiris Agent is
installed on the managed client computer. This
inventory is a core function of the Symantec
Management Platform and does not require Inventory
Solution. Basic inventory gathers information about
the computer that the Altiris Agent is installed on. For
example, its name, domain, installed operating system,
MAC and IP address, primary user account, and so on.
This information is updated on a regular basis as long
as the Altiris Agent is installed on the computer.
Basic inventory
The expanded data that can be gathered using
Inventory Solution.
Standard inventory collects information about the
following characteristics of a client computer:
■Hardware and operating system: The hardware
components of the client computer. For example,
the processor, memory devices, disk controllers,
storage disks, and partitions. Operating system:
The operating system that is installed on the client
computer. For example, the version of the operating
system, countrycode, serial number, and total swap
space size. User accounts: The details about the
user accounts and groups on a computer. For
example, the primary user, all installed local
accounts, installed email profiles, and membership
of the local admin group.
■Software: The software that is installed on a client
computer. For example, the names of the
applications that are installed.
See “About methods for gathering software
inventory”on page 36.
■File properties: More detailed information about
the software, such as version and manufacturer.
See “About methods for gathering software
inventory”on page 36.
■Server applicatons: (requires Inventory Pack for
servers.) The server-class software that is installed
on servers.
See “About Inventory Pack for Servers”on page 12.
Standard inventory
Introducing Inventory Solution
About what you can inventory
14

Table 1-1 Inventory types (continued)
DescriptionOption
The additional data you can gather beyond the
predefined data classes in Inventory Solution.
You can create additional data classes that may be
unique to your environment. You then run the custom
scripts that collect the custom inventory data classes.
Custom inventory
The data you can gather about the usage of
applications.
You can monitor the following information:
■The start and stop events for the application that
are sent to the CMDB
■Summary data of monitored applications
This data helps you track how often an application is
used, not only if it is installed. This data can help you
manage your application licenses.
Note: Application metering is a Windows-only feature.
Application metering
inventory
The data you can gather about the files and registry
settings on a computer. You can detect how a
computer’s files and registry settings change over time.
You can also detect the differences between a computer
and a reference computer.
Baseline inventory
Additional types of inventory can be gathered using other Symantec products.
See “Supported Inventory Solution platforms”on page 15.
Supported Inventory Solution platforms
You can collect inventory from a wide range of platforms enabling you to easily
gather data in a heterogeneous environment. You can gather inventory on
Windows, UNIX, Linux, and Mac computers. A separate inventory agent is required
for each platform. However, pre-configured policies can automatically and
remotely install the appropriate agent on each computer.
See “Preparing managed computers for inventory and metering”on page 25.
When you configure inventory policies, you select the computers you want to
inventory . You can also customize policies based on the settings that are available
for each platform.
15Introducing Inventory Solution
Supported Inventory Solution platforms

For a complete list of supported platforms and versions, see the Inventory Solution
Release Notes.
See “Where to get more information”on page 20.
Additional Symantec products will be available to collect inventory data on
additional platforms.
You can use the following products:
■Inventory Pack for Servers
Gathers the inventory from server-based software components.
For more information on product details and availability of these and other
potential products, see www.symantec.com.
Components of Inventory Solution
Inventory Solution provides many tools to help you perform inventory tasks.
Table 1-2 Inventory tools
DescriptionTool
Using policies, inventory data can be automatically and remotely collected from
managed client computers at scheduled intervals. Inventory collection policies are
easily created and managed from the Symantec Management Console. This process
eliminates the need for costly physical inventory processes.
In most cases you should use inventory policies. You should limit inventory tasks to
automated tasks and workflows.
See “Methods for gathering inventory”on page 18.
Inventory policies and tasks
You can collect inventory on the client computers that are not managed through the
Symantec Management Platform. You can create and run executables that gather
inventory data and report it to the CMDB. These executables can be delivered through
login scripts, USB keys, network shares, and so on.
See “Methods for gathering inventory”on page 18.
Stand-alone inventory
executables
A portal and many predefined reports let you easily view and analyze your inventory
data. You can also create your own custom reports.
See “Viewing inventory data”on page 81.
Inventory reports
Inventory data is gathered for hundreds of predefined data classes. You can expand
and customize the type of data you want to collect. For example, you can add specific
registry data or a unique hardware component.
See “About gathering custom inventory”on page 69.
Custom inventory
Introducing Inventory Solution
Components of Inventory Solution
16

Table 1-2 Inventory tools (continued)
DescriptionTool
In addition to knowing what applications are installed, you can identify the usage of
installed applications. You can also restrict applications from being run.
Note: Application metering is a Windows-only feature.
See “About metering and denying applications”on page 85.
Application metering
You can determine how a client computer's inventory data changes compared to a
baseline. You can detect how a computer's inventory has changed over time, or the
differences between a computer and a reference computer.
See “About baseline inventory”on page 107.
Baseline inventory (formerly
in Altiris Application
Management Solution)
What you can do with Inventory Solution
The Symantec Management Platform gathers basic inventory from managed
computers. Inventory Solution adds the ability to gather substantially more data
as well as other tools to help you gather and use your inventory data.
Inventory data can be used do the following:
■Obtain an up-to-date inventory of the computers in your network and their
operating system platforms.
■Identify the computers that do not meet minimum security requirements, such
as antivirus software, application updates, management agents, and so on.
■Help prepare for a software license audit by providing the number of installed
instances of an application.
■Help determine which computers need to be replaced according to age or
capabilities.
■Identify the types and amounts of personal data that is stored on computers,
such as MP3 files, MPG files, and so on.
■Prepare for operating system migrations by doing the following:
■Identify the number of different operating systems that are installed.
■Identify the computers that do and do not meet minimum hardware
requirements for a new operating system.
■Identify the users of computers to be migrated.
■Determine which applications need to be re-deployed after the migration.
■Compare the files or registry settings of client computers against a baseline.
17Introducing Inventory Solution
What you can do with Inventory Solution

■Help manage your application licenses by tracking how often an application
is used, not only if it is installed.
■Deny unauthorized applications from running on managed computers.
Methods for gathering inventory
You can use different methods to gather inventory data. Each method has some
advantages and possible disadvantages.
Table 1-3 Inventory methods
DescriptionMethod
This method is performed automatically when the Altiris Agent is installed on
managed computers. This feature is a core function of the Symantec Management
Platform and does not require any additional inventory components.
See Table 1-1 on page 14.
Basic inventory gathers information such as the computer’s name, domain, installed
operating system, MAC and IP address, primary user account, and so on. This
information is updated on a regular basis as long as the Altiris Agent is running on
the computer.
The advantages are as follows:
■Inventory data is automatically collected when the Altiris Agent is installed on
the client computer—no other components or steps are needed.
■Inventory data is updated at regular intervals.
■Can be used on a different platform.
The disadvantages are as follows:
■Inventory data is limited in scope.
■The computer must be managed using the Altiris Agent.
For more information, see topics about basic inventory and the Altiris Agent in the
Symantec Management Platform Help.
Basic inventory
Introducing Inventory Solution
Methods for gathering inventory
18

Table 1-3 Inventory methods (continued)
DescriptionMethod
You can use this method by installing the Inventory plug-in on your managed
computers and running inventory policies. The inventory plug-in works with the
Altiris Agent and uses scheduled policies to collect more detailed information than
basic inventory. You can collect detailed information about the hardware, operating
system, local users and groups, and software.
Using the Inventory plug-in on managed computers, all inventory policies are remotely
managed from the Symantec Management Console. Inventory policies can be
scheduled to run at configurable intervals that provide up-to-date data. They can
also run at the times that do not affect your network’s performance.
You can use the Inventory plug-in on Windows, Linux, UNIX, and Mac platforms.
The advantages are as follows:
■You can gather a broad range of inventory data.
■Inventory data is automatically collected and updated using scheduled tasks.
■You can configure policies to report only changed data from the previous inventory.
■Can be easily used on multiple platforms.
The disadvantages are as follows:
■The target computer must be managed using the Altiris Agent.
■Maintaining current inventory data can be difficult on the computers that are not
regularly connected to the network.
See “About gathering inventory on managed computers”on page 32.
Agent-based inventory on
managed computers
(computers with the Altiris
Agent)
You can use this method by creating stand-alone programs that can be run on target
computers. These programs can be run on the computers that do not have the
Inventory plug-in. These programs are created using configuration pages in the
Symantec Management Console. The programs can be distributed using email, network
shares, log-in scripts, and so on.
The advantages are as follows:
■Does not require the computer to be managed using the Altiris Agent or connected
to a Notification Server.
The disadvantages are as follows:
■External delivery of inventory package is required.
■The inventory schedule is not centrally managed.
■Inventory data may not be current.
■If the target computer is not connected to a Notification Server, the data must be
posted manually.
See Table 1-1 on page 14.
See “About gathering inventory using stand-alone packages”on page 59.
Stand-alone Inventory
(for computers without the
Altiris Agent or connection
to a Notification Server)
19Introducing Inventory Solution
Methods for gathering inventory

Table 1-3 Inventory methods (continued)
DescriptionMethod
You can use this method by installing the Application Metering plug-in on your
managed computers. You can monitor and record the usage of applications.
The advantages are as follows:
■You can track how often an application is used, not only if it is installed. This
feature can help you manage your application licenses.
The disadvantages are as follows:
■The target computer must be managed using the Altiris Agent.
■Only Windows-based computers are supported.
See Table 1-1 on page 14.
See “About metering and denying applications”on page 85.
Application metering
You can use this method by creating and running the scripts that expand the types
of inventory that you gather.
The advantages are as follows:
■By default, inventory data is gathered through more than 100 predefined data
classes. You can create additional data classes that may be unique to your
environment.
The disadvantages are as follows:
■You must create and run the scripts that collect the custom inventory data classes.
See Table 1-1 on page 14.
See “About gathering custom inventory”on page 69.
Custom Inventory
Where to get more information
Use the following documentation resources to learn and use this product.
Introducing Inventory Solution
Where to get more information
20