Novell ZENWORKS HANDELD MANAGEMENT 7 SP1 IR4 - ADMINISTRATION Administration Manual

Hide thumbs Also See for ZENWORKS HANDELD MANAGEMENT 7 SP1 IR4 - ADMINISTRATION:
Table of Contents

Advertisement

AUTHORIZED DOCUMENTATION
Administration Guide
Novell
®
ZENworks
®
Handheld Management
7 SP1 IR4
June 17, 2009
www.novell.com
Novell ZENworks 7 Handheld Management Administration Guide

Advertisement

Table of Contents
loading

Summary of Contents for Novell ZENWORKS HANDELD MANAGEMENT 7 SP1 IR4 - ADMINISTRATION

  • Page 1 AUTHORIZED DOCUMENTATION Administration Guide Novell ® ZENworks ® Handheld Management 7 SP1 IR4 June 17, 2009 www.novell.com Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 2 Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
  • Page 3 Novell Trademarks For a list of Novell trademarks, see the Novell Trademark and Service Mark (http://www.novell.com/company/legal/ trademarks/tmlist.html) list at http://www.novell.com/company/legal/trademarks/tmlist.html. Third-Party Materials All third-party trademarks are the property of their respective owners.
  • Page 4 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 5: Table Of Contents

    Contents About This Guide 1 Setting Up Handheld Import Creating the Handheld Service Package ......... 11 Configuring the Handheld Import Policy.
  • Page 6 Point............. 137 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 7 7.2.7 Connecting to the ZENworks Handheld Management Server ....138 Converting to Microsoft SQL Server ......... . . 138 Compacting and Repairing the Database .
  • Page 8 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 9: About This Guide

    This guide is intended for system administrators installing ZENworks 7 Handheld Management software. These users should be familiar with their own network and the hardware configuration of the management zone where they intend to install this product. A working knowledge of Novell ®...
  • Page 10 Documentation Conventions In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and items in a cross-reference path. ® A trademark symbol ( , etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark.
  • Page 11: Setting Up Handheld Import

    Guide. In order to manage the handheld devices, you must do the following: Import handheld devices into Novell eDirectory The following sections provide information you need for setting up an Import policy: Section 1.1, “Creating the Handheld Service Package,” on page 11 Section 1.2, “Configuring the Handheld Import Policy,”...
  • Page 12: Configuring The Handheld Import Policy

    Section 1.1, “Creating the Handheld Service Package,” on page 11, then click Properties. 2 Select the check box under the Enabled column for the Handheld Import policy. This both selects and enables the policy. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 13 3 Click Properties. The Location tab of the General page is displayed. Setting Up Handheld Import...
  • Page 14 NOTE: The Description box describes where the handheld device objects are created, based on the settings you selected on the Location page. Review the description and make any necessary changes. 6 Click the Naming tab. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 15 7 Fill in the fields: Handheld Name: Displays the handheld naming convention currently defined in the Add Name Fields and Place Them in Order list. Whenever there is a potential name conflict (such as two handheld device objects in the same container with the same name), the system appends a number on the end of the name that you enter here.
  • Page 16: Associating The Handheld Service Package

    3 To associate the package, browse for the ZENworks Handheld Management Service object, the container containing the Service object, or the container object created during the installation of ZENworks Handheld Management server components. 4 Click OK. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 17: Using Zenworks Handheld Management Policies

    7 Handheld Management to function properly, you must create the policy packages so that you can configure, enable, and associate your planned policies. A policy package is a Novell eDirectory object containing one or more individual policies. A policy package groups policies according to function, making it easier to administer them. It also provides the means for the administrator to change policy settings and to determine how they affect other eDirectory objects.
  • Page 18 “BlackBerry Security Policy” on page Palm Client Configuration Policy Handheld Package Lets you enable user authentication on associated Palm OS* devices. For more information, see Section 2.4.4, “Palm Client Configuration Policy,” on page Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 19 Policy Container Description Palm Access Point Configuration Handheld Package and Handheld Lets you assign multiple Policy User Package ZENworks Handheld Management Access Points to a device and also define the order of the ZENworks Handheld Management Access Points to which the Palm OS device must connect.
  • Page 20 Windows CE devices. Also lets you configure the software or files that must be automatically uninstalled or deleted from the Windows CE device. For more information, see Section 2.4.9, “WinCE Client Configuration Policy,” on page Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 21 Policy Container Description WinCE Configuration Policy Handheld Package and Handheld Lets you associate different User Package software programs or functions with the buttons on the associated Windows CE device; specify which programs you want to include on the Start menu (on a Pocket PC) or on the desktop (on a handheld PC);...
  • Page 22: Creating Policy Packages

    To a User object To a Handheld Group where the handheld device is a member To a User Group where the user is a member To a parent container of the handheld device or User object Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 23 The search order that ZENworks Handheld Management uses is consistent with standard eDirectory behavior and any search policies that are in the tree. By default, ZENworks Handheld Management starts at the handheld device or user object, followed by any Handheld groups or User groups that the device is a member of, and then starts walking up the tree looking for policies to enforce.
  • Page 24: Search Policy

    For information on creating the Container Package, see Section 2.2, “Creating Policy Packages,” on page 2 Select the check box under the Enabled column for the Search policy. This both selects and enables the policy. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 25 3 Click Properties to display the Search Level page. 4 Select the level to search to from the drop-down list: [Root]: Search from the handheld device object to the root of the tree. Using ZENworks Handheld Management Policies...
  • Page 26: Handheld Application Search Policy

    “Associating the Container Package” on page 29 to associate the policy package. 2.3.3 Handheld Application Search Policy The Handheld Application Search policy is used to limit how far up the tree ZENworks Handheld Management searches for Handheld Application objects. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 27 To set up the Handheld Application Search policy: 1 In ConsoleOne, right-click the Container Package, then click Properties. 2 Select the check box under the Enabled column for the Handheld Application Search policy. This both selects and enables the policy. 3 Click Properties to display the Search Level page.
  • Page 28 5 If you chose Selected Container, browse to select the container. 6 To determine the searching limits in either direction, specify a number between -25 and 25. 7 Click the Search Order tab. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 29: Associating The Container Package

    8 Specify the policy searching order. Use the arrow keys, the Add button, and the Remove button as necessary to create your search order. 9 Click OK. 10 When you have finished configuring all of the policies for this package, continue with the steps under “Associating the Container Package”...
  • Page 30: Blackberry Configuration Policy

    Properties. 2 On the Policies tab, click the down-arrow, then click BlackBerry. 3 Select the check box under the Enabled column for the BlackBerry Configuration policy. This both selects and enables the policy. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 31 4 Click Properties to display the Owner page. 5 Fill in the fields: Using ZENworks Handheld Management Policies...
  • Page 32: Blackberry Inventory Policy

    The owner name and information that you specify using this policy does not affect the naming of the device objects in Novell eDirectory; the owner name and information you specify in this policy displays only on the actual device.
  • Page 33 4 Click Properties to display the General page. 5 Fill in the fields: Using ZENworks Handheld Management Policies...
  • Page 34: Blackberry Security Policy

    Properties. 2 On the Policies tab, click the down-arrow, then click BlackBerry. 3 Select the check box under the Enabled column for the BlackBerry Security policy. This both selects and enables the policy. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 35 4 Click Properties to display the Security page. 5 Select the Require a Password To Be Set On the Handheld check box. Using ZENworks Handheld Management Policies...
  • Page 36: Palm Client Configuration Policy

    Novell ZENworks 7 Handheld Management Installation Guide. For more information about editing the properties of the ZENworks Handheld Management Service object to enable global user authentication, see Section 7.1, “Configuring User Authentication,” on page 131. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 37 If user authentication is enabled, the user is prompted for his or her credentials (username and password) the first time the device connects/synchronizes. ZENworks Handheld Management then authenticates the user using LDAP to log in to the directory. After the user is authenticated, you can target policies and applications to the user of the handheld device.
  • Page 38 4 Click Properties to display the Global Settings page. 5 To override the user authentication settings of the ZENworks Handheld Management Service object, Select the Override the Server Configuration option. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 39: Palm Configuration Policy

    6 Select the Enable User Based Policies on Handhelds option. 7 Click OK to save the policy. 8 When you have finished configuring all of the policies for this package, continue with the steps under “Associating the Handheld Package or the Handheld User Package” on page 73 associate the policy package.
  • Page 40 The Button Column lists the available buttons on the Palm OS device. To change a button’s association, select a button from the Button list, click Edit, click Set to Application, browse to an application, then click OK. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 41 NOTE: Depending on your particular Palm OS device, the available buttons in the Button list are named differently than those in the preceding illustration. The Pen Function drop-down list lets you assign a feature users can access when they drag the pen from the writing area to the top of the screen on the Palm OS device.
  • Page 42 11 If desired, schedule the policy. For more information, see “Scheduling Packages and Policies” on page 12 (Optional) To ensure that the Handheld Management Server immediately receives the new policy changes, right-click the Handheld service object, then click Scan Now. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 43: Palm Access Point Configuration Policy

    2.4.6 Palm Access Point Configuration Policy The Palm Access Point Configuration Policy lets you assign multiple ZENworks Handheld Management Access Points to a device and also define the order of the ZENworks Handheld Management Access Points to which the Palm OS device must connect. If the device is unable to connect to the ZENworks Handheld Management Access Point configured first, then it automatically tries to connect to the ZENworks Handheld Management Access Point configured next in the sequence.
  • Page 44 The ZENworks Handheld Management Access Points IP address followed by a semicolon (;) is displayed in the Access Points option. 5h (Optional) To add another ZENworks Handheld Management Access Point, repeat Step 5c through Step Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 45: Palm File Retrieval Policy

    You can add a maximum of eight ZENworks Handheld Management Access Points IP addresses, but ensure that the IP addresses or the DNS names of the ZENworks Handheld Management Access Points are separated with semicolons (;). 5i Click Apply. 6 (Optional) To change the order of the ZENworks Handheld Management Access Points in the Configure IP Address /DNS Name of Access Points list: 6a Select the IP address or the full DNS name of the ZENworks Handheld Management Access Point.
  • Page 46 ® NOTE: If you want to retrieve files from handheld devices and store them on a Novell NetWare volume, you must install the Novell Client on the ZENworks Handheld Management Server. To set up the Palm File Retrieval policy: 1 In ConsoleOne, right-click the Handheld Package object or the Handheld User Package object, then click Properties.
  • Page 47 5 Select the check box under the Enabled column for the newly created Palm File Retrieval policy. This both selects and enables the policy. 6 Click Properties to display the Files page. 7 In the Files field, specify the source files to be retrieved from the handheld device. NOTE: You must specify the Palm database or resource filename in the Files field.
  • Page 48: Palm Security Policy

    Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 49 characters to allow for the password, and whether the password must contain a mix of letters and numbers. For devices running Palm OS 4.x or newer, you can also configure auto-lock options. IMPORTANT: Before configuring the policy, you must configure the containers to be searched to authenticate the handheld user credentials.
  • Page 50 5b (Conditional) To set a user’s network password as the device password, select the Password Matches a Novell eDirectory User Password option. WARNING: If you forget your network password, you cannot access the Handheld device. You can access the device only by Hard Reset but this erases all data on the device.
  • Page 51 5c (Conditional) To configure enhanced security options, select Additional Password Settings, and configure the following options: Minimum Password Length: Specify the minimum number of characters to allow for the password on the device. You should choose a number great enough to ensure adequate security, but small enough not to excessively burden the user.
  • Page 52 HotSync. 7 Configure the following Self-Destruct settings: Bad Password Attempts: Select the Enforce Self-destruct check box and specify the number of bad password attempts to allow before activating the self-destruct feature. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 53: Wince Client Configuration Policy

    For more information about setting up user authentication on a global basis during installation, see “Installing the ZENworks Handheld Management Server” in the Novell ZENworks 7 Handheld Management Installation Guide. For more information about editing the properties of the ZENworks Handheld Management Service object to enable global user authentication, see Section 7.1, “Configuring User Authentication,”...
  • Page 54 This both selects and enables the policy. 4 Click Properties to display the Global Settings page. 5 To override the user authentication settings of the ZENworks Handheld Management Service object, select the Override the Server Configuration option. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 55: Wince Configuration Policy

    6 Select the Enable User Based Policies on Handhelds option. 7 Click OK to save the policy. 8 When you have finished configuring all of the policies for this package, continue with the steps under “Associating the Handheld Package or the Handheld User Package” on page 73 associate the policy package.
  • Page 56 3 Select the check box under the Enabled column for the WinCE Configuration policy. This both selects and enables the policy. 4 Click Properties. 5 On the Buttons: Configuration page, do the following: 5a Click Add to change a button’s assignment. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 57 To view the button naming conventions for your particular handheld device: on the handheld device, click Start > Settings > Buttons. For example, on a Compaq* iPAQ Pocket PC, the buttons are named Button 1, Button 2, and so forth. On a HP* Jornada Pocket PC, the buttons are named Hot key 1, Hot key 2, and so forth.
  • Page 58 Windows CE devices; the power of Windows CE devices is turned off. 9 On the Files page, do the following: 9a Click Add. 9b In the Add Files to Delete from Handheld dialog box, specify the complete path of the file and the filename. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 59: Wince Access Point Configuration Policy

    9c Click OK. 9d (Optional) Select the Files are Required option if you want Handheld Management to report a failed status if the specified files do not exist on the handheld device or if the specified wildcard characters do not provide a match for files on the device. 9e Click Apply, then click Close.
  • Page 60 3 Select the check box under the Enabled column for the WinCE Access Point Configuration policy. This both selects and enables the policy. 4 Click Properties. This displays the Access Points - Configuration page. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 61 5 In the Access Points page, do the following: 5a If you want to add the ZENworks Handheld Management Access Points to the Configure IP Address /DNS Name of Access Points list, and define the order of the ZENworks Handheld Management Access Points to which the handheld device must connect to, select the Enable Following Access Points option.
  • Page 62: Wince File Retrieval Policy

    Retrieval policies can be effective for a single handheld device object, handheld group object, or container object. NOTE: If you want to retrieve files from handheld devices and store them on a NetWare volume, you must install the Novell Client on the ZENworks Handheld Management Server. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 63 To set up the WinCE File Retrieval policy: 1 In ConsoleOne, right-click the Handheld Package or Handheld User Package, then click Properties. 2 On the Policies tab, click the down-arrow, then click WinCE. 3 Click Add. The Add Policy window is displayed. 4 Type a descriptive name in the Policy Name field, then click OK.
  • Page 64 5 Select the check box under the Enabled column for the newly created WinCE File Retrieval policy. This both selects and enables the policy. 6 Click Properties to display the Files page. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 65 7 In the Path field in the Source Files box, specify the path to the source files. 8 In the Files field, browse to or specify the source files to be retrieved from the Windows CE device. You can use wildcard characters to specify source files. When the policy is enforced, all specified source files are retrieved from the device;...
  • Page 66: Wince Remote Management Policy

    2 On the Policies tab, click the down-arrow, then click WinCE. 3 Select the check box under the Enabled column for the WinCE Remote Management policy. This both selects and enables the policy. 4 Click Properties to display the Remote Management page. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 67 5 In the Remote Management page, do the following: 5a Select the Allow Remote Control of the Device option. 5b If you want to enable the Windows CE device user to either accept or reject the Remote Management session initiated by the administrator or remote user, select the Prompt User for Permission to Remote Control option.
  • Page 68: Wince Security Policy

    1 In ConsoleOne, right-click the Handheld Package object, then click Properties. 2 On the Policies tab, click the down-arrow, then click WinCE. 3 Select the check box under the Enabled column for the WinCE Security policy. This both selects and enables the policy. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 69 4 Click Properties to display the Security page. 5 In the Security page, do the following: 5a To set a password on the Windows CE device, select the Require a Password to Be Set on the Handheld option. If your organization has a rule that states that all handheld devices must have a password, you should enable this policy.
  • Page 70 Pocket PCs. The options in this group box are disabled unless you check Require a Password to Be Set on the Handheld. Password Matches a Novell eDirectory User Password: Select this option to set a user’s network (eDirectory) password as the device password.
  • Page 71 option and then resynchronize the device so that the policy is enforced. Uninstalling the ZENworks Handheld Management handheld client on the device or disassociating the device from the WinCE Security policy does not remove the ZENworks Handheld Management password applet. NOTE: You can replace the bitmap image that displays in the ZENworks Handheld Management password dialog boxes with a bitmap image of your choosing.
  • Page 72 7 Configure the following Self-Destruct settings: Bad Password Attempts: Select the Enforce Self-Destruct check box and specify the number of bad password attempts to allow before activating the self-destruct feature. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 73: Associating The Handheld Package Or The Handheld User Package

    Time Since Last Connection: Select the Enforce Self-destruct check box and specify the number of days after the last connection before activating the self-destruct feature. The Time Since Last Connection option refers to the last time the handheld device connected to the ZENworks Handheld Management Access Point.
  • Page 74: Associating A User Object To A Blackberry Device

    1 In ConsoleOne, right-click the Handheld Package or Handheld User Package object, click Properties, then click the desired platform page. 2 Click the Edit button in the Default Package Schedule group box. The Edit Policy Package Schedule page is displayed. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 75 3 Make the desired changes to the schedule. Be aware that changing the policy package’s schedule to run too frequently affects performance, depending on your environment. The default schedule should be adequate for most situations. NOTE: Click the Help button for detailed information about the options in the Edit Policy Package Schedule dialog box.
  • Page 76: Setting Up Handheld Service Package Policies

    1 In ConsoleOne, right-click the Handheld Package or Handheld User Package object, then click Properties. 2 Select the check box under the Enabled column for the desired policy. This both selects and enables the policy. 3 Click Properties. 4 Click the Policy Status tab. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 77 NOTE: Click Display to refresh the information in the Object, Status, and Last Enforced columns. Object: Lists the individual handheld device objects that the policy is associated with. You can select a handheld device in the list, then click Properties to view that device’s properties. Status: Lists the status of the policy on each handheld device: Status Description...
  • Page 78: Viewing Policy Status For A Specific Handheld Device

    Select a policy in the list, then click Properties to view that policy’s properties. Status: Lists the status of the policy on each handheld device: Status Description Successful The policy was successfully enforced on the corresponding handheld device. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 79 Status Description Pending The policy has reached its scheduled run time but has not yet reported results. For example, the policy has been enforced on the handheld device, but the ZENworks Handheld Management Access Point has not yet connected to the ZENworks Handheld Management Server to relay the information.
  • Page 80 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 81: Using Queries And Groups

    Using Queries and Groups ® ® After handheld devices have registered with Novell ZENworks 7 Handheld Management, you can use queries to quickly find handheld devices that match criteria specified in the query and create custom groups to make managing handheld devices easier.
  • Page 82 5 Click the Add Item button The following dialog box appears if you are querying on Windows CE devices. 6 Select the first object you want to make part of the query, then click OK. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 83 The first column lists the attributes you can make part of the query. Click the second column to display a down-arrow, click the down-arrow, then select the operator that you want to use. When you click the third column, a browse button displays. Click the browse button, then select a value for the query.
  • Page 84: Using Logical Operators

    4. Expressions joined by OR 3.2 Using Groups Placing devices in groups can save you time when scheduling distributions, defining filters, and checking system status. With groups, you can use a single entity to manage multiple devices. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 85: Creating Groups

    The following sections contain information to help you create and use groups: Section 3.2.1, “Creating Groups,” on page 85 Section 3.2.2, “Viewing the Properties of a Group,” on page 89 Section 3.2.3, “Changing Group Membership,” on page 91 Section 3.2.4, “Changing the Update Schedule of Query-Based Groups,” on page 92 Section 3.2.5, “Deleting a Group,”...
  • Page 86 6 Click the Members tab. 7 Click Add Select Objects to display the Select Objects dialog box. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 87 8 Select the handheld device objects that you want to be members of this static group. You can use Shift+click or Ctrl+click to select multiple handheld device objects. 9 Click OK. Static groups are indicated by (yellow folder icon) in the ZENworks Handheld Management Inventory Viewer.
  • Page 88 Actions, then click Scan Now. This performs the directory scan. 8b Again in the ConsoleOne, right-click the desired Handheld Group object, click Actions, then click Update. This updates the list of handhelds that belong to this group. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 89: Viewing The Properties Of A Group

    Use a Custom Update Schedule: Select this option if you want to specify a custom update schedule, then specify the group update interval. 9 Click OK. The query-based group (indicated by in the ZENworks Handheld Management Inventory Viewer) is created and populated with the handheld devices that currently match the criteria specified in the query.
  • Page 90 From the Associated Policy Packages page, you can view which policy packages are associated to the selected Handheld Group object. 4 Click the Applications tab. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 91: Changing Group Membership

    From the Applications tab, you can view which Handheld Application objects are associated to the selected Handheld Group object. 3.2.3 Changing Group Membership From time to time you need to modify static group membership by adding or deleting handheld device objects. Query-based groups are updated according to the query parameters;...
  • Page 92: Changing The Update Schedule Of Query-Based Groups

    Update. Changing the Update Schedule of All Query-Based Groups 1 In ConsoleOne, right-click the ZENworks Handheld Management Service object, then click Properties. 2 Select the desired Group Update Interval. 3 Click OK. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 93: Deleting A Group

    NOTE: You can force an immediate update of a specific query-based group. In ConsoleOne, right- click the ZENworks Handheld Management Service object, click Actions, then click Scan Now to perform a directory scan. Next, right-click the desired Handheld Group object, click Actions, then click Update.
  • Page 94 The Applications list displays the Handheld Application objects that are associated to the selected Handheld Group object. 3 To view an application object’s details, click a Handheld Application object, then click Details. Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 95: Changing A Group's Type

    The General page displays the application object’s properties, including its description, when it becomes available for distribution, and when it is no longer be available for distribution. NOTE: When you are viewing the Handheld Application objects that are associated with a Handheld Group object, you only see Handheld Application objects that are associated to that specific group;...
  • Page 96 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 97: Distributing Software To Handheld Devices

    Distributing Software to Handheld Devices This section describes how to create and distribute Handheld Application objects to handheld ® ® devices using Novell ZENworks 7 Handheld Management. The following sections contain detailed information: Section 4.1, “Understanding Handheld Application Objects,” on page 97 Section 4.2, “Distributing Applications to Handheld Devices,”...
  • Page 98: Understanding Automatic Application Updates

    Monday’s application distribution. The handheld device receives only the files that have changed. If the source directory has no changes during the week, the application is not sent (unless new handheld devices have been added to the list of recipients). Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 99: The Network

    Section 4.2.3, “Scheduling the Distribution of a Handheld Application Object,” on page 104 4.2.1 Creating a Handheld Application Object ® 1 In Novell ConsoleOne , right-click the container where you want to create the Handheld Application object, click New, then click Object to display the New Object window.
  • Page 100: Configuring A Handheld Application Object

    If you do not change this setting, the object is distributed the next time the device connects to the ZENworks Handheld Management Access Point. 4 Select the Expires On option, then specify a date and time that the application object is no longer be available for distribution. 100 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 101 5 To specify the date and time when you want to install the Handheld Application object files (configured in the Files tab) on the device, select the Do Not Install Before option, and click the Calendar/Clock icon. By default, the date and time is the date and time specified in the Available Beginning option. If you specify a date or time later than the current date and time, the application object files are immediately deployed on the device after synchronization but installed at the specified date and time.
  • Page 102 ZENworks Handheld Management Server. You might be able to browse to and select application data on the NetWare volume without the Novell Client installed, but the handheld application object is not built unless the Novell Client is installed on the ZENworks Handheld Management Server.
  • Page 103 ZENworks Handheld Management supports expansion cards in Palm OS devices running Palm OS 4.x and later. Expansion cards are usually referred to as secure digital (SD) cards or memory sticks. IMPORTANT: If you select the Install Files on Storage Card option, ZENworks Handheld Management installs the files only to a storage card.
  • Page 104: Scheduling The Distribution Of A Handheld Application Object

    Schedule page to schedule its distribution. If you want the handheld application object to be distributed only once, you do not need to schedule it; the object is distributed the next time the associated handheld devices synchronize. 104 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 105 To schedule the distribution of a Handheld Application object: 1 In ConsoleOne, right-click the Handheld Application object, then click Properties to display the General page. 2 Click the Schedule tab. 3 Click Enable Automatic Updates. If you select this option, ZENworks Handheld Management scans the source directory at the scheduled time for any additions or changes to the source files.
  • Page 106: Displaying Handheld Application Object Status

    Resend button on the Application Status page of the application object. You cannot force ZENworks Handheld Management to resend an application by deleting the application from the handheld device; you must use the Resend button. 106 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 107: Modifying A Handheld Application Object

    4.4 Modifying a Handheld Application Object You can add or delete components and distribute the changes without creating a new Handheld Application object. The following sections contain additional information about modifying Handheld Application objects: Section 4.4.1, “Modifying the Contents of a Handheld Application Object,” on page 107 Section 4.4.2, “Scanning for Updated Components,”...
  • Page 108: Deleting A Handheld Application Object

    2 Click the Associations tab, select the handheld devices or groups you want to remove the association from, then click Delete. Removing an association from a handheld device does not remove that application from the handheld device. 3 Click OK. 108 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 109: Using Inventory And Reports

    Using Inventory and Reports ® ® After you install the Novell ZENworks 7 Handheld Management software, set up Handheld Import, and users have synchronized their handheld devices, you are ready to collect software and hardware inventory for all managed handheld devices in your ZENworks Handheld Management system.
  • Page 110: Viewing Software Inventory

    Section 5.1.1, “Viewing Software Inventory for a Specific Handheld Device,” on page 111 Section 5.1.2, “Viewing Software Inventory Across All Palm OS, BlackBerry, or Windows CE Devices in Your System,” on page 111 110 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 111: Viewing Software Inventory For A Specific Handheld Device

    Section 5.1.3, “Identifying Files for Windows CE Devices,” on page 113 Section 5.1.4, “Ignoring or Identifying Windows CE Files and Applications,” on page 115 5.1.1 Viewing Software Inventory for a Specific Handheld Device ZENworks Handheld Management lets you view the applications installed on a specific Palm OS, BlackBerry, or Windows CE handheld device.
  • Page 112 1 Click the Software Inventory tab in the left frame. 2 Click the General tab in the right frame. 3 Double-click the application file in the Application Files list box. 112 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 113: Identifying Files For Windows Ce Devices

    The File Properties dialog box provides a quick snapshot of information about the file. Click the following tabs to view information about the selected file: General: Lists all application version information, including filename, modify time, and file size. Clients: Lists the Windows CE devices that the file is installed on. Rules: Lists the Identification and Ignore rules created for the file.
  • Page 114 2 Click the Software Inventory tab, then click the Unidentified Windows CE Files icon (the question mark). A list of unidentified files displays in the right pane. 3 Double-click the file you want to identify, then click Identify File. 114 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 115: Ignoring Or Identifying Windows Ce Files And Applications

    4 Specify the name of the application you want this file to identify with, the version, and the company name. If desired, change the modify time and size for the identification rule. If you specify a different size and/or date, only files matching those exact specifications are identified as a known application.
  • Page 116 Select Ignore Only Files with the Following Settings, then specify the modify time and size settings as appropriate. 6 If desired, type a description of why you are ignoring the file. 7 Click OK. 116 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 117 The file appears in the Ignored Windows CE Files tree view. Ignoring Windows CE Applications To keep your Applications folder manageable, you can ignore applications. This allows you to view only the applications that you think are important to display. For example, you might want to ignore any applications that are by default included with the operating systems (for example, Microsoft Clock).
  • Page 118 Identifying Ignored Windows CE Files You can identify ignored application files that you want to be recognized as applications. To identify ignored files: 1 In ConsoleOne, right-click a handheld device object, click Actions, then click Inventory. 118 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 119 2 Click the Software Inventory tab, then click the Ignored Windows CE Files icon. 3 Double-click the file you want to identify, then click Identify File. 4 Specify the name of the application you want this file to identify with, the version, and the company name.
  • Page 120: Viewing Hardware Inventory

    Hardware inventory data is collected every time the handheld device connects to the ZENworks Handheld Management Access Point. To view hardware inventory using ConsoleOne: 1 In ConsoleOne, right-click a handheld device object, then click Properties. 120 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 121 2 Click the ZENworks Inventory: Hardware Inventory tab. The device’s hardware inventory information is displayed. NOTE: For Java-based BlackBerry devices, the Password Enabled field value is not scanned for and the value is always displayed as No. The value of Power Save Mode is always Off. The serial number is same as the PIN value of the device.
  • Page 122: Viewing Network Information

    You can generate reports about the hardware and software on your handheld devices to make it easy to see the applications you have installed, which devices need upgrades, which hardware components are installed, and more. 122 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 123: Running Reports

    ZENworks Handheld Management provides predefined reports for information stored in the ZENworks Handheld Management database, including: Handheld Application objects (status, run time, and so forth) Devices (groups belonged to, distributions run, hardware/software inventory) Groups Software inventory (list of all software applications and where they are installed, unidentified files, and so forth) Hardware inventory After they are generated, reports can be viewed online, sent to a printer, or saved to a file in a variety...
  • Page 124: Exporting Reports

    After choosing the export format, you can choose the destination, such as a file, a Lotus Notes* database, or an e-mail system. To export a report: 1 Click on the toolbar. 2 Choose the format in which to export the report. 124 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 125: Creating Custom Reports

    For more information, see “Installing the ZENworks Handheld Management Server” in the Novell ZENworks 7 Handheld Management Installation Guide. IMPORTANT: If you create custom reports, the reports must be stored in a shared path if you want them to be accessed by a remote ConsoleOne installation. When saving a custom report, specify a UNC path to the share (do not use local drive letters).
  • Page 126 2 Click the tab from which you want to print data. 3 Click File, then click Print. 126 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 127: Remotely Viewing Or Controlling The Ip-Enabled Windows Ce Devices

    Remotely Viewing or Controlling the IP-Enabled Windows CE Devices The administrator or remote users can now perform Remote View or Remote Control operations with the IP-enabled Windows CE devices by configuring the WinCE Remote Management policy, and initiating a remote session with the devices. Remote View: Lets you connect with a handheld device so you can view the device instead of controlling it.
  • Page 128: Initiating A Remote View Or A Remote Control Session

    2d If prompted, enter the VNC password of the device (which is set in Section 6.2, “Setting a VNC Password on the Handheld Device,” on page 127). NOTE: If the password contains more than eight characters, only the first eight characters are validated. 128 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 129: Initiating A Remote View Or A Remote Control Session From A User Object

    6.3.2 Initiating a Remote View or a Remote Control Session from a User Object You can initiate a Remote View or a Remote Control session from a user object if a user is associated to a handheld device. 1 In ConsoleOne, right-click user object, click Actions, then click Remote Control a Handheld. NOTE: We recommend you to initiate a Remote View or Remote Control session in a secure network environment.
  • Page 130 130 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 131: Making System Configuration Changes

    Making System Configuration Changes ® ® This section discusses how to make configuration changes to your Novell ZENworks 7 Handheld Management system. The following sections contain additional information: Section 7.1, “Configuring User Authentication,” on page 131 Section 7.2, “Configuring the Proxy Service,” on page 133 Section 7.3, “Converting to Microsoft SQL Server,”...
  • Page 132 After user credentials are entered, the ZENworks Handheld Management Access Point (on the ZENworks Handheld Management Server or on another machine) authenticates the user with the directory. 4 Click Add to open the Select Objects dialog box. 132 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 133: Configuring The Proxy Service

    Section 7.2.4, “Enabling or Disabling Message Transfers,” on page 136 Section 7.2.7, “Connecting to the ZENworks Handheld Management Server,” on page 138 7.2.1 Configuring Network Settings 1 Run from the directory (by default, console.exe zfhap program files\novell\zfhap Making System Configuration Changes 133...
  • Page 134: Configuring Network Usage Restrictions

    7.2.2 Configuring Network Usage Restrictions Network usage restrictions allow you to pick how TCP/IP connections are made by the proxy service and to set bandwidth limitations. In most situations, the default settings should be sufficient. 134 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 135 (by default, console.exe zfhap program files\novell\zfhap 2 Click Operations > Configure Communications. 3 Click Network Usage Restrictions in the Network Settings page. 4 Specify the settings in the fields: LAN Adapter: The proxy service tries to make a TCP/IP connection to the ZENworks Handheld Management server using the installed LAN adapter (this is how a normal connection would be made by a proxy service directly connected to the LAN).
  • Page 136: Configuring Dial-Up Communications

    9 Click OK. 7.2.4 Enabling or Disabling Message Transfers Message transfers enable the proxy service to send messages to the ZENworks Handheld Management server. Normally, you should always leave message transfers enabled. 136 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 137: Configuring Handheld Communications

    (by default, console.exe zfhap program files\novell\zfhap 2 To enable transfers, click Operations, then click Enable Message Transfers. To disable transfers, click Operations, then click Disable Message Transfers. By default, message transfer is enabled and new messages are automatically placed in the proxy service’s message queue or out box.
  • Page 138: Connecting To The Zenworks Handheld Management Server

    Management installation machine to access the ZENworks Handheld Management Server installation directory. 2 From the installation directory, run (by default, in sqlconv.exe program ) to open the SQL Server Converter wizard. files\novell\zfh 3 Click Next. 138 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 139 4 Type the name of the machine where Microsoft SQL Server is installed, then click Next. 5 Type the name you want to assign to the ZENworks Handheld Management database when it is created in SQL, then click Next. Making System Configuration Changes 139...
  • Page 140: Compacting And Repairing The Database

    2 From the installation directory, run dbtool.exe 3 If you are sure no other process is accessing the database (for example, a remote installation of ConsoleOne), click OK. The database is compacted and the service is restarted. 140 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 141: Compacting The Proxy Service Database

    Management Access Point is installed. For more information, see “Installing the ZENworks Handheld Management Access Point on Additional Computers” in “Installing ZENworks Handheld Management Server Components” in the Novell ZENworks 7 Handheld Management Installation Guide. Making System Configuration Changes 141...
  • Page 142: Configuring Bandwidth Usage

    ZENworks Handheld Management messages because the minimum connection interval is set too high, you can change the Minimum Connect Retry value in the registry. This value is found in the registry on the IP conduit machine in: 142 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 143: Configuring The Zenworks Handheld Management Ip Clients

    For more information, see “Installing the Handheld Clients” in “Installing ZENworks Handheld Management” in the Novell ZENworks 7 Handheld Management Installation Guide. The following sections contain additional information: Section 7.6.1, “Configuring the ZENworks Handheld Management Palm OS IP Client,” on page 143 Section 7.6.2, “Configuring the ZENworks Handheld Management Windows CE IP Client,”...
  • Page 144 The following table describes the available options: ZENworks Handheld Management Palm OS IP Client Console Options Table 7-2 Click Configure Configure the handheld server address or port number 144 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 145: Configuring The Zenworks Handheld Management Windows Ce Ip Client

    Click View Log View the client log file and enable diagnostic logging About View the Palm IP client version number and copyright information. 7.6.2 Configuring the ZENworks Handheld Management Windows CE IP Client The ZENworks Handheld Management Windows CE IP client has a console ( ) that console.exe allows you to do the following:...
  • Page 146 Click Connect Now Force a connection to the IP conduit Stop/Start Client Stop/start the client 146 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 147: A Troubleshooting

    A.2 ConsoleOne Status Pages If you are experiencing problems with policies not being enforced, query-based groups not being updated, or handheld applications not being distributed, you can view status pages in Novell ® ConsoleOne to help you troubleshoot these problems.
  • Page 148: Error Messages

    “Shortcut is not created on the device. Policy status shows error as “The device has already maximum number of shortcuts” on page 149 “Unable to configure button <Button X>. The button was not found” on page 149 148 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 149: Troubleshooting Strategies

    Failed to connect to server Possible Cause: The Remote Management policy has not been configured for the Windows CE device you want to remotely control or remotely view. Action: Configure the Remote Management policy. For detail information on how to configure the policy, see Section 6.1, “Configuring WinCE Remote Management Policy,”...
  • Page 150: Why Doesn't My Handheld Device Display In Consoleone Or In The Zenworks Handheld Management Inventory Viewer

    Policy, or WinCE Configuration Policy for Uninstalling Applications is not Enforced on the Windows CE Device, the Policy Status is Reported as Enforced” on page 154 “How to Change the User Account in Novell eDirectory After Installing ZENworks 7 Handheld Management Server?” on page 154 “A Handheld device’s software inventory information in ConsoleOne is not updated.”...
  • Page 151: Handheld Devices

    To force an immediate connection to the ZENworks Handheld Management server: from the ZENworks Handheld Management Access Point service installation directory ), run , click program files\novell\zfhap by default console.exe , then click Operations Connect to Server Why are handheld applications not being installed on individual handheld devices? Possible Cause: The Handheld Application object is not configured properly.
  • Page 152: Why Don't I See Zenworks Handheld Management Inventory Information For My Registered Handheld Devices

    Management database files open so that they can record any result information they receive. You can shut down the ZENworks Handheld Management server and messenger services before the backup and restart them after the backup. 152 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 153: The Zenworks Handheld Management Client Is Not Pushed To The Palm Device

    , and Desktop Synchronization Integration files\novell\zfhap Software is installed in c:\program files\novell\zfhds The ZENworks Handheld Management dialog box is displayed. 2 Click Operations, then click Scan for Palm OS Handhelds. The following confirmation message is displayed: Count of the Palm handhelds new Palm OS handhelds have been identified.
  • Page 154: How To Change The User Account In Novell Edirectory After Installing Zenworks 7

    Windows CE or Palm OS IP Clients” in the Novell ZENworks 7 Handheld Management Installation Guide. How to Change the User Account in Novell eDirectory After Installing ZENworks 7 Handheld Management Server? Action: Do the following: 1 Run from the cfgsrvr.exe...
  • Page 155: Contacting Technical Support

    Appendix B, “Configuring SSL and HTTP Settings,” on page 157. A.5 Contacting Technical Support If your troubleshooting efforts do not provide an answer to your questions, Novell Support (http://www.novell.com/support) provides a range of support options to access top-quality technical support. Troubleshooting 155...
  • Page 156 156 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 157: B Configuring Ssl And Http Settings

    Configuring SSL and HTTP Settings ® ® By default, Novell ZENworks Handheld Management uses TCP/IP for communications between the ZENworks Handheld Management Access Point and ZENworks Handheld Management Server and between the handheld device and the ZENworks Handheld Management Access Point.
  • Page 158: Configuring The Ssl And Http Communication Between The Zenworks Handheld Management Server And The Zenworks Handheld Management Access Point

    ZENworks Handheld Management wizard. 2d3 Read the information on the initial screen, then click Next. 2d4 On the Database Type page, select Microsoft SQL Server and specify the new name in the Machine name option. 158 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 159 Handheld PCs running Windows CE 3.0 and Pocket PC 2000 devices do not support certificates originating from NCS. 3 Perform the following steps to have the certificate self-signed by Novell Certificate Services (NCS) : 3a Launch Consoleone 3b In the left pane, click Security.
  • Page 160: Configuring Ssl And Http Communication Between The Zenworks Handheld Management Access Point And The Handheld Devices

    Access Point and the Handheld Devices You can configure the SSL and HTTP communication between the ZENworks Handheld Management Access Point and the Handheld devices by using from the directory. cfgip.exe zfhap 160 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 161 We recommend you to use SSL for communication between the ZENworks Handheld Management Access Point and the Handheld devices because SSL provides the following primary security services: Message Privacy: All transmissions after the initial handshake between the ZENworks Handheld Management Access Point and the Handheld device are encrypted. Session Integrity: A secure channel is opened between the ZENworks Handheld Management Access Point and the Handheld device.
  • Page 162 Handheld PCs running Windows CE 3.0 and Pocket PC 2000 devices do not support certificates originating from NCS. 3 Have the certificate signed by a Certificate Signing Authority, such as Novell Certificate Services (NCS) or VeriSign. To have the certificate signed by NCS, continue with...
  • Page 163: Changing The Default Ports On The Zenworks Handheld Management Server And Zenworks Handheld Management Access Point Communication

    5e Click Next. 5f Click Finish. 6 You can publish a trusted SSL root certificate that Windows CE clients automatically download when they connect. This should be the root certificate of the Certificate Authority used to sign your server certificate. If you are using a third-party Certificate Signing Authority and the root certificate does not already exist on the PC or handheld device (for example, a root certificate from NCS), you can publish the root certificate so that is automatically downloaded.
  • Page 164: Changing The Default Ports For The Zenworks Handheld Management Access Point And The Handheld Devices Communication

    2 In the Configure IP - ZENworks Handheld Management Access Point dialog box, do the following: 2a Deselect the Use Default Ports check box 2b Specify the desired TCP, SSL, HTTP, and HTTPS ports that you want the ZENworks Handheld Management Access Point to use. 164 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 165 2c Click OK. 3 On the Handheld device, open the ZENworks console and do the following: For PalmOS devices, click the ZENworks menu > Server, then deselect the Use Default Port check box. Specify the port that you want the device to use for connecting to the ZENworks Handheld Management Access Point For Windows CE devices, click Configure >...
  • Page 166 166 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 167: C Security Considerations

    Security Considerations To ensure the security of your ZENworks Handheld Management System, you should use the following best practices: Make sure the database is protected, because it contains system information that is vulnerable to hacking. Use SSL to communicate between a device and the ZENworks Handheld Management Access Point, and between the Access Point and the Handheld Management Server, in order to protect the data on a wired or wireless network.
  • Page 168 168 Novell ZENworks 7 Handheld Management Administration Guide...
  • Page 169: D Documentation Updates

    This section contains information on documentation content changes that have been made in the ® ® Administration Guide after the initial release of Novell ZENworks 7 Handheld Management. The information helps you to keep current on updates to the documentation.
  • Page 170: Appendix B: Configuring Ssl And Http Settings

    Considerations,” on page 167 considerations for ZENworks 7 Handheld Management. D.3 December 9, 2005 Page design of the entire guide was reformatted to comply with revised Novell documentation standards. D.4 October 7, 2005 Updates were made to the following sections. The changes are explained below.
  • Page 171: Using Zenworks Handheld Management Policies

    D.4.2 Using ZENworks Handheld Management Policies The following changes were made in this section: Location Change “BlackBerry Configuration Policy” Added the following note: on page 30 “This policy is not supported for Java-based BlackBerry devices.” “BlackBerry Security Policy” on Added the following note: page 34 “This policy is not supported for Java-based BlackBerry devices.”...
  • Page 172 172 Novell ZENworks 7 Handheld Management Administration Guide...

Table of Contents