1. Manuals
  2. Brands
  3. Novell Manuals
  4. Software
  5. ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - POLICY MANAGEMENT REFERENCE 10.3...
  6. Management manual

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - POLICY MANAGEMENT REFERENCE 10.3 30-03-2010 Management Manual

Policy management reference
Hide thumbs Also See for ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - POLICY MANAGEMENT REFERENCE 10.3 30-03-2010:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Reference Manual, Management Manual
AUTHORIZED DOCUMENTATION
Policy Management Reference
Novell
®
ZENworks
10 Configuration Management SP3
®
10.3
March 30, 2010
www.novell.com
ZENworks 10 Configuration Management Policy Management Reference

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - POLICY MANAGEMENT REFERENCE 10.3 30-03-2010 and is the answer not in the manual?

Questions and answers

Related Manuals for Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - POLICY MANAGEMENT REFERENCE 10.3 30-03-2010

Summary of Contents for Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - POLICY MANAGEMENT REFERENCE 10.3 30-03-2010

  • Page 1 AUTHORIZED DOCUMENTATION Policy Management Reference Novell ® ZENworks 10 Configuration Management SP3 ® 10.3 March 30, 2010 www.novell.com ZENworks 10 Configuration Management Policy Management Reference...
  • Page 2 Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
  • Page 3 Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/ trademarks/tmlist.html). Third-Party Materials All third-party trademarks are the property of their respective owners.
  • Page 4 ZENworks 10 Configuration Management Policy Management Reference...

  • Page 5: Table Of Contents

    Contents About This Guide 1 Overview What Is a Policy? ............11 What Is a Policy Group? .
  • Page 6 3.15 Incrementing the Policy Version..........57 3.15.1 Using the Action Menu.
  • Page 7 C.2.1 Creating an iPrint Printer ..........98 C.2.2 Cloning an iPrint Printer .
  • Page 8 ZENworks 10 Configuration Management Policy Management Reference...

  • Page 9: About This Guide

    ZENworks 10 Configuration Management SP3 documentation (http:// www.novell.com/documentation/zcm10/). Documentation Conventions In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and items in a cross-reference path. ® A trademark symbol ( , etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark.
  • Page 10 ZENworks 10 Configuration Management Policy Management Reference...

  • Page 11: Overview

    Overview ® ® Novell ZENworks 10 Configuration Management provides policies to configure operating system settings and select application settings. By applying a policy to multiple devices, you can ensure that all of the devices have the same configuration. The following sections contain additional information: Section 1.1, “What Is a Policy?,”...

  • Page 12: Understanding The Policy Types

    1.3 Understanding the Policy Types ZENworks 10 Configuration Management lets you create the following policy types: Browser Bookmarks Policy: Lets you configure Internet Explorer* favorites for Windows* devices and users. Dynamic Local User Policy: Lets you create new users and manage existing users created on Windows 2000, Windows XP, and Windows Vista* workstations;...
  • Page 13 In ZENworks Control Center, devices and users can be organized by using containers and groups. A device or user can be a member of multiple groups. The containers can be nested within other containers. If a policy is associated to a group of users, it applies to all users in that group.
  • Page 14 Plural Policy: If multiple policies of the same policy type are assigned to a device or a user and the policy type is a Plural type, then all policies meeting the associated system requirement are applied. The Browser Bookmarks policy, Local File Rights policy, Windows Group policy, and Printer policy are plural policies.

  • Page 15: Creating Policies

    Creating Policies ® ® Novell ZENworks 10 Configuration Management lets you create policies by using ZENworks Control Center or by using the zman command line utility. The following sections contain step-by-step instructions about creating policies by using ZENworks Control Center: Section 2.1, “Browser Bookmarks Policy,”...

  • Page 16: Dynamic Local User Policy

    The following list contains browser-specific information to create the exported file: Internet Explorer 6.x/8.x: In the browser window, click File > Import and Export. Follow the instructions given in the Import/Export Wizard to create the bookmark.htm file. Internet Explorer 7: In the browser window, click Add to Favorites > Import and Export.
  • Page 17 NOTE: Ensure that the latest version of the Novell client is installed on the managed device before the Dynamic Local User policy is enforced. To obtain the latest version of Novell Client , see the Novell Download Web site (http://download.novell.com/index.jsp).
  • Page 18 Field Details Cache Volatile User for Allows you to specify the number of days to cache the volatile user Time Period (Days) account on the device. The default value is 5. You can specify a value from 1 to 999 days. This volatile user account is deleted after the expiry of the specified cache period when another DLU user logs out from the device.
  • Page 19 Excluded List Included List Result Workstation Group-1 Workstation-A The policy is not applied on any workstations in Workstation Group-1, except for Workstation -A. The policy is applied on workstations that are not contained in Workstation Group-1. Container-1 Workstation Group-1 or The policy is not applied on Workstation-A any workstations in Container-...

  • Page 20: Local File Rights Policy

    6 Click Next to display the File Rights page. The following table contains information about managing Dynamic Local User file system access on the managed device: Field Details Allows you to select and assign appropriate file rights. To add a file/folder: 1.
  • Page 21 Policy Name: Provide a name for the policy. The policy name must be different than the name of any other item (group, folder, and so forth) that resides in the same folder. The name you provide displays in ZENworks Control Center. Folder: Type the name or browse to and select the ZENworks Control Center folder where you want the policy to reside.
  • Page 22 Field Details Permission for Allows you to configure permissions for users or groups. Users or Groups 1. Click Add, then Click User or Group to select a user or a group from the appropriate drop-down list. 2. Select the type of permission you want to configure as Simple NTFS Permissions or All NTFS Permissions.

  • Page 23: Printer Policy

    2.4 Printer Policy The Printer policy allows you to configure Local, SMB, HTTP, and iPrint printers on a Windows device. 1 In ZENworks Control Center, click the Policies tab. 2 In the Policies list, click New, then click Policy to display the Select Policy Type page. 3 Select Printer Policy, click Next to display the Define Details page, then fill in the fields: Policy Name: Provide a name for the policy.
  • Page 24 .inf installation of the driver. NOTE: To add a new printer driver to the existing driver list: Edit the zenworks_installdir\novell\zenworks\share\tomcat\webapp s\zenworks\WEB-INF\conf\printerDriverDetails.conf file to add the following line: Printer_ Manufacturername = Printer_ Model For example, if you want to add an HP* Color LaserJet* 4550 PCL printer,...
  • Page 25 8 (Conditional) If you are configuring an iPrint printer, refer to the following table for more information: On Windows Vista devices, you need to install the Novell iPrint client 5.04 or later. Field Details Name / Location Specify the URI name of the iPrint printer.
  • Page 26 Field Details Install iPrint Client Select this option to install the iPrint client on a target machine. The iPrint client is not supported on 64-bit versions of Windows Server 2003. The installation file can be either nipp.zip nipp-s.exe , both of which are capable of carrying out non-interactive silent installation.These files can be uploaded from the machine where the browser is running.

  • Page 27: Remote Management Policy

    Field Details Paper Size Specify the paper size for the printer. You can specify any paper size supported by the printer, in addition to the options listed in the menu. Information on supported sizes is available in the printer documentation or in the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\printer-...

  • Page 28: Roaming Profile Policy

    2.6 Roaming Profile Policy The Roaming Profile policy allows you to create a user profile that is stored in a network path. An administrator can either use the roaming profile stored in the user’s home directory or the profile stored in the network directory location. IMPORTANT: Because of the security settings in Microsoft Vista, administrators must manually add the appropriate security rights to the user registry hive to enable roaming profiles.

  • Page 29: Snmp Policy

    2.7 SNMP Policy The SNMP policy allows you to configure SNMP parameters on the managed devices. 1 In ZENworks Control Center, click the Policies tab. 2 In the Policies list, click New, then click Policy to display the Select Policy Type page. 3 Select SNMP Policy, click Next to display the Define Details page, then fill in the fields: Policy Name: Provide a name for the policy.

  • Page 30: Windows Group Policy

    Field Details Add a Trap Target Allows you to add a trap target for the SNMP service. IP Address / Host Name Specify an IP address or host name of the target device. Community String Specify a community string for the trap target defined in IP address/ Host name.
  • Page 31 Manage Before you can configure the Group Policy, you need to install a helper application. Click Install the Group Policy Helper to install the novell- zenworks-grouppolicyhelper-10.x.x.x.msi , which is a Windows installer package. This installation needs to be done only once. After the helper is installed, clicking Configure launches the helper, which you then use to configure or import a policy.

  • Page 32: Zenworks Explorer Configuration Policy

    6 Click Finish to create the policy now, or select Define Additional Properties to specify additional information, such as policy assignment, system requirements, enforcement, status, and which group the policy is a member of. If the login/logoff scripts are configured in a user-associated group policy and the After enforcement, force a re-login on the managed device, if necessary option in the Apply Immediatesection of the General Settings is selected, then a relogin is forced and the login scripts run when the user logs into the managed device again.
  • Page 33 Field Details Enable Folder View Use this option to display a folder list in the application window. The values are Yes, No, and Unconfigured. The default value is Unconfigured and the existing settings of the managed device are retained. Expand the Entire Use this option to expand the entire folder tree when the application Folder Tree window is opened.

  • Page 34: Creating Policies By Using The Zman Command Line Utility

    Field Details Start the ZENworks Use this option to specify whether the [All] folder should be displayed Explorer with the {All} when ZENworks Explorer starts. Folder Displayed The values are Yes, No, and Unconfigured. The default value is Unconfigured and the existing settings of the managed device are retained.
  • Page 35 <PolicyData> <Actions> <PolicyData> shown below. <ns2:ActionSets> <Id>879de60b7591b6f6aefae09fcd83db54</Id> <Type>Enforcement</Type> <Version>1</Version> <Modified>false</Modified> <Actions> <Id>0ab9a1785370bcd38bc862bd2817abac</Id> <Name>browserbookmarkspolicy</Name> <Type>browserbookmarkspolicy</Type> <Data> <PolicyData xmlns="http://novell.com/zenworks/datamodel/objects/ policies"> <BookmarksPolicyHandlerData xmlns=""> <EnforcePolicy> <Bookmarks> <Bookmark Type="url_string"> <Name>Google</Name> <Url>http://www.yahoo.com</Url> <Folder>/</Folder> </Bookmark> </Bookmarks> </EnforcePolicy> </BookmarksPolicyHandlerData> </PolicyData> </Data> <ContinueOnFailure>true</ContinueOnFailure> <Enabled>true</Enabled>...

  • Page 36: Creating A Policy With Content

    <Modified>false</Modified> <Actions> <Id>27c4a42544210b3ac3b067ff6aff2d5c</Id> <Name>Distribute Action</Name> <Type>Distribute Action</Type> <ContinueOnFailure>true</ContinueOnFailure> <Enabled>true</Enabled> <Properties /> </Actions> </ns2:ActionSets> <ApplyImmediate>false</ApplyImmediate> <PolicyData> <BookmarksPolicyHandlerData> <EnforcePolicy> <Bookmarks> <Bookmark Type="url_string"> <Name>Google</Name> <Url>http://www.yahoo.com</Url> <Folder>/</Folder> </Bookmark> </Bookmarks> </EnforcePolicy> </BookmarksPolicyHandlerData> </PolicyData> 4 Create a new policy by using the following command: zman policy-create new_policy_name policy_xml_filename.xml For example, to create the yahoo policy, use the following command: zman policy-create yahoo google.xml 2.10.2 Creating a Policy with Content...

  • Page 37: Understanding The Zman Policy Xml File Format

    Action Sets and their actions. The file does not include information about assignment of the policy to devices or users. A sample XML format template, , is available at WindowsGroupPolicy.xml /opt/novell/ on a Linux server and in zenworks/share/zman/samples/policies ZENworks_Installation_directory:\Novell\Zenworks\share\zman\samples\policies on a Windows server.
  • Page 38 For example, a Printer policy can have the printer drivers to be installed as associated file content. A sample XML format template, , is available at ActionInfo.xml /opt/novell/zenworks/ on a Linux server and in share/zman/samples/policies ZENworks_Installation_directory:\Novell\Zenworks\share\zman\ on a Windows server.
  • Page 39 <ActionSet type="Enforcement"> <Action name="printer policy" index="1"> <Content> <ContentFilePath>driver1.zip</ContentFilePath> </Content> <Content> <ContentFilePath>driver2.zip</ContentFilePath> </Content> </Action> </ActionSet> </ActionInformation> Creating Policies...
  • Page 40 ZENworks 10 Configuration Management Policy Management Reference...

  • Page 41: Managing Policies

    Managing Policies ® ® Novell ZENworks 10 Configuration Management lets you use effectively manage software and content in your ZENworks system. In addition to editing and deleting existing objects, you can create new objects and perform various tasks on the objects.

  • Page 42: Editing Policies

    Group Name: Provide a unique name for your policy group. The name you provide displays in the ZENworks Control Center interface. Folder: Type the name or browse to and select the folder that contains this policy group Description: Provide a short description of the policy group’s content. This description displays in ZENworks Control Center.

  • Page 43: Deleting Policies

    Task Steps Additional Details Rename a policy 1. Select the check box next to the If more than one check box is selected, policy. the Rename option is not available in the Edit menu. 2. Click Edit > Rename, then specify the new name.

  • Page 44: Assigning A Policy To Devices

    5 (Conditional) If you are adding selected items to an existing group, the Targets page is displayed. Select the groups to which you want to add the objects (users, devices, bundles, policies). You can add any number of policies to the group. You cannot add other policy groups to the group.
  • Page 45 4 Browse for and select the devices, device groups, and device folders to which you want to assign the group. To do so: 4a Click next to a folder (for example, the folder or folder) to Workstations Servers navigate through the folders until you find the device, group, or folder you want to select. If you are looking for a specific item, such as a Workstation or a Workstation Group, you can use the Items of type list to limit the types of items that are displayed.

  • Page 46: Assigning A Policy To Users

    2003, Windows Server 2008, and Windows Server 2008 R2 devices. For more information, see the Policy Management issue in the ZENworks 10 Configuration Management SP3 Readme (http://www.novell.com/documentation/zcm10/). 3.6 Assigning a Policy to Users Certain key points that you must be aware of before you assign a policy to a user are as follows There are two types of users: users in the corporate directory and local users on managed devices.

  • Page 47: Assigning A Roaming Profile Policy That Has User Profile Stored On A Windows Share Location To Users On A Windows Vista, Windows Server 2008, Or Windows 7 Device

    4b Click the underlined link in the Name column to select the user, group, or folder and display its name in the Selected list box. 4c Click OK to add the selected devices, folders, and groups to the Users list. 5 Click Next to display the Finish page, review the information and, if necessary, use the Back button to make changes to the information.

  • Page 48: Creating A Default Profile Folder In A Shared Location

    For information on configuring the registry hive permissions, see Section 3.7.3, “Configuring the Permissions for the Default Profile Registry Hive,” on page 4 Copy the default profile to user folders. For information on copying the default profile to user folders, see Section 3.7.4, “Copying the Default Profile to User Folders,”...

  • Page 49: Copying The Default Profile To User Folders

    2 Select HKEY_USERS, then click File > Load Hive. 3 Open the file from the default profile folder created in Section 3.7.1, “Creating a NTUSER.DAT Default Profile Folder in a Shared Location,” on page file might be hidden. To unhide the file: NTUSER.DAT 1.

  • Page 50: Unassigning A Policy From Devices

    Value Data: language For example, on a device with the English language, language is English (American). You can use the registry editor to determine the value data of the language. 2c Click Apply. 3 Assign the policy to the device. For more information on assigning a policy to a device, see Section 3.5, “Assigning a Policy to Devices,”...

  • Page 51: Filter Conditions

    3 Click the Requirements tab. 4 Click Add Filter, select a filter condition from the drop-down list, then fill in the fields. As you construct filters, you need to know the conditions you can use and how to organize the filters to achieve the desired results.
  • Page 52 Environment Variable Exists: Determines if a specific environment variable exists on the device. After specifying the environment variable, the two conditions you can use to set the requirement are Yes and No. If you select Yes, the environment variable must exist on the device to meet the requirement.
  • Page 53 The two conditions you can use to set the requirement are Yes and No. If you select Yes, the device must be using the Novell Client to meet the requirement. If you select No, it must not be using the Novell Client.

  • Page 54: Filter Logic

    Registry Key Exists: Determines if a registry key exists. After specifying the key name, the two conditions you can use to set the requirement are Yes and No. If you select Yes, the specified key must exist to meet the requirement. If you select No, the key must not exist. Registry Key Value: Determines if a registry key value exists on the device.

  • Page 55: Disabling Policies

    For example, “(u AND v AND w) OR (x AND y AND z)” means “match either uvw or xyz.” In the filter list, this looks like: u AND v AND x AND y AND Nested Filters and Filter Sets Filters and filter sets cannot be nested. You can only enter them in series, and the first filter or filter set to match the device is used.
  • Page 56 2 In the Bundles list, select the check box next to the policy (or policies). 3 Click Action > Specify Content Server to display the New Content Replication Rules page. 4 Specify the default replication behavior for new servers added to the system: New Primary Servers Will: Specify the default replication behavior for new ZENworks Primary Servers added to the system: Include This Content: Replicates the content to any servers created in the future.

  • Page 57: Incrementing The Policy Version

    This page lets you specify on which content servers (ZENworks Servers and satellite servers) the content is hosted. The relationships between content and content servers that you create using this wizard override any existing relationships. For example, if Policy A is currently hosted on Server 1 and Server 2 and you use this wizard to host it on Server 1 only, Policy A is excluded from Server 2 and is removed during the next scheduled replication.

  • Page 58: Editing The Policy

    Windows Vista, Windows 7, Windows Server 2008, or Windows Server 2008 R2 device. This is because the Novell Client login dialog box is not displayed on the device and only the Remote Desktop login is performed on the device.

  • Page 59: Viewing The Predefined Reports

    2008 or Windows Server 2008 R2 device if you have launched the terminal session from a Windows Vista, Windows 7, Windows Server 2008, or Windows Server 2008 R2 device. This is because Novell Client login dialog box is not displayed on the device and only the Remote Desktop login is performed on the device.
  • Page 60 Content By Bundle and Policy: Displays the content information for the bundles and policies. This information includes the content server, content type, replication state, and disk space. For more information on creating and managing reports, see the ZENworks 10 Configuration Management System Reporting Reference documentation.

  • Page 61: Managing Policy Groups

    Managing Policy Groups A policy group lets you group policies to ease administration and to provide easier assigning and scheduling of the policies in the policy group. ® You can use ZENworks Control Center or the zman command line utility to create policy groups. This section explains how to perform this task using the ZENworks Control Center.

  • Page 62: Renaming Or Moving Policy Groups

    4b Browse for and select the policies you want to add to the group. To do so: 4b1 Click next to a folder to navigate the folders until you find the policy you want to select. If you know the name of the policy you are looking for, you can also use the Item name box to search for the bundle.

  • Page 63: Assigning A Policy Group To Devices

    To delete the policy group: 1 In ZENworks Control Center, click the Policies tab. 2 In the Policies list, select the check box next to the policy group (or policy groups). 3 Click Delete. 4.4 Assigning a Policy Group to Devices 1 In ZENworks Control Center, click the Policies tab.

  • Page 64: Adding A Policy To A Group

    4.6 Adding a Policy to a Group For more information, see Section 3.4, “Adding Policies to Groups,” on page ZENworks 10 Configuration Management Policy Management Reference...

  • Page 65: Managing Folders

    Managing Folders A folder is an organizational object. You can use folders to structure your polices and policy groups ® into a manageable hierarchy for your ZENworks system. For example, you might want a folder for each type of policy (Browser Bookmarks policy, Dynamic Local User policy, and so forth), or, if applications are department-specific, you might want a folder for each department (Accounting Department folder, Payroll Department folder, and so forth).

  • Page 66: Deleting A Folder

    Move: Click Move, choose a destination folder for the selected objects, then click OK. 5.3 Deleting a Folder Deleting a folder also deletes all of its contents (policies, policy groups, and subfolders). 1 In ZENworks Control Center, click the Policies tab. 2 In the Policies list, select the check box next to the folder (or folders).

  • Page 67: A Troubleshooting Policy Management

    68 “Unable to apply the Browser Bookmark Policy. For more information, see the ZENworks error message online documentation at http://www.novell.com/documentation” on page 68 “On a managed device, empty folders cannot be created in a user’s favorites folder” on page 68 “The Browser Bookmarks policy fails on a Windows Vista managed device”...

  • Page 68: Browser Bookmarks Policy Troubleshooting

    Action: When creating the policy, ensure that special characters such as ! , *, / , or \\ are not used in the bookmark name. Unable to apply the Browser Bookmark Policy. For more information, see the ZENworks error message online documentation at http://www.novell.com/ documentation Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy.

  • Page 69: Dynamic Local User Policy Errors

    The Browser Bookmarks policy settings are not removed from the user’s Favorites when the ZENworks Adaptive Agent is uninstalled Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Explanation: If a Browser Bookmarks policy is assigned to a user or the managed device, the Browser Bookmarks policy settings are not removed from the user’s Favorites when the ZENworks Adaptive Agent is uninstalled.

  • Page 70: Dynamic Local User Policy Troubleshooting

    Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). There was an error while applying settings for the file filename Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Action: Turn on debug logging on the managed device and refer to the zmd- file to obtain more details about the error.
  • Page 71 Dynamic Local User is unable to log on to the managed device Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Explanation: If the password of the Dynamic Local User in the user source does not meet the password complexity requirements, the user fails to log on to the managed device.

  • Page 72: General Policy Troubleshooting

    1 Open the Registry Editor. 2 Go to \ HKLM\SOFTWARE\Novell\NWGINA\Dynamic Local User 3 Create a DWORD called , and set the value EnableEDirPasswordForFA to 1.
  • Page 73 Explanation: If ZENworks Control Center is opened by more than one user at the same time and a new user source is added to the management zone by one of the users, the newly added user source is not reflected in the other open sessions of ZENworks Control Center.

  • Page 74: Local File Rights Policy Errors

    For more messages.log information on how to turn on debug logging, see the “Message Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). ZENworks 10 Configuration Management Policy Management Reference...

  • Page 75: Local File Rights Policy Troubleshooting

    Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). A.7 Local File Rights Policy Troubleshooting “The user permissions configured in the Local File Rights policy are not effective on the device”...
  • Page 76 “Failed to add iprint printer printer_name” on page 77 “An incorrect error message that the iPrint policy could not be enforced is displayed on the managed device” on page 78 Printer driver installation failed for printer_name. The provided driver install file type is not supported Source: ZENworks 10 Configuration Management;...
  • Page 77 Unable to extract iprint client installer from the content Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Possible Cause: The iPrint client attached with the Printer policy is not available on the managed device. This error message can occur if the policy is enforced immediately after it’s created.

  • Page 78: Printer Policy Troubleshooting

    An incorrect error message that the iPrint policy could not be enforced is displayed on the managed device Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Explanation: The iPrint policy might take some time to install an iPrint printer on a device, depending on the size of the iPrint printer driver and the network connectivity.
  • Page 79 printer model name on the Windows managed device. For example, if you select HP LaserJet 8100 Series PCL6, the printer driver is installed only on the managed devices having the HP LaserJet 8100 Series PCL6 printer model. Consequently, the driver is not installed on the Windows 2000 managed device.
  • Page 80 Action: Do the following: 1 Uninstall the iPrint Client 4.x from the device. 2 Download the iPrint Client 5.x from the Novell Downloads site (http:// download.novell.com/index.jsp). 3 Install the iPrint Client 5.x on the managed device. For more information on installing the iPrint Client, see Step 8 Section 2.4, “Printer Policy,”...

  • Page 81: Roaming Profile Policy Errors

    Installation of the network printer might fail on a Windows Server 2008 R2 device Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Explanation: If you assign a Printer policy that has a Network printer configured for a Windows Server 2008 R2 device, the installation of the printer might fail if the Internet Printing Client is not installed on the device.

  • Page 82: Roaming Profile Policy Troubleshooting

    Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). A.11 Roaming Profile Policy Troubleshooting “Unable to enforce a Roaming Profile policy on a Windows Vista, Windows 7, Windows Server 2008, or Windows Server 2008 R2 device if the user profile is stored in a shared folder on a Windows Server 2003 device”...

  • Page 83: Snmp Policy Errors

    Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). The policy policy_name could not be successfully enforced as policy data was empty Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy.
  • Page 84 “Message Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). The policy policy_name was not applied Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Action: Ensure that the managed device meets the ZENworks Configuration Management requirements.
  • Page 85 Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). There was an error while cleaning up Group policy settings at logout for user username Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy.

  • Page 86: Windows Group Policy Troubleshooting

    Explanation: The error message might occur while creating or editing group policies for Windows XP SP1 or SP2 managed device. Possible Cause: The Windows Hotfix KB897327 is not installed on the Windows XP SP1 or SP2 managed device. Action: Ignore the error message if you are not configuring security settings in the Windows Group Policy.

  • Page 87: Unenforced

    “Group Policy created on a device with a specific operating system is not enforced on a device with a different operating system” on page 90 “Configuring Group Policy on a 64-bit version of Windows Vista device, Windows Server 2008, and Windows 7 device is not yet supported” on page 90 “Scripts configured through Active Directory Group policy are not enforced on a device.”...

  • Page 88: The Security Settings Configured In The Windows Group Policy Are Not Applied On A Windows Xp Sp1 Or Sp2 Managed Device

    Action: If you assign multiple policies to a device, ensure that the policy whose security settings you want to be effective on the device is applied last on the device. The Security settings configured in the Windows Group policy are not applied on a Windows XP SP1 or SP2 managed device Source: ZENworks 10 Configuration Management;...

  • Page 89: Unable To Export Group Policy Content

    Unable to export Group Policy content Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Explanation: If you use the command to export a policy with content, the content zman file) is not exported. .zip Action: Perform the following steps: 1.

  • Page 90: Assigning An Active Directory Group Policy To A User Or A Device Might Generate Some Application Event Logs On The Device

    Assigning an Active Directory Group policy to a user or a device might generate some application event logs on the device Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy. Explanation: If you configure an Active Directory Group policy and assign the policy to a user or a device, some application event logs might be generated on the device even if the policy is successfully enforced on the device.

  • Page 91: Zenworks Explorer Configuration Policy Errors

    For more messages.log information on how to turn on debug logging, see the “Message Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). Troubleshooting Policy Management...
  • Page 92 “Message Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). There was an error while setting the desktop icon name Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy.
  • Page 93 Logging” in ZENworks 10 Configuration Management System Administration Reference. Action: If the problem persists, contact Novell Support (http://www.novell.com/ support). There was an error while configuring the setting "Expand the entire folder tree" Source: ZENworks 10 Configuration Management; Policy Management; Browser Bookmarks Policy.
  • Page 94 ZENworks 10 Configuration Management Policy Management Reference...

  • Page 95: B Best Practices

    B.2 Dynamic Local User Policy Ensure that the latest version of the Novell Client is installed on the managed device before the Dynamic Local User policy is enforced. To obtain the latest version of Novell Client, see Novell Download Web site (http://download.novell.com/index.jsp).

  • Page 96: Windows Group Policy

    B.5 Windows Group Policy Do not apply the Windows Group policy on Windows 2000 or Windows 2003 domain controllers. Do not apply the Windows Group policy to a Windows managed device that is a part of the Microsoft domain and has a group policy from the Windows domain controller applied. The ZENworks Windows Group policy must be applied only if the group policy from the Windows domain controller is not applied.

  • Page 97: C Iprint Policy Management Utility

    Install the utility on a device that is not a ZENworks server. 1 Copy the file from the ippmanagement.zip ZENworks_installation_directory\novell\zenworks\install\downloads\tools directory to a temporary location. Download the file from ZENworks Control Center (in the Common Tasks, click Download ZENworks Tools > Administrative Tools).

  • Page 98: Using Ippman Commands To Configure Iprint Printers

    C.2 Using IPPman Commands to Configure iPrint Printers You can configure iPrint printers by using ZENworks Control Center or by using the zman command line utility. In addition, you can use the IPPman utility to perform repetitive and mass operations on printer policies that have an iPrint printer matching a specific iPrint URI or matching a specific search criteria.

  • Page 99: Cloning An Iprint Printer

    Example: ippman create -uri ipp://10.0.0.0/ipp/Printer1 -conf "c:\\printerdata.xml" -server 10.0.0.0 -port 80 -username Administrator -password xxxxx Options Used with the Create Command Table C-1 Option Description URI of the iPrint printer to search. conf iPrint printer configuration file containing the printer name and the printing preferences.

  • Page 100: Renaming An Iprint Printer

    Options Used with the Clone Command Table C-2 Option Description URI of the iPrint printer to search. uri2 URI of the iPrint printer to clone. default Whether this is the default printer. The available options are true or false. updatedriver Update the printer driver.

  • Page 101: Modifying An Iprint Printer

    Options Used with the Rename Command Table C-3 Option Description URI of the iPrint printer to search. uri2 URI of the iPrint printer to rename. default Whether this is the default printer. The available options are true or false. updatedriver Update the printer driver.

  • Page 102: Deleting An Iprint Printer

    Options Used with the Modify Command Table C-4 Option Description URI of the iPrint printer to search. conf iPrint Printer Configuration file containing the printer name and the printing preferences. username and Credentials of the ZENworks administrator. password server IP address of the ZENworks server. port Port of the ZENworks server.

  • Page 103: Exporting Iprint Printer

    To refer to the online help for the command, enter the following command: ippman delete -help C.2.6 Exporting iPrint Printer To export the iPrint printer configuration for all policies that match a specific printer URI criteria, use the command. ippman export On a ZENworks server, enter the command as follows: ippman export -uri iprint_printer_uri -folder export_folder -username username -password password...
  • Page 104 For information on the format of the file, see Section C.5, “iPrint Printer List Import File Format,” on page 106. 1 (Conditional) Depending on the requirements, modify the XML file created when you export the iPrint printer. For more information on exporting the iPrint printer, see “Exporting iPrint Printer”...

  • Page 105: Understanding The Format Of The Iprint Printer Configuration File

    C.3 Understanding the Format of the iPrint Printer Configuration File The iPrint printer configuration file contains information about the iPrint printer such as printer name, iPrint URI, and the printing preferences. Section C.3.1, “Format of iPrint Printer Configuration File with Default Printing Preferences,” on page 105 Section C.3.2, “[Example] iPrint Printer Configuration File with Some Printing Preferences Specified,”...

  • Page 106: Printing Preferences For An Iprint Printer

    </DefaultPrintingPreferences> </Printer> C.4 Printing Preferences for an iPrint Printer iPrint Printer Printing Preferences Table C-8 Printing Preference Possible Values Default Value PrinterOrientation Portrait, Landscape Portrait Duplex true, false true Collate true, false true PrintQuality High, Low high PaperSource Auto, Cassette, Envelope, Envmanual, No default value Formsource, Largecapacity, Lower, Largefmt, Largecapacity, Manual,...

  • Page 107: D Documentation Updates

    Documentation Updates This section contains information on documentation content changes that were made in this ZENworks Policy Management Reference for Novell® ZENworks® 10 Configuration Management SP3. The information can help you to keep current on updates to the documentation. The documentation for this product is provided on the Web in two formats: HTML and PDF. The HTML and PDF documentation are both kept up-to-date with the changes listed in this section.
  • Page 108 Location Change Section A.4, “Dynamic Local Updated the section. User Policy Troubleshooting,” on page 70 Section A.8, “Printer Policy Added the following scenario: Errors,” on page 75 “An incorrect error message that the iPrint policy could not be enforced is displayed on the managed device” on page Section A.9, “Printer Policy Updated the section.

This manual is also suitable for:

Zenworks 10 configuration management sp3

Table of Contents