Functionality
This command is compatible with version earlier than V13.2.0.
This command can be used to modify the policies/properties set in MC window of earlier V13.2.0, and items that cannot be modified in main menu of later V14g. In addition, for “File Saving Directory”, it can be confirmed in the information output by -o|-out parameter.
Please perform these settings after installing CS and DS.
Record format
CustomPolicy.exe | [-sv.file.stragePath File Collection Saving Folder] [-sv.patch.retry.count Download Retry Count of Patch] [-sv.patch.retry.interval Download Retry Interval of Patch] [-sv.swlist.uptime Update Time of Software List] [-sv.swlist.interval Update Interval of Software List] |
CustomPolicy.exe | [-sv.admin.number Administrator Number] [-sv.buffer.size Transmission Buffer Size] [-sv.retry.interval Error Retry Interval] [-sv.retry.count Error Retry Count] [-sv.buffer.timeout Error Timeout Period] [-sv.transfer.interval Transmission Interval] [-sv.polling.time Polling Interval] [-sv.enable.outPolicy on|off] [-sv.soft.strageSize Size of Software Saving Folder] [-sv.soft.extendPath Software Saving Extension Folder] [-sv.soft.extendSize Size of Software Saving Extension Folder] [-sv.patch.dlv.svr on|off] -host Host Name 1 |
CustomPolicy.exe | [-cl.diff.collect on|off] [-cl.diff.collectExe on|off] [-cl.logon.delay on|off] [-cl.recollect.inventory on|off] [-cl.ctsetup.deffile on|off] [-cl.auto.change on|off] [-cl.restrict.change on|off] [-cl.chk.guestpw on|off] [-cl.soft.exec.flag on|off] [-cl.patch.interrupt on|off] [-cl.connect.retry on|off] [-cl.transfer.retryMode 0|1] [-cl.task.enabled on|off] [-cl.task.getInterval Confirmation Interval] -host Host Name 1 |
CustomPolicy.exe | -o|-out type [-host Host Name 2] |
CustomPolicy.exe | -h|-help |
Option
This option can be specified in CS environment only.
In the file collection saving folder, the saving folder that collects files through “File Collection” function can be specified.
When viewing the collected files, the contents (cannot be viewed through main menu) under the above mentioned folder can be viewed directly by using Explorer, etc. in the CS.
When viewing the collected files, please view the following folder.
“File Collection Saving Folder”\file\“User ID”+“Upstream Server Name” |
Example)
The file collection saving folder is: \tmp, the user ID is 0001, PC name is host1, and the upstream server name is upperhost.
C:\tmp\file\0001+host1+upperhost
This option can be specified in CS environment only.
The retry count can be specified when downloading patches from public sites from Microsoft company and an error occurred.
A numeral (times) within a range from 0 to 100 can be specified in the download retry count of patch. And the initial value is three times.
This option can be specified in CS environment only.
The retry interval can be specified when downloading patches from public sites from Microsoft company and an error occurred.
A numeral (second) within a range from 0 to 600 can be specified in the download retry interval of patch. And the initial value is 300 seconds.
This option can be specified in CS environment only.
The update time of software list can be specified.
Specify the time in the update time of software list according to the following format.
MM:DD |
Specify hour. A numeral within a range from 0 to 23 can be specified.
Specify minute. A numeral within a range from 0 to 59 can be specified.
Example) It describes how to specify time when updating the software list at 11:30 pm.
23:30 |
This option can be specified in CS environment only.
The update interval of software list can be specified.
A numeral (minute) within a range from 30 to 1,440 can be specified in update interval. Its initial value is 60 minutes.
The administrator number within 20 characters can be specified.
The single-byte letters and numerals, and single-byte symbols such as “-”, “@”, “.”, “_” can be used in administrator number.
When linking Systemwalker Centric Manager with Inventory information, the configuration value of this administrator number can be used as “User ID”.
The size of buffer for transmission can be specified when communicating with upstream server.
A numeral (KB) within a range from 1 to 9,999 can be specified for the transmission buffer size. Its initial value is set as 32KB.
The retry interval for transmission can be specified when communicating with upstream server and an error occurred.
A numeral (second) within a range from 1 to 999 can be specified for the retry interval. Its initial value is 5 seconds.
The retry count for transmission can be specified when communicating with upstream server and an error occurred.
A numeral (times) within a range from 1 to 999 can be specified for the retry count. Its initial value is 5 times.
The timeout period from an exception occurring in communication with upstream server to making judgment can be specified.
A numeral (times) within a range from 1 to 999 can be specified for error timeout period. Its initial value is 60 seconds.
The transmission interval can be specified when communicating with upstream server.
A numeral (millisecond) within a range from 1 to 2,147,483,647 can be specified for transmission interval. Its initial value is 5 milliseconds.
The confirmation interval used to transmit Inventory information to upstream server can be specified.
A numeral (minute) within a range from 1 to 9,999 can be specified for the polling interval. Its initial value is 5 minutes.
The Inventory information notified by client is temporarily saved in server folder. Search the folder in polling interval, and if there is Inventory information, notify the upstream server.
The command is used when downloading policies/properties in the time specified in non-“Download Time Frame”.
Enable function. Also download policies/properties in non-specified time frame. (Initial Value)
Disable function.
The maximum size of software that can be saved in “Software Saving Folder” specified when installing server can be specified.
A numeral (MB) within a range from 1 to 999,999 can be specified for the size of software saving folder.
The backup saving folder can be specified when there is no available capacity in software saving folder.
Specify an absolute path within 128 characters in the software saving extension folder.
Once the configuration value of this option is set, it cannot be modified.
Please specify the folder existing on server. As there is no available capacity in “Software Saving Folder”, the software cannot be saved on server, therefore, the distribution result will be in abnormal status.
The maximum size of software that can be saved in “Software Saving Extension Folder” can be specified.
A numeral (MB) within a range from 1 to 999,999 can be specified for the size of software saving extension folder.
The command is used when distributing (saving) the patches downloaded from Microsoft to CS and DS.
Enable function. Distribute (save) patches. (Initial Value)
Disable function. It is unable to distribute (save) patches.
For CT under specific DS, when the patches cannot be applied, disable the function.
When collecting Inventory information in CT, specify whether to collect the information that is different from previous collected Inventory information only.
Enable function. Notify the information that is different from previous collected Inventory information to the server only. (Initial Value)
Disable function. Notify all Inventory information to server each time.
When collecting the file property information whose extension is “.exe”, specify whether to collect the information that is different from previous collected results only.
Enable function. Notify the information that is different from previous collected results to server only. (Initial Value)
Disable function. Notify all results to server each time.
In [Environment Setup] - [Policy Group Management] - [Basic Operation Policy] - [Inventory Information] of main menu, after specifying “Collect EXE Information” as “Yes”, this option is valid. When it only disables the specific server, please use this option.
The timing of whether to disperse the starting software distribution and new coming confirmation of patch application after logon can be specified.
Enable function. Disperse timing. (Initial Value)
Disable function. Not disperse timing.
After specifying the time of “Confirmation Timing upon Logon” in [Environment Setup] - [Policy Group Management] - [Basic Operation Policy] - [Common Setup] of main menu, this option is valid. When it only disables the specific server, please use this option.
In addition, when “Logon Time” is specified, it can modify the logon timing as the use of patch application.
Notify all Inventory information collected in CT to server.
After executing the command according to this option, notify all Inventory information to server after receiving policies through CT.
Perform the later operation according to the settings of client policy. (After starting the increment collection, notify the increment information to server only.)
In addition, the specified another collection cannot be cancelled.
When installing CT, get “User ID” and “PC Name” automatically from definition file (CesdDefaultValue.inf) and perform the settings.
The definition file shall be saved under the directory of environment variable TEMP or Windows.
The contents of definition file are as the following record example, and set according to the sequence of user ID and PC name.
Record example: "user001","pc001"
When distributing the software automatically, specify whether to switch the server automatically.
Enable function. Switch the server automatically and distribute the software through distributed server.
Disable function. (Initial Value)
When logging on CT, and not distributing the software to connection server, download the software from the distributed server.
For users of CT, prompt it to perform the environment setup. Though this function has been used, it is still required to specify whether to limit the modification of environment setup information.
Enable function. Limit (inactive) the modification of “User ID” and “PC Name”.
Disable function. (Initial Value)
Whether to audit the password when setting to audit Guest account.
Audit the password when auditing Guest account. (Initial Value)
Not audit the password when auditing Guest account.
Specify the execution authority through software download window, and start the executed function.
Execute according to the specified user authority or service authority.
Execute according to logon user authority of Windows. (Initial Value)
Enable the cancellation function while applying the security patch.
It is able to cancel while applying the security patch.
It is unable to cancel while applying the security patch. (Initial Value)
Enable the retry function when exceeding synchronous connection.
Retry when the synchronous connection is exceeded in connection server.
Not retry when the synchronous connection is exceeded in connection server. (Initial Value)
Based on server load, etc., specify the retry condition when the data transmission is suspended (delayed/stopped) in communication.
Set to prolong the retry count, retry interval and the waiting time before retry. (Initial Value)
It is recommanded to set in the environment where the network connection is slow.
Set to shorten the retry count, retry interval and the waiting time before retry.
Enable the processing and file confirmation on server.
Confirm processing and file on server. (Initial Value)
Not confirm processing and file on server.
Specify the interval for confirming the processing and file on server.
A numeral (minute) within a range from 1 to 1,440 can be specified for the confirmation interval. Its initial value is 10 minutes.
Specify the host name that reflects the CS and DS of specified option.
Please confirm the host name of CS and DS set in [Environment Setup] -[Setup and Operation Status] of main menu, and specify.
When specifying several host names, separate them by using comma (,).
Example) -host ds1.fujitsu.com,ds2.fujitsu.com
The option configuration value set by this command can be displayed.
Display the configuration value that is valid in CS only.
Display the configuration value that is valid in CS and DS.
Display the configuration value that is valid in CT.
Display the option configuration value set by this command.
Specify the host name of CS and DS that displays the option configuration value set by this command.
Please confirm the host name of CS and DS set in [Environment Setup] -[Setup and Operation Status] of main menu, and specify
Several host names cannot be specified.
When sv, cl or all has been specified in -o|-out option, please be sure to specify this option. When cs has been specified, it is not required to specify.
Output how to use this command in standard output.
Return value
0: ended normally
Non-zero: ended abnormally.
Command saving location
The following folder under CS:
CS Installation Directory \FJSVsbtrs\bin |
Authority required for execution/executing environment
Administrator authority is required.
This command shall be executed in CS.
Cautions
It is not required to stop Systemwalker Desktop Patrol service (IT BudgetMGR (INV)).
The policies/properties set by using this command will be valid on server and client after receiving policies/properties.
Specifying off in -cl.chk.guestpw option can prevent the system from logging off Guest account. When the password auditing through Systemwalker Desktop Patrol is disabled, apart from -cl.chk.guestpw option, please select the auditing item of security setup through Desktop Patrol Main Menu, and modify the auditing setup of [Windows Account] as [Not Audit].
When enabling the function of -cl.soft.exec.flag option, execute after downloading through software download window according to the following specified authority.
“Specify the Authority that Executes Automatically after Software Download” of distributed software set by policy group of Desktop Patrol Main Menu
In addition, UAC window will be displayed when executing the software. Please refer to “Cautions While Distributing Software to PC of Windows Vista®, Windows® 7 and Windows Server® 2008” of “Operation Guide: for Administrators” for details.
Based on -cl.patch.applyInterrup option, when canceling the patch application, the downloaded patches can be used again to for patch application at next patch application.
Command execution example
For CS, set file collection saving folder.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -sv.file.stragePath "c:\dtp-text" |
For DS, set software saving extension folder and maximum size. (200MB)
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -sv.soft.extendPath D:\dtpContents -sv.soft.extendSize 200000 -host ds1.fujitsu.com |
Confirm the value set for DS.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o sv -host ds1.fujitsu.com |
Confirm all values set for DS.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o all -host ds1.fujitsu.com |
Display how to use this command.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -h |
Execution result/output format
After executing the command normally, the following message will be output, and a numeral can be set in policies/properties.
Command execution succeeded. |
When the specified host name does not exist, the following message will be output.
The specified host name does not exist. |
When viewing the set policy value, the following information will be output. (configuration value that is valid in CS only)
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o cs -host cs.example.com Policy setup of cs.example.com ------------------------------------------------------------- File collection saving directory: D:\DTP\collect Error retry count of patch download: 3 times Error retry interval of patch download: 300 seconds Update time of software list: 4:0 Update interval of software list: 60 minutes |
When viewing the set policy value, the following information will be output.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o all -host cs.example.com Policy setup of cs.example.com ------------------------------------------------------------- File collection saving directory: D:\DTP\collect Error retry count of patch download: 3 times Error retry interval of patch download: 300 seconds Update time of software list: 4:0 Update interval of software list: 60 minutes ------- Administrator number: admin-01 Transmission buffer size: 32k Error retry interval: 5 seconds Error retry count: 5 times Timeout period of error retry: 60 seconds Transmission interval: 5 milliseconds Polling interval: 5 minutes Get policy in non-specified time: Yes Software saving directory: C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\data\swc Size of software saving directory: 3000 MB Software saving extension directory: Size of software saving extension directory: Distribute patches to server: Yes ------- Collect increment Inventory: Yes Collect increment EXE information: Yes Confirmation timing to disperse software and security patch: Yes Set time of another Inventory collection: 2009.3.17.18.39.14 Switch the download server automatically: No Get default value from the specified file: No Prompt that modifying the environment setup information is still limited when setting CT environment: No Also audit password when auditing Guest account: Yes Execute according to the authority of execution file after specifying download: Yes Can terminate the patch application: Yes Retry when exceeding the synchronous connection: Yes Retry type while server cannot be connected: 1 Confirm processing and file on server: Yes Interval of confirming processing and file on server: 10 minutes |
When the processing fails, a message indicating failure will be output. Please refer to “3.3.16 Messages Output in Modification Command of Custom Settings Policy” for details.
