Top
Systemwalker Desktop Patrol Installation Guide
FUJITSU Software

2.4.2 Set DS Operation Environment

This section describes how to set DS operating environment.

2.4.2.1 Set Server Information

The following content can be set in the server information.

The procedure is as follows.

  1. Log on to the main menu, click Environment Setup.

    The Environment Setup window is displayed.

  2. Click CS/DS Settings and Status.

    The following window is displayed.

  3. Click the link of server name.

    The following window is displayed.

  4. Enter the following item.

    Item

    Content

    DS Name

    Display the common name of DS to be installed.

    Specify DS name within 50 characters included single-byte alphanumeric characters and special characters "-", "@", ".". Blank cannot be specified.

    Cannot be omitted.

  5. Click the OK button.


2.4.2.2 Set Transmission

This section performs the settings when transmitting information from Systemwalker Desktop Patrol DS to higher server and transmitting information from Systemwalker Desktop Patrol DS to downstream server or Systemwalker Desktop Patrol CT.

The transmitted information contains the following information.

And as transmission settings, the following items can be set.

The procedure is as follows.

  1. Log on to the main menu and click Environment Setup.

    The Environment Setup window is displayed.

  2. Click CS/DS Settings and Status.

    The following window is displayed.

  3. Click the link of the server name.

    The following window is displayed.

  4. Enter items of Settings of Connection with Higher CS/DS

    Item

    Content

    Connection Interval with Higher CS/DS (1-1440)

    Specify in minute the period for downloading software from the higher server within 1-1440.

    Default: 5, cannot be omitted.

    Specify hour(s) of receiving distribution software

    Selected when specifying the time frame for downloading software.

    Specify the time frame for downloading software from higher server.

    If not selected, the time frame for downloading will be under the status of being able to download in 24 hours at will. Specify a number from 0 to 23 for the hour, a number from 0 to 59 for the minute.

    The start time cannot be specified the same as the end time.

  5. Enter the following item from settings of communication with downstream DS/Client.

    Item

    Content

    Maximum number of connections (1-999)

    Specify the total number of downstream DS or CT communicating simultaneously within 1-999.

    Default: 30, cannot be omitted.

    Set the following values according to the total number of actually connected downstream server or client.

    1000 or less: 30

    2000 or less: 40

    2000 above: 50

  6. Click the OK button.


2.4.2.3 Set Proxy

Proxy server can be used when the higher server or mobile PC communicating with DS set in the company.

Note

Proxy server and setting conditions not allowed

The following proxy server is not allowed.

  • Software of other company WEBGUARDIAN

And if the following settings are performed, it cannot used.

  • Windows authentication has been enabled in ISA Server

  1. Log on to the main menu and click Environment Setup.

    The Environment Setup window is displayed.

  2. Click CS/DS Settings and Status.

    The following window is displayed.

  3. Click the link of server name.

    The following window is displayed.

  4. Enter the following item of Settings of Connection with Higher CS/DS.

    Item

    Content

    Use Proxy

    Selected when using proxy.

    The following items can be specified when using proxy.

    • Proxy Server Name

      Specify the name of proxy server.

      Specify within 64 characters FQDN or IP address with single-byte alphanumeric characters, "-", ".".

      Cannot be omitted.

      Note

      Communication in IPv6 environments

      IPv6 addresses cannot be specified. For communication in IPv6-only environments, register beforehand using one of the following patterns, and then enter the host name:

      • Register the CS and DS host name and IP address in the DNS server.

      • Register the CS and DS host name and IP address in the communication source PC hosts file.

    • Port Number

      Specify a port number for proxy number.

      Specify a number within 1-65535.

      Cannot be omitted.

    • User Name

      Specify the user name of proxy server within 256 halfwidth characters.

    • Password

      Specify the password of proxy server within 256 halfwidth characters.

    • Bypass proxy server for these domains (Use a blank to specify multiple domain names)

      Specify the domain name not using proxy server. When multiple domain names are specified, separate them with space.

      You can specify up to 2064 halfwidth characters, including the following symbols: - .

  5. Enter the following items from Settings of Connection from CT.

    Item

    Content

    Use Proxy

    Selected when using proxy.

    The following item can be specified when using proxy.

    • Proxy Server Name

      Specify the name of proxy server.

      Specify within 64 characters FQDN or IP address with single-byte alphanumeric characters, "-", ".".

      Cannot be omitted.

    • Port Number

      Specify a port number for proxy number.

      Specify a number within 1-65535.

      Cannot be omitted.

      Note

      Communication in IPv6 environments

      IPv6 addresses cannot be specified. For communication in IPv6-only environments, register beforehand using one of the following patterns, and then enter the host name:

      • Register the CS and DS host name and IP address in the DNS server.

      • Register the CS and DS host name and IP address in the communication source PC hosts file.

    • UserName

      Specify the user name of proxy server within 256 halfwidth characters.

    • Password

      Specify the password of proxy server within 256 halfwidth characters.

    • Bypass proxy server for these domains (Use a blank to specify multiple domain names)

      Specify the domain name not using proxy server. When multiple domain names are specified, separate them with space. Specify within 2064 halfwidth characters.

      Specify the domain name with single-byte characters, "-", ".".

    If the name of proxy server cannot be analyzed by connecting PC of proxy server, set IP address of proxy server in Proxy Server Name.

  6. Click the OK button.


2.4.2.4 Set Operation Environment for Mobile PC

When connecting into the company from external by using VPN (Virtual Private Network) for mobile use, the following operation policy can be set for Systemwalker Desktop Patrol CT on the mobile PC. Even if in the mobile PC not connecting the network usually, assets management can also be performed through Systemwalker Desktop Patrol.

Class

Settings

Settings for Mobile PC Assets Management

Icon displayed in task tray (task bar)

Send Inventory information which has not been sent

Settings for Reducing Mobile PC Load

Send CT operation status log

Search method for patch installation in the Start menu (Apps screen)

Message displayed when automatically starting to download software

The settings above are for setting DS for mobile connection use.

By connecting this DS, the mobile PC operates according to the set operation policy.

In case the mobile PC has not be connected network when the new confirmation arrives, detect the later LAN connection and get client policy, apply security patches (*) and perform Inventory collection during LAN connection.

* When the settings are for applying security patches

The figure for using the mobile PC is as follows:

Items to be set

Icon displayed in task tray (task bar)

CT icon is displayed in the task tray and the balloon is displayed when starting/ending Inventory collection.

The user can master the status of Inventory collection to determine the timing for disconnecting the network.

In case of Windows(R) 7, Windows(R) 8, Windows Server(R) 2008 R2 or Windows Server(R) 2012, CT icon is displayed in the task bar after starting Inventory collection and the operating status is displayed. (Notes)

Notes) When the operating status is displayed in Windows Server(R) 2008 R2 or Windows Server(R) 2012, enable it after installing the following function.

  • Desktop Experience

Send Inventory information which has not been sent

When the network is connected, Inventory information which cannot be sent to the connection server due to the following reasons in the previous Inventory collection is sent for the first time, thus, it can be used for assets management more reliably in the mobile PC which has not been connected the network for a short time.

Send CT operation status log

In general, CT operation status log will be sent to the connection server along with Inventory information.

Because the network traffic has been cut down, whether to send CT operation status log to the connection server can be selected.

Search method for patch installation in the Start menu (Apps screen)

In general, after selecting Start > All Programs > Systemwalker Desktop Patrol CT > Patch Installation, or Apps > Systemwalker Desktop Patrol CT > Patch Installation, to detect security patch which has not been installed in PC, the registry and files in the whole drive will be searched.

Because file search will cause increasing battery consumption in case of the mobile PC performing patch installation, select the resolution for search during patch installation from the following methods.

  1. Perform patch Installation after searching all the drives (common search method)

    Perform file search for all drives of Systemwalker Desktop Patrol CT. The user can detect the software installed in any folder, but the battery consumption will increase due to file search for all drive.

  2. Perform patch installation after searching the system folders.

    Perform file search for the following folders only. Though file search time can be shortened, security patches cannot be detected when installing software to non search object folder.

    • System folders Example) c:\windows

    • Program folders Example) c:\Program Files

  3. Perform security patch installation according to the "Unapplied Patch Information" detected in Systemwalker Desktop Patrol CS.

    Apply security patches according to the "Unapplied Patch Information" detected in Systemwalker Desktop Patrol CS.

    Because security patches can be installed immediately in case it won't cause any load on Systemwalker Desktop Patrol CT if file search has not been performed, but situation where security patches of the new installed software cannot be applied according to the timing for Inventory collection exists.

Message displayed when starting to download software automatically

The window for confirmation is displayed before automatically downloading software, you can select to perform or cancel automatic downloading.

Thus, patches can be downloaded when the mobile PC use won't be affected.

Setting method

Set the operation policy of the mobile PC by using the following command.

For MBPolicy.exe (mobile environment setup) command, refer to Systemwalker Desktop Patrol Reference Manual.

For how to use proxy in the communication between Systemwalker Desktop Patrol CT and Systemwalker Desktop Patrol DS, refer to "2.4.2.3 Set Proxy".