Functionality
This command can be used to modify the setup items of policies/properties set in the MC window of V13.2.0 or earlier, and items that cannot be modified in main menu. In addition, for "File Saving Directory", it can be confirmed in the information output by -o|-out parameter.
Perform these settings after installing CS and DS.
Record format
CustomPolicy.exe | [-sv.file.stragePath File Collection Saving Folder] [-sv.patch.retry.count Download Retry Count of Patch] [-sv.patch.retry.interval Download Retry Interval of Patch] [-sv.swlist.uptime Update Time of Software List] [-sv.swlist.interval Update Interval of Software List] |
CustomPolicy.exe | [-sv.admin.number Administrator Number] [-sv.buffer.size Transmission Buffer Size] [-sv.retry.interval Error Retry Interval] [-sv.retry.count Error Retry Count] [-sv.buffer.timeout Error Timeout Period] [-sv.transfer.interval Transmission Interval] [-sv.polling.time Polling Interval] [-sv.enable.outPolicy on|off] [-sv.soft.strageSize Size of Software Saving Folder] [-sv.soft.extendPath Software Saving Extension Folder] [-sv.soft.extendSize Size of Software Saving Extension Folder] [-sv.patch.dlv.svr on|off] -host Host Name 1 |
CustomPolicy.exe | [-cl.diff.collect on|off] [-cl.diff.collectExe on|off] [-cl.logon.delay on|off] [-cl.recollect.inventory on|off] [-cl.ctsetup.deffile on|off] [-cl.auto.change on|off] [-cl.restrict.change on|off] [-cl.chk.guestpw on|off] [-cl.soft.exec.flag on|off] [-cl.patch.interrupt on|off] [-cl.connect.retry on|off] [-cl.transfer.retryMode 0|1] [-cl.task.enabled on|off] [-cl.task.getInterval Confirmation Interval] -host Host Name 1 |
CustomPolicy.exe | -o|-out type [-host Host Name 2] |
CustomPolicy.exe | -h|-help |
Option
This option can be specified in CS environment only.
In the file collection saving folder, the saving folder that collects files through "File Collection" function can be specified.
Specify the folder using up to 128 fullwidth characters or 128 halfwidth characters. The following symbols cannot be specified:
/ * ? \ " < > |
When viewing the collected files, the contents (cannot be viewed through main menu) under the above mentioned folder can be viewed directly by using Explorer, etc. in the CS.
When viewing the collected files, view the following folder.
"File Collection Saving Folder"\file\"User ID"+"Upstream Server Name" |
Example)
The file collection saving folder is: \tmp, the user ID is 0001, PC name is host1, and the upstream server name is upperhost.
C:\tmp\file\0001+host1+upperhost
This option can be specified in CS environment only.
The retry count can be specified when downloading patches from public sites from Microsoft company and an error occurred.
A numeral (times) within a range from 0 to 100 can be specified in the download retry count of patch. And the initial value is three times.
This option can be specified in CS environment only.
The retry interval can be specified when downloading patches from public sites from Microsoft company and an error occurred.
A numeral (second) within a range from 0 to 600 can be specified in the download retry interval of patch. And the initial value is 300 seconds.
This option can be specified in CS environment only.
The update time of software list can be specified.
Specify the time in the update time of software list according to the following format.
MM:DD |
Specify hour. A numeral within a range from 0 to 23 can be specified.
Specify minute. A numeral within a range from 0 to 59 can be specified.
Example) It describes how to specify time when updating the software list at 11:30 pm.
23:30 |
This option can be specified in CS environment only.
The update interval of software list can be specified.
A numeral (minute) within a range from 30 to 1,440 can be specified in update interval. Its initial value is 60 minutes.
Specify the administrator number using up to 20 characters.
The single-byte letters and numerals, and single-byte symbols such as "-", "@", ".", "_" can be used in administrator number.
When linking Systemwalker Centric Manager with Inventory information, the configuration value of this administrator number can be used as "User ID".
The size of buffer for transmission can be specified when communicating with upstream server.
A numeral (KB) within a range from 1 to 9,999 can be specified for the transmission buffer size. Its initial value is set as 32KB.
The retry interval for transmission can be specified when communicating with upstream server and an error occurred.
A numeral (second) within a range from 1 to 999 can be specified for the retry interval. Its initial value is 5 seconds.
The retry count for transmission can be specified when communicating with upstream server and an error occurred.
A numeral (times) within a range from 1 to 999 can be specified for the retry count. Its initial value is 5 times.
The timeout period from an exception occurring in communication with upstream server to making judgment can be specified.
A numeral (times) within a range from 1 to 999 can be specified for error timeout period. Its initial value is 60 seconds.
The transmission interval can be specified when communicating with upstream server.
A numeral (millisecond) within a range from 1 to 2,147,483,647 can be specified for transmission interval. Its initial value is 5 milliseconds.
The confirmation interval used to transmit Inventory information to upstream server can be specified.
A numeral (minute) within a range from 1 to 9,999 can be specified for the polling interval. Its initial value is 5 minutes.
The Inventory information notified by client is temporarily saved in server folder. Search the folder in polling interval, and if there is Inventory information, notify the upstream server.
This option can only be specified when using DS.
The command is used when downloading policies/properties in the time specified in non-"Download Time Frame".
Enable function. Also download policies/properties in non-specified time frame. (Initial Value)
Disable function.
The maximum size of software that can be saved in "Software Saving Folder" specified when installing server can be specified.
A numeral (MB) within a range from 1 to 999,999 can be specified for the size of software saving folder.
The backup saving folder can be specified when there is no available capacity in software saving folder.
Specify the software storage extension folder using an absolute path of up to 128 fullwidth characters or 128 halfwidth characters. The following symbols cannot be specified:
/ * ? \ " < > |
Once the configuration value of this option is set, it cannot be modified.
Specify the folder existing on server. As there is no available capacity in "Software Saving Folder", the software cannot be saved on server, therefore, the distribution result will be in abnormal status.
The maximum size of software that can be saved in "Software Saving Extension Folder" can be specified.
A numeral (MB) within a range from 1 to 999,999 can be specified for the size of software saving extension folder.
The command is used when distributing (saving) the patches downloaded from Microsoft to CS and DS.
Enable function. Distribute (save) patches. (Initial Value)
Disable function. It is unable to distribute (save) patches.
For CT under specific DS, when the patches cannot be applied, disable the function.
This option is used to allow connections from V15.0.1 or earlier of DS and CT.
Enable feature. Allow connections from V15.0.1 or earlier of DS and CT.
The feature is enabled for 90 days only. After 90 days the feature will automatically become disabled.
Disable feature. Do not allow connections from V15.0.1 or earlier of DS and CT. (Initial Value)
This option is used in CT V15.1.0 or later to register inventory of allowed CTs only.
Enable feature. It is necessary to set a password.
After setting a password, you need to register a password for authentication on the CT.
Set the password twice for input confirmation.
Specify the password using 4 to 12 halfwidth alphanumeric characters and the following halfwidth symbols. Alphabetic characters are case-sensitive.
- = * + ' @ ~ ( ) & $ # ! ? % . , / : ; ` [ ] | < > { _ }
Disable feature. It is not necessary to set a password. (Initial Value)
When collecting Inventory information in CT, specify whether to collect the information that is different from previous collected Inventory information only.
Enable function. Notify the information that is different from previous collected Inventory information to the server only. (Initial Value)
Disable function. Notify all Inventory information to server each time.
When collecting the file property information whose extension is ".exe", specify whether to collect the information that is different from previous collected results only.
Enable function. Notify the information that is different from previous collected results to server only. (Initial Value)
Disable function. Notify all results to server each time.
In Environment Setup > Policy Groups > Basic Operation Policy > Inventory Information of main menu, after specifying Collect EXE Information as Yes, this option is valid. When it only disables the specific server, use this option.
The timing of whether to disperse the starting software distribution and new coming confirmation of patch application after logon can be specified.
Enable function. Disperse timing. (Initial Value)
Disable function. Not disperse timing.
After specifying the time of Confirmation Timing upon Logon in Environment Setup > Policy Groups > Basic Operation Policy > Common Setup of main menu, this option is valid. When it only disables the specific server, use this option.
In addition, when Logon Time is specified, it can modify the logon timing as the use of patch application.
Notify all Inventory information collected in CT to server.
After executing the command according to this option, notify all Inventory information to server after receiving policies through CT.
Perform the later operation according to the settings of client policy. (After starting the increment collection, notify the increment information to server only.)
In addition, the specified another collection cannot be cancelled.
When installing CT, get "User ID" and "PC Name" automatically from the file (CesdDefaultValue.inf) where the default values are stored, and perform the settings.
The file shall be saved under the directory of environment variable TEMP or Windows.
The contents of file are as the following record example, and set according to the sequence of user ID and PC name.
Record example: "user001","pc001"
When distributing the software automatically, specify whether to switch the server automatically.
Enable function. Switch the server automatically and distribute the software through distributed server.
Disable function. (Initial Value)
When logging on CT, and not distributing the software to connection server, download the software from the distributed server.
For users of CT, prompt it to perform the environment setup. Though this function has been used, it is still required to specify whether to limit the modification of environment setup information.
Enable function. Limit (inactive) the modification of "User ID" and "PC Name".
Disable function. (Initial Value)
Whether to audit the password when setting to audit Guest account.
Audit the password when auditing Guest account. (Initial Value)
Not audit the password when auditing Guest account.
Specify the execution authority through software download window, and start the executed function.
Execute according to the specified user authority or service authority.
Execute according to logon user authority of Windows. (Initial Value)
Enable the cancellation function while applying the security patch.
It is able to cancel while applying the security patch.
It is unable to cancel while applying the security patch. (Initial Value)
Enable the retry function when exceeding synchronous connection.
Retry when the synchronous connection is exceeded in connection server.
Not retry when the synchronous connection is exceeded in connection server. (Initial Value)
Based on server load, etc., specify the retry condition when the data transmission is suspended (delayed/stopped) in communication.
Set to prolong the retry count, retry interval and the waiting time before retry. (Initial Value)
It is recommended to set in the environment where the network connection is slow.
Set to shorten the retry count, retry interval and the waiting time before retry.
Enable the processing and file confirmation on server.
Confirm processing and file on server. (Initial Value)
Not confirm processing and file on server.
Specify the interval for confirming the processing and file on server.
A numeral (minute) within a range from 1 to 1,440 can be specified for the confirmation interval. Its initial value is 10 minutes.
Specify the host name that reflects the CS and DS of specified option.
Confirm the host name of CS and DS set in Environment Setup > Setup and Operation Status of main menu, and specify.
When specifying several host names, separate them by using comma (,).
Example) -host ds1.fujitsu.com,ds2.fujitsu.com
The option configuration value set by this command can be displayed.
Display the configuration value that is valid in CS only.
Display the configuration value that is valid in CS and DS.
Display the configuration value that is valid in CT.
Display the option configuration value set by this command.
Specify the host name of CS and DS that displays the option configuration value set by this command.
Confirm the host name of CS and DS set in Environment Setup > Setup and Operation Status of main menu, and specify
Several host names cannot be specified.
When sv, cl or all has been specified in -o|-out option, be sure to specify this option. When cs has been specified, it is not required to specify.
Output how to use this command in standard output.
Return value
0: ended normally
Other than 0: ended abnormally.
Command saving location
The following folder under CS:
CS Installation Directory \FJSVsbtrs\bin |
Authority required for execution/executing environment
Administrator authority is required.
This command shall be executed in CS.
Cautions
It is not required to stop Systemwalker Desktop Patrol service (IT BudgetMGR (INV)).
The policies/properties set by using this command will be valid on server and client after receiving policies/properties.
Specifying off in -cl.chk.guestpw option can prevent the system from logging off Guest account. When the password auditing through Systemwalker Desktop Patrol is disabled, apart from -cl.chk.guestpw option, select the auditing item of security setup through Desktop Patrol Main Menu, and modify the auditing setup of Windows Account as Not Audit.
When enabling the function of -cl.soft.exec.flag option, execute after downloading through software download window according to the following specified authority.
"Specify the Authority that Executes Automatically after Software Download" of distributed software set by policy group of Desktop Patrol Main Menu
In addition, UAC window will be displayed when executing the software. Refer to "Notes of Software Distribution to PC with other than Windows Server(R) 2003" of Operation Guide: for Administrators for details.
Based on -cl.patch.applyInterrup option, when canceling the patch application, the downloaded patches can be used again to for patch application at next patch application.
When a feature with the -sv.connect.ctpassword option is enabled, it is also necessary to register a password for the installed CT.
Command execution example
For CS, set file collection saving folder.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -sv.file.stragePath "c:\dtp-text" |
For DS, set software saving extension folder and maximum size. (200MB)
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -sv.soft.extendPath D:\dtpContents -sv.soft.extendSize 200000 -host ds1.fujitsu.com |
Confirm the value set for DS.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o sv -host ds1.fujitsu.com |
Confirm all values set for DS.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o all -host ds1.fujitsu.com |
Display how to use this command.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -h |
Execution result/output format
After executing the command normally, the following message will be output, and a numeral can be set in policies/properties.
Command execution succeeded. |
When the specified host name does not exist, the following message will be output.
The specified host name does not exist. |
When viewing the set policy value, the following information will be output. (configuration value that is valid in CS only)
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o cs -host cs.example.com Policy setup of cs.example.com ------------------------------------------------------------- File collection saving directory: D:\DTP\collect Error retry count of patch download: 3 times Error retry interval of patch download: 300 seconds Update time of software list: 4:0 Update interval of software list: 60 minutes |
When viewing the set policy value, the following information will be output.
"C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\bin\CustomPolicy.exe" -o all -host cs.example.com Policy setup of cs.example.com ------------------------------------------------------------- File collection saving directory: D:\DTP\collect Error retry count of patch download: 3 times Error retry interval of patch download: 300 seconds Update time of software list: 4:0 Update interval of software list: 60 minutes ------- Administrator number: admin-01 Transmission buffer size: 32k Error retry interval: 5 seconds Error retry count: 5 times Timeout period of error retry: 60 seconds Transmission interval: 5 milliseconds Polling interval: 5 minutes Get policy in non-specified time: Yes Software saving directory: C:\Program Files\Fujitsu\Systemwalker Desktop Patrol\FJSVsbtrs\data\swc Size of software saving directory: 3000 MB Software saving extension directory: Size of software saving extension directory: Distribute patches to server: Yes Allow connection from V14.2.0 or earlier DS and CT : 01/15/2015 - 04/14/2015 A password must be registered in V15.1.0 or later CT : Yes ------- Collect increment Inventory: Yes Collect increment EXE information: Yes Confirmation timing to disperse software and security patch: Yes Set time of another Inventory collection: 2009.3.17.18.39.14 Switch the download server automatically: No Get default value from the specified file: No Prompt that modifying the environment setup information is still limited when setting CT environment: No Also audit password when auditing Guest account: Yes Execute according to the authority of execution file after specifying download: Yes Can terminate the patch application: Yes Retry when exceeding the synchronous connection: Yes Retry type while server cannot be connected: 1 Confirm processing and file on server: Yes Interval of confirming processing and file on server: 10 minutes |
When the processing fails, a message indicating failure will be output. Refer to "3.3.20 Messages Output in Modification Command of Custom Settings Policy" for details.
