<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xml:base="http://juice.altiris.com" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
 <title>Altiris Juice - A Community for Altiris Product Enthusiasts</title>
 <link>http://juice.altiris.com/security/tips</link>
 <description>Tech Tips, Security &amp; Compliance</description>
 <language>en</language>
<item>
 <title>My Hardware Inventory Says &quot;Task Stopped&quot;  Why?</title>
 <link>http://juice.altiris.com/tip/5185/my-hardware-inventory-says-task-stopped-why</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/5185&quot;&gt;&lt;img src=&quot;/images/5185.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;
Recently, it was discovered that a client machine had a Task History entry for Hardware Inventory, AEXMACHINV.exe of &#039;Task Stopped&#039;? In fact,  AEXMACHINV.exe stays active and in place, showing up in the computers task manager until a time-out occurs. Of course, there was no hardware inventory on the server either. What happened?
&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/asset&quot; class=&quot;og_links&quot;&gt;Asset &amp;amp; CMDB&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/5185/my-hardware-inventory-says-task-stopped-why&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/5185/my-hardware-inventory-says-task-stopped-why#comments</comments>
 <category domain="http://juice.altiris.com/products/asset-cmdb/inventory-solution">Inventory Solution</category>
 <category domain="http://juice.altiris.com/topics/inventory">Inventory</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/5185</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <group domain="http://juice.altiris.com/asset">Asset &amp;amp; CMDB</group>
 <pubDate>Mon, 04 Aug 2008 16:06:02 -0500</pubDate>
 <dc:creator>BRING</dc:creator>
 <guid isPermaLink="false">5185 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Using Deployment Solution to Reset Local User Account Passwords</title>
 <link>http://juice.altiris.com/tip/4858/using-deployment-solution-reset-local-user-account-passwords</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/4858&quot;&gt;&lt;img src=&quot;/images/4858.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;Resetting a local user account on one or more computers on your network, whether they are in a domain or workgroup, using &lt;a class=&quot;glossary-term&quot; href=&quot;http://juice.altiris.com/glossary/1/lettera#term356&quot;&gt;&lt;acronym title=&quot;The comprehensive deployment solution from Altiris providing the ability to perform scripted or image OS based installs, PC Migrations, pre or post-OS script executions, software repackaging, software deployment, etc.&quot;&gt;Altiris Deployment Solution&lt;/acronym&gt;&lt;/a&gt; is very simple.&lt;/p&gt;
&lt;p&gt;Making use of Micrsoft&#039;s commands to create a script that will do this for you.&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/deploy&quot; class=&quot;og_links&quot;&gt;Deployment &amp;amp; Migration&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/4858/using-deployment-solution-reset-local-user-account-passwords&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/4858/using-deployment-solution-reset-local-user-account-passwords#comments</comments>
 <category domain="http://juice.altiris.com/products/deployment-migration/deployment-solution">Deployment Solution</category>
 <category domain="http://juice.altiris.com/topics/scripting">Scripting</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/4858</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <group domain="http://juice.altiris.com/deploy">Deployment &amp;amp; Migration</group>
 <pubDate>Mon, 07 Jul 2008 13:11:51 -0500</pubDate>
 <dc:creator>Antonp</dc:creator>
 <guid isPermaLink="false">4858 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Patching the Vulnerabilities in DS6.8 and DS6.9</title>
 <link>http://juice.altiris.com/headsup/4314/patching-vulnerabilities-ds68-and-ds69</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/4314&quot;&gt;&lt;img src=&quot;/images/4314.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;I put this on the Altiris Forums a little while ago, but thought it might be useful to place here too.&lt;/p&gt;
&lt;p&gt;The link below describes half-a-dozen security vulnerabilities which appear to be only fixed by UPGRADING to &lt;a class=&quot;glossary-term&quot; href=&quot;http://juice.altiris.com/glossary/1/letterd#term255&quot;&gt;&lt;acronym title=&quot;Altiris Deployment Solution: Product that reduces the cost of deploying and managing servers, desktops, notebooks, thin clients, and handheld devices via automated OS deployment, configuration, PC &quot;personality&quot; migration, and software deployment across hardware platforms and OS types.&quot;&gt;DS&lt;/acronym&gt;&lt;/a&gt; 6.9 plus the hotfixes &lt;a href=&quot;http://www.symantec.com/avcenter/security/Content/2008.05.14a.html&quot;&gt;www.symantec.com/avcenter/security&lt;/a&gt;. Here are the steps I took to remedy the problem.&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/deploy&quot; class=&quot;og_links&quot;&gt;Deployment &amp;amp; Migration&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/headsup/4314/patching-vulnerabilities-ds68-and-ds69&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/headsup/4314/patching-vulnerabilities-ds68-and-ds69#comments</comments>
 <category domain="http://juice.altiris.com/products/deployment-migration/deployment-solution">Deployment Solution</category>
 <category domain="http://juice.altiris.com/topics/security">Security</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/4314</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <group domain="http://juice.altiris.com/deploy">Deployment &amp;amp; Migration</group>
 <pubDate>Thu, 22 May 2008 11:56:29 -0500</pubDate>
 <dc:creator>ianatkin</dc:creator>
 <guid isPermaLink="false">4314 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Screensaver Lock for Macintosh</title>
 <link>http://juice.altiris.com/tip/3886/screensaver-lock-macintosh</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/3886&quot;&gt;&lt;img src=&quot;/images/3886.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;I have been tasked with locking down our Macintosh workstations. The only goal so far has been to set a screen saver idle time and to require a password to wake the computer from sleep or screen saver.&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/security&quot; class=&quot;og_links&quot;&gt;Security &amp;amp; Compliance&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/3886/screensaver-lock-macintosh&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/3886/screensaver-lock-macintosh#comments</comments>
 <category domain="http://juice.altiris.com/products/software-delivery-solution">Software Delivery Solution</category>
 <category domain="http://juice.altiris.com/topics/security">Security</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/3886</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <pubDate>Tue, 08 Apr 2008 21:37:41 -0500</pubDate>
 <dc:creator>kbuller</dc:creator>
 <guid isPermaLink="false">3886 at http://juice.altiris.com</guid>
</item>
<item>
 <title>SecurityExpressions: Using an Iteration - A Tip on IterateType = ProfileList</title>
 <link>http://juice.altiris.com/tip/3633/securityexpressions-using-iteration-a-tip-iteratetype-profilelist</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/3633&quot;&gt;&lt;img src=&quot;/images/3633.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;Trying to audit with a rule that must iterate through all user profiles who have logged in to Windows?&lt;/p&gt;
&lt;p&gt;Here&#039;s a tip that should make your day.&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/security&quot; class=&quot;og_links&quot;&gt;Security &amp;amp; Compliance&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/3633/securityexpressions-using-iteration-a-tip-iteratetype-profilelist&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/3633/securityexpressions-using-iteration-a-tip-iteratetype-profilelist#comments</comments>
 <category domain="http://juice.altiris.com/products/security-compliance/securityexpressions">SecurityExpressions</category>
 <category domain="http://juice.altiris.com/products/security-compliance/securityexpressions-audit-and-compliance-server">SecurityExpressions Audit and Compliance Server</category>
 <category domain="http://juice.altiris.com/topics/customization">Customization</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/3633</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <pubDate>Thu, 13 Mar 2008 12:55:23 -0500</pubDate>
 <dc:creator>ahumphries</dc:creator>
 <guid isPermaLink="false">3633 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Rolling out Symantec Endpoint</title>
 <link>http://juice.altiris.com/tip/3514/rolling-out-symantec-endpoint</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/3514&quot;&gt;&lt;img src=&quot;/images/3514.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;If you are looking to deploy Symantec Endpoint Protection (SEP) in your environment, there are a few pointers to make it work better in the initial rollout.&lt;/p&gt;
&lt;p&gt;These steps are what I would call &quot;critical&quot; in an organization with more than one global policy for their computers.&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/security&quot; class=&quot;og_links&quot;&gt;Security &amp;amp; Compliance&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/3514/rolling-out-symantec-endpoint&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/3514/rolling-out-symantec-endpoint#comments</comments>
 <category domain="http://juice.altiris.com/products/symantec-endpoint-protection">Symantec Endpoint Protection</category>
 <category domain="http://juice.altiris.com/products/symantec-endpoint-protection-integration-component">Symantec Endpoint Protection Integration Component</category>
 <category domain="http://juice.altiris.com/topics/security">Security</category>
 <category domain="http://juice.altiris.com/topics/troubleshooting">Troubleshooting</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/3514</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <pubDate>Tue, 26 Feb 2008 10:31:12 -0600</pubDate>
 <dc:creator>neil_rogers</dc:creator>
 <guid isPermaLink="false">3514 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Allowing Limited Security Console Users to View Local Security Solution Passwords</title>
 <link>http://juice.altiris.com/tip/3016/allowing-limited-security-console-users-view-local-security-solution-passwords</link>
 <description> &lt;p&gt;If you&#039;ve been hearing this, &quot;I have some limited access users that need to be able to use the passwords that Local Security Solution maintains. I keep getting errors like &quot;Unable to discover your essential user data for logging purposes&quot;. What changes do we need to make to allow them access?&quot; then this tip&#039;s for you, Bob.&lt;/p&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/deploy&quot; class=&quot;og_links&quot;&gt;Deployment &amp;amp; Migration&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/3016/allowing-limited-security-console-users-view-local-security-solution-passwords&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/3016/allowing-limited-security-console-users-view-local-security-solution-passwords#comments</comments>
 <category domain="http://juice.altiris.com/products/security-compliance/local-security-solution">Local Security Solution</category>
 <category domain="http://juice.altiris.com/topics/3rd-party-product">3rd Party Products</category>
 <category domain="http://juice.altiris.com/topics/security">Security</category>
 <category domain="http://juice.altiris.com/topics/server-management">Server Management</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/3016</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <group domain="http://juice.altiris.com/deploy">Deployment &amp;amp; Migration</group>
 <pubDate>Thu, 13 Dec 2007 12:09:05 -0600</pubDate>
 <dc:creator>BRING</dc:creator>
 <guid isPermaLink="false">3016 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Changing Solution Center Location</title>
 <link>http://juice.altiris.com/tip/2898/changing-solution-center-location</link>
 <description> &lt;p&gt;For those that are not connected to the Internet, you may notice that when you install the Notification Server and click on Solution Center to download new solutions that the &lt;a class=&quot;glossary-term&quot; href=&quot;http://juice.altiris.com/glossary/1/lettern#term261&quot;&gt;&lt;acronym title=&quot;Altiris Notification Server&quot;&gt;NS&lt;/acronym&gt;&lt;/a&gt; will sit there and wait while it tries to resolve to www.solutionsam.com\solutions\6_0.&lt;/p&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/deploy&quot; class=&quot;og_links&quot;&gt;Deployment &amp;amp; Migration&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/2898/changing-solution-center-location&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/2898/changing-solution-center-location#comments</comments>
 <category domain="http://juice.altiris.com/products/deployment-migration/notification-server">Notification Server</category>
 <category domain="http://juice.altiris.com/topics/configuration">Configuration</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/2898</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <group domain="http://juice.altiris.com/deploy">Deployment &amp;amp; Migration</group>
 <pubDate>Mon, 19 Nov 2007 15:11:52 -0600</pubDate>
 <dc:creator>Andrew Souter</dc:creator>
 <guid isPermaLink="false">2898 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Notify Primary User of Admin Password Disclosure</title>
 <link>http://juice.altiris.com/tip/2879/notify-primary-user-admin-password-disclosure</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/2879&quot;&gt;&lt;img src=&quot;/images/2879.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;Ever wondered how you automatically notify the user that a managed password (typically the Administrator account) has been accessed by an administrator when using Local Security Solution? No Notification Policy exists by default.&lt;/p&gt;
&lt;p&gt;Learn how to install just such a Notification Policy in this tip.&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/security&quot; class=&quot;og_links&quot;&gt;Security &amp;amp; Compliance&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/2879/notify-primary-user-admin-password-disclosure&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/2879/notify-primary-user-admin-password-disclosure#comments</comments>
 <category domain="http://juice.altiris.com/products/security-compliance/local-security-solution">Local Security Solution</category>
 <category domain="http://juice.altiris.com/topics/configuration">Configuration</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/2879</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <pubDate>Tue, 13 Nov 2007 11:10:39 -0600</pubDate>
 <dc:creator>Andrew Souter</dc:creator>
 <guid isPermaLink="false">2879 at http://juice.altiris.com</guid>
</item>
<item>
 <title>Reset Disclosed Passwords with LSS</title>
 <link>http://juice.altiris.com/tip/2734/reset-disclosed-passwords-lss</link>
 <description> &lt;div class=&quot;clear-block&quot;&gt;
&lt;div class=&quot;img-shadow&quot;&gt;&lt;a href=&quot;/node/2734&quot;&gt;&lt;img src=&quot;/images/2734.jpg&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;/div&gt;
&lt;p&gt;In our organization we have some very security sensitive managers, one of whom was wholeheartedly for Local Security Solution (LSS). However, he quickly became concerned that passwords, after being disclosed, were opening security holes. While limited to those computers, he was still concerned enough and he has enough pull to have this issue block our full implementation of Local Security Solution. Therefore, it quickly became important to address his issues. Instead of upping our password reset interval for everyone, I came up with the idea of just reseting those passwords that had been disclosed.&lt;/p&gt;
&lt;/div&gt;
 &lt;div class=&quot;og_rss_groups&quot;&gt;&lt;ul class=&quot;links&quot;&gt;&lt;li  class=&quot;first last og_links&quot;&gt;&lt;a href=&quot;/security&quot; class=&quot;og_links&quot;&gt;Security &amp;amp; Compliance&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;a href=&quot;http://juice.altiris.com/tip/2734/reset-disclosed-passwords-lss&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <comments>http://juice.altiris.com/tip/2734/reset-disclosed-passwords-lss#comments</comments>
 <category domain="http://juice.altiris.com/products/security-compliance/local-security-solution">Local Security Solution</category>
 <category domain="http://juice.altiris.com/products/deployment-migration/notification-server">Notification Server</category>
 <category domain="http://juice.altiris.com/topics/automation">Automation</category>
 <category domain="http://juice.altiris.com/topics/command-line">Command Line</category>
 <category domain="http://juice.altiris.com/topics/customization">Customization</category>
 <category domain="http://juice.altiris.com/topics/security">Security</category>
 <wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://juice.altiris.com/crss/node/2734</wfw:commentRss>
 <group domain="http://juice.altiris.com/security">Security &amp;amp; Compliance</group>
 <pubDate>Tue, 23 Oct 2007 12:04:25 -0500</pubDate>
 <dc:creator>skakid</dc:creator>
 <guid isPermaLink="false">2734 at http://juice.altiris.com</guid>
</item>
</channel>
</rss>
