MaxMyg

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-26
07:23
2804 views
Windows Group Policy creation issue
Good day.
I'm trying to create Local Group Policy as well as Active Directory Group Policy and receive the message "Unable to detect ZCC Helper on this device". But ZCC Helper is installed and I can connect to devices via Remote Control. My OS is Windows Server 2012R2 with IE11. Any suggestions?
I'm trying to create Local Group Policy as well as Active Directory Group Policy and receive the message "Unable to detect ZCC Helper on this device". But ZCC Helper is installed and I can connect to devices via Remote Control. My OS is Windows Server 2012R2 with IE11. Any suggestions?
25 Replies
MaxMyg

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-26
07:36
Very strange. ZCC Helper works if I connect to ZENworks server via IP address but not via DNS name.


Knowledge Partner
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-26
11:47
MaxMyg;2477968 wrote:
Very strange. ZCC Helper works if I connect to ZENworks server via IP address but not via DNS name.
Are you connecting with the complete DNS name or a short one, see here: https://www.novell.com/support/kb/doc.php?id=7018704
Thomas
MaxMyg

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-26
11:56
Thanks! I've tried to connect with short DNS name.
CRAIGDWILSON

Micro Focus Expert
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-26
14:47
Note 1: Though the TID does not reflect it, This was fixed in ZCM 2017 Update 1. (Update 2 Is the Current Patch Level.)
Note 2: I would focus more on "Local Group Policies".
The "Active Directory Group Policy" option is a less used feature.
In either case, the Policies are processed using the Local Group Policy Processor, so the "AD" option does not extend the possible settings that can be controlled.
Further, once imported, they settings cannot be edited as the "Local Group Policy" settings can.
ADM or ADMx files can be used to extend available GPO settings beyond default options.
In General, Customers for whom most of their devices are in AD, tend to use Native AD Group Polices.
Customers tend to use the the GPO feature for devices for either Devices that are not in an AD Domain or perhaps for all of their devices (including Domain Joined) if only a moderate subset are in the Domain to allow for a consistent management option.
Note 2: I would focus more on "Local Group Policies".
The "Active Directory Group Policy" option is a less used feature.
In either case, the Policies are processed using the Local Group Policy Processor, so the "AD" option does not extend the possible settings that can be controlled.
Further, once imported, they settings cannot be edited as the "Local Group Policy" settings can.
ADM or ADMx files can be used to extend available GPO settings beyond default options.
In General, Customers for whom most of their devices are in AD, tend to use Native AD Group Polices.
Customers tend to use the the GPO feature for devices for either Devices that are not in an AD Domain or perhaps for all of their devices (including Domain Joined) if only a moderate subset are in the Domain to allow for a consistent management option.
thsundel;2477981 wrote:
Are you connecting with the complete DNS name or a short one, see here: https://www.novell.com/support/kb/doc.php?id=7018704
Thomas
--
Please give a hearty thumbs up to any post you find helpful!
To find articles by Craig Wilson simply follow the link: Craig Wilson's Tips!
Please give a hearty thumbs up to any post you find helpful!
To find articles by Craig Wilson simply follow the link: Craig Wilson's Tips!
MaxMyg

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-26
14:55
Thanks for your explanation! I'm going to use Local Group Policies now.
MaxMyg

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-27
09:45
One question about ZENworks Agent Technician Application window. We can see Device-Assigned Policies and User-Assigned Policies. However when I assign Local Group Policy not to User but to Active Directory user's group I don't see that policy as User-Assigned or Device-Assigned. I can see just directly assigned Policies for user and device. Is it a correct behavior?
P.S.: policy works correctly.
P.S.: policy works correctly.


Knowledge Partner
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-27
11:22
MaxMyg;2478063 wrote:
One question about ZENworks Agent Technician Application window. We can see Device-Assigned Policies and User-Assigned Policies. However when I assign Local Group Policy not to User but to Active Directory user's group I don't see that policy as User-Assigned or Device-Assigned. I can see just directly assigned Policies for user and device. Is it a correct behavior?
P.S.: policy works correctly.
Good question, I don't think I ever assigned to a group so I can't say but does it show if you run "zac pl --all" in cmd?
Thomas
MaxMyg

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-27
11:32
All policies became visible both in Agent's window and via "zac pl --all" after managed desktop reboot 🙂


Knowledge Partner
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-27
11:38
MaxMyg;2478070 wrote:
All policies became visible both in Agent's window and via "zac pl --all" after managed desktop reboot 🙂
Great, or maybe just a refresh of the agent might had aslo helped.
Thomas
MaxMyg

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-27
11:50
I always refresh agent after all deployments and changes ...and do it many times 🙂 Now I have strange notification for one of the managed desktops. I can see in ZCC red icon and message "Message status: Normal. Device status: Bundle and/or policy enforcement failed on one or more items". May be there is any way to clear that status?


Knowledge Partner
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-03-27
11:58
MaxMyg;2478072 wrote:
I always refresh agent after all deployments and changes ...and do it many times 🙂 Now I have strange notification for one of the managed desktops. I can see in ZCC red icon and message "Message status: Normal. Device status: Bundle and/or policy enforcement failed on one or more items". May be there is any way to clear that status?
Tried clearing the message log for the device?
Thomas