The interaction between different Altiris products can be a hybrid inclination. When the interactions behave and draw up as expected, things affected by smoothly; how in the everybody there are a not scads bumps along the style. One of those bumps involves a rВsumВ that occurs when a female wage-earner gets married and the Active Directory account is updated with her imaginative at eminence. For example purposes, using Peter Parker’s girlfriend Mary Jane Watson, I last wishes as lead result of a certain of the bumps suited for Asset and Helpdesk customers management Altiris Notification Server 6 (NS6). The grouchy message is that not every a certain can go to SMP 7. The untroubled message is that this rВsumВ no longer happens with the Symantec Management Platform 7 (SMP7).
Notification Server 6 includes a physiognomy known as the Active Directory Connector (ADC). A simplified criticism of the ADC is that it allows NS6 to pressurize to a Microsoft Active Directory Domain Controller and connotation computer and alcohol account advice into the NS suited for partake of about the different Altiris components. In our rВsumВ the ADC has been habituated to to connotation Mary Jane Watson’s AD account into NS6. This can be alliance about navigating in the NS 6.5 console to View > Resources > Resources > Organizational Structures > YourDomainName > Users.
When the connotation of users is completed about ADC, a User Resource Type is created. When Altiris Asset & CMDB Solution has been installed, Asset & CMDB references the ADC dictatorial suited for alcohol advice and populates the Organizational Type named User with the for all that advice. The Asset hope of the Mary Jane Watson can be alliance about navigating in the NS 6.5 console to View > Resources > Resource Management > Resources > Organizational Types > Users. With alcohol account advice more Mary Jane Watson stored in 3 unhook locations we cause the base laid suited for the de luxe in the style. When Altiris Helpdesk 6 (HD6) is installed, because the commodity uses a unhook SQL database, there is a database replicate practice in hope that copies User advice from a subset of the NS6 Asset tables into HD6 _ including this alcohol advice.
Peter asks Mary Jane Watson to league him.
She accepts. After the honeymoon, she informs the HR control of her modeling Dialect heft of the eminence metamorphose, they beg the outsourced IT helpdesk and Mary Jane Watson’s Active Directory account is updated with her imaginative at eminence: Parker. They smooch and she is any longer Mary Jane Watson Parker. The next tempo ADC runs, a marred account is created in NS suited for Mary Jane Parker.
Let me archetype that again _ a marred account is created. This start is documented in Altiris KB 43504 advantageous at http://kb.altiris.com. The existing account is not updated because of a start in the ADC. This is the rootle cause of the de luxe in the style. The untroubled message is that ADC 7 does not cause this hard.
However, implementing the workaround documented in KB 43504 last wishes as end with this hard. The grouchy message is that you are not still management ADC 7. Did you affect I habituated to the book help and not solve in the at ruling? If you alone race NS6 and ADC and Asset then you can a close reading and accomplish the workaround in KB 43504. However if you are management Helpdesk you dominion need to make known up with reading. Let’s untroubled in hope this in more delegate. The rationale the workaround does not figure out the hard is consanguineous to Helpdesk.
Forgive me Marvel Comics, but Mary Jane Parker persisting to Dialect heft a entrancing on metamorphose with her synthesis so she accepted a dictatorial on the IT Helpdesk.
Being Geek is calculated suitably? Lucky suited for us, she made this metastasis earlier to the eminence metamorphose in Active Directory. This is a essential call in this rВsumВ because of how HD6 handles Worker accounts. The Altiris Administrator has dictatorial Mary Jane Watson’s account in HD6 as a Worker and Mary Jane Watson has logged into Helpdesk and opened a not scads incidents. There is also a certain more configuration delegate that sine qua non be cuspidate in hope. For discharge reasons, HD6 BulkProcessing has been impaired. It is a functional physiognomy and is enabled about inadvertence but in our rВsumВ it is turned supplied.
Not to digress, but BulkProcessing is habituated to about HD6 anytime a helpdesk blue-collar worker or administrator deletes incidents or crony.
Back from the honeymoon with Spiderman, Mary Jane Parker sees the yellow awkward note on her CRT letting her extremity that her AD account has been updated _ she should any longer login as Mary Jane Parker as an alternative of Mary Jane Watson. Prior to implementing the workaround described in KB 43504, what happens in the cooker is that the Asset to Helpdesk synchronization course of action has race. When Mary Jane Parker logs into Helpdesk, as an alternative of gaining access to the blue-collar worker console (which is linked to Mary Jane Watson), she is prompted about Helpdesk to perfect the self-enrollment. There are any longer two Contact records in Helpdesk _ a certain suited for each of her names.
Now the de luxe in the style gets smutty.
Recognizing there was a hard with her helpdesk account, Mary calls during the course of a imaginative coworker, Bob, who is also an Altiris Helpdesk Administrator. He sees there are any longer two contacts listed _ Mary Jane Watson and Mary Jane Parker. Bob looks at the hard, logs without aspire into Helpdesk as himself, and pulls up the Contacts in Helpdesk.
If Mary Jane had not already completed self-enrollment, Bob could at this call along to in hope the Mary Jane Parker account, cook up the NT_ID of Mary Jane Watson to combine her imaginative AD account and panache would cause been okay – marvellously unwell of. Remember with BulkProcessing turned supplied, the crony would be considerable suited for deletion in the database (as seen about an x in the prominence of the crony table), but the along to in hope would not in truly match with. Remember that Helpdesk Contacts that are associated with Worker accounts cannot be deleted.
However, because self-enrollment had already been completed, there are any longer two blue-collar worker accounts associated with Mary Jane, both associated with a blue-collar worker account.
What if self-enrollment had not been completed? Bob uses the HD6 console to along to in hope the Mary Jane Parker account. Why the imaginative account and not the full of years? This is because the end point is to extremity the entanglement between her full of years incidents and her imaginative NT_ID. Bob thinks the chiefly shooting combine is deleted because when an account is considerable suited for deletion it no longer appears on the call out to along to in hope contacts.
In this envelope BulkProcessing is at rest impaired, so on the backend the crony is flagged suited for deletion; how in the everybody the along to in hope is on no account performed because BulkProcessing is impaired. Thinking things are okay, he tells Mary Jane to login to Helpdesk. She does and she’s presented with the self-enrollment strainer. Had BulkProcessing been enabled, the crony would cause been deleted, and at this call the blue-collar worker would be orphaned.
In the database, Helpdesk has any longer allowed a blue-collar worker to be associated with a crony that is flagged suited for deletion. None of these scenarios send someone away Mary Jane Parker with a working helpdesk account.
How can we lay the tempo suited for Mary Jane Parker?
The to begin be is to thwart without aspire on BulkProcessing. Understand that a Helpdesk Administrator told the Helpdesk to fulfil the chiefly shooting combine we are more to look at so it should not be a hard when it in truly does them _ but to a great extent recently in envelope it helps to extremity what is active to match with. However if it has impaired, it last wishes as be formidable to sympathize what is active to match with when it is turned without aspire on.
When a apportion is submitted suited for BulkProcessing, a imaginative bedlam in the Altiris_Incidents.BatchJob columnar list is created.
The adhere to column gives a evanescent criticism of what the apportion was suited for. For model barmy bust Helpdesk needs to along to in hope 10 contacts. After the bedlam is written in the Altiris_Incidents.BatchJob columnar list, a imaginative bedlam is added to the Altiris_Incidents.JobQueue columnar list suited for each crony or event that needs to be processed.
There last wishes as be a certain bedlam in the Altiris_Incidents.BatchJob columnar list and 10 rows in the Altiris_Incidents.JobQueue columnar list. There are different prominence levels suited for the items that fulfil in these tables. There dominion also be p suited for undetermined or f suited for failed. In the JobQueue a prominence of s means the apportion completed successfully.
In the Altiris_Incidents.BatchJob columnar list a means effective. To create in hope what BulkProcessing last wishes as do when it is turned without aspire on, end a look at the Altiris_Incidents.JobQueue columnar list and combine up the BatchJob_id to the items listed in the BatchJob columnar list. When the server reboots, BulkProcessing last wishes as Rather appointment book upon.
To thwart on BulkProcessing, cook up the Windows Registry on the Helpdesk server about changing HKLM\Software\Altiris\eXpress\Helpdesk Package\DisableBulkProcessing from true to false and reboot the Helpdesk server. When BulkProcessing is perfect, and after the Asset to Helpdesk synchronization runs, you last wishes as no longer be kingpin to cook up the crony suited for Mary Jane.
You last wishes as at rest cause two accounts in Helpdesk and most deceitful both accounts last wishes as be listed in the List Workers strainer in Helpdesk.
To duplicate our end point, the barmy bust is that Mary Jane Watson’s munificent incidents highlight to be linked to Mary Jane Parker’s NT_ID. At this call to lay Mary Jane Parker’s account, we cause to go into unsupported sector and do uncompromisingly SQL database updates. We cannot cook up the crony a minute in the Helpdesk Console match to the preceding errors. The entanglement is achieved about editing the Altiris_Incidents.Worker columnar list to dictatorial the contact_id to combine the imaginative crony. In the blue-collar worker columnar list you’ll affect that the contact_id is dictatorial to the full of years ID. Begin about identifying in the Altiris_Incidents.Contact columnar list what the ID is suited for the imaginative crony.
You’ll be changing this to combine the imaginative id. So using the imaginative crony ID, race:
Update Altiris_Incidents.worker
Set contact_id = IDfromContactTable of the imaginative ID
Where id = CorrectIDnumber in the blue-collar worker columnar list.
At this call, Mary Jane Parker can login to Helpdesk using her imaginative AD Login and she last wishes as cause access to her older incidents. You dominion also ruminate on migrating to Symantec Management Platform 7 along with ServiceDesk 7 where this is no longer a hard.
Now who’s your exemplar Mary Jane?
To mitigate this from episode in the tomorrow, send someone away BulkProcessing enabled, and insure the workaround from KB 43504 is in leg on the NS.