Installing the Application Control Agent
The Application Control Agent is software that you can install on your managed computers. The agent lets Application Control Solution run policies, manage applications, and run defined actions.
You can install the agent from the policies in the Application Control Agent Rollout folder. This folder contains generic policies that can be used to push the agent to managed computers, to upgrade the agent, and for uninstallation.
To install the Application Control Agent
- In the Symantec Management Console, on the Settings menu, click Agents/Plug-ins > All Agents/Plug-ins.
- In the left pane, expand the Arellia > File Inventory folders.
- Click File Inventory Agent Install.
- Ensure the correct policy is selected in the Program name field.
- (Optional) Select Enable Verbose Reporting of Status Events to enable the agent to send status events to Notification Server.
- Under Applied to, click Apply to to specify the computers that the policy applies to.
You can click Quick Apply to enter a group, filter, or target for the policy. For more information, search on topics about policies in the Symantec Management Platform Help.
Note: You must select at least one computer before the policy can be applied. - (Optional) Click Disable download via multicast to disable the multicasting download option.
- Under Schedule, click Add schedule to schedule a time to run the policy at.
You can also schedule a maintenance window to run the policy during. For more information, search on topics about scheduling policies in the Symantec Managment Platform Help. - (Optional) Click Advanced to specify a start and end date for the policy.
- (Optional) Under Extra schedule options, click any of the following options:
- Run once ASAP - Runs the policy as soon as the package has been downloaded to the managed computer and the run conditions have been met. This option creates a mandatory policy that does not display a dialog on the managed computer before running.
- User can run - Lets the user run the policy immediately after it is available.
- Notify user when the task is available - Notifies the user when this policy is available to run. The user can then control when to run the policy.
- Warn before running - Warns the user before the policy runs. The user can then choose to cancel the task, run the task immediately, or be reminded later.
- Ensure that the policy is enabled.
A green On symbol shows in the top right corner. - Click Save changes.
- In the Altiris Console, click the Configuration tab.
- In the left pane, select Configuration > Solution Settings > Security Management > Application Control > Windows > Application Control Agent Rollout.
- Click Application Control 32-bit or 64-bit Agent Install.
- In the right pane, select Enable.
- To enable the File Inventory Agent to send status events to the Notification Server, select Enable Verbose Reporting of Status Events.
- Select the check box to enable sending package status events to the Notification
Server. - To specify a collection to which the policy applies, click the Applies to Collection
link to open the Collection Selector. Note – You must select at least one collection before the policy can be applied. - (Optional) Disable the Downloading via Multicast option.
- Under Scheduling Options, select from:
- Manual - Run the policy manually and not according to a schedule. You can choose one or both of the following:
- Notify the user when this task is available - Select this to notify the user when this policy becomes available to run. The user can then control when to run the policy.
- Warn the user before running this task - Select this to warn the user before a policy is run. The user can then choose to cancel the task, run the task immediately, or be reminded later.
- Schedule - Run the policy according to a schedule. You can schedule the policy to run as soon as possible and set up a schedule for it to be run. You can choose one or more of the following:
- Run once ASAP - Select this to run the policy as soon as the package has been downloaded to the managed computer and the run conditions have been met.
This option creates a mandatory policy that does not display a dialog on the managed computer before running. - Schedule - Select this to run the policy on a schedule. Click No schedule has been defined to open the Schedule Editor. Select one of the following:
- Only run at scheduled time - This option tells the File Inventory Agent to run the policy only at the scheduled time. It will not attempt to queue and run the task after the scheduled time has past.
- Run as soon as possible after the scheduled time - This option tells the File Inventory Agent that if it can't run the task at the scheduled time, that it should continue to attempt to run it at a later time until it succeeds.
- User can run - Select this to let the user run the policy immediately when it becomes available.
- Notify user when the task is available - Select this to notify the user when this policy becomes available to run. The user can then control when to run the policy.
- Warn before running - Select this to warn the user before a policy runs. The user can then choose to cancel the task, run the task immediately, or defer the task.
- Run once ASAP - Select this to run the policy as soon as the package has been downloaded to the managed computer and the run conditions have been met.
- Manual - Run the policy manually and not according to a schedule. You can choose one or both of the following:
- Click Apply.