Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
438 Views 4 Replies Latest reply: Jan 20, 2014 6:41 AM by cologne_claret RSS
Dvanmeter Apprentice 341 posts since
Feb 9, 2005
Currently Being Moderated

Nov 11, 2013 12:54 PM

Permission to Run Task Now on device.

Where is the permission set to allow someone who is not a full EPO admin to initiate a "Run Task Now" on a device?  Any help would be appreciated.

  • Artfulbodger The Place at McAfee Member 48 posts since
    Jun 16, 2010
    Currently Being Moderated
    1. Nov 12, 2013 8:25 AM (in response to Dvanmeter)
    Re: Permission to Run Task Now on device.

    Hi Dvanmeter,

     

    We use tags to trigger client tasks, this then only reqwuires the apply tag and wake agent permissions.

     

    If you set the client task to run immediatley and only on devices with tag x this enables instant task assignment and execution.

  • btadams Newcomer 14 posts since
    Jan 13, 2012
    Currently Being Moderated
    3. Jan 17, 2014 8:22 AM (in response to Dvanmeter)
    Re: Permission to Run Task Now on device.

    The permission needed is "McAfee Agent: ´╗┐View and change task settings.".

  • cologne_claret Newcomer 1 posts since
    Jan 20, 2014
    Currently Being Moderated
    4. Jan 20, 2014 6:43 AM (in response to btadams)
    Re: Permission to Run Task Now on device.

    Hi all,

     

    it is possible to use Run Client Task Now to create a new McAfee Agent Update task to apply all or selected signature and service pack updates to machines, however with only the above permission  "McAfee Agent: ´╗┐View and change task settings" it is not possible to create a new deployment task (at least not under 5.1 and I believe this was the same under 4.6.6). You can select the Product, "McAfee Agent", Task Type, "Product Deployment", but if you then select "Create New Task" under Task Name to install or remove products then "Products and components" shows "no permissions"."

     

    You need the "Master Repository - View Packages" permission to be able to deploy or remove packages to/from clients.

     

    I have just spent a lot of time testing these settings to verify under 5.1, since I needed to be able to delegate the ability to repush the agent or tasks by remote sites' helpdesk personnel, without allowing them to modify existing tasks.

     

    One important thing I have noticed whilst using "Run Client Task Now" - never try to run more than one task at the same time, ie. never try to deploy a new version of more than one product, etc. My experience over the last couple of years has shown these to fail, whereas I accidentally discovered that if I only added or removed one McAfee software product it worked very well. With updates you can select more than one. Maybe somebody else has had different experiences but my tasks always failed if more than one component was selected.

     

    Paul

     

    PS I have been managing ePO for my company (over 5000 clients) for over 15 years, since the very first version.

     

    Nachricht geändert durch cologne_claret on 20.01.14 06:43:13 CST

More Like This

  • Retrieving data ...

Bookmarked By (1)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points