ZENworks for Desktops 4 Support Pack 1b Known Issues

June 26, 2003

The information in this Readme file pertains to Novell® ZENworks® for Desktops (ZfD) 4 Support Pack (SP) 1b.

This Support Pack contains updates for all components contained in the ZENworks for Desktops product only. If the Support Pack file was downloaded, it must be extracted at the root of the drive because it contains directory paths that could exceed the DOS limits.

The purpose of this Support Pack is to provide a bundle of fixes that have all been tested together. These files have undergone component testing, core OS testing, and integration testing with other Novell products.

Do not install individual files from the Support Pack.

Install the NetWare® Support Pack before installing other Novell product support packs like GroupWise® and ZENworks for Servers. These Support Packs are included with the Consolidated Support Pack, or they can be downloaded individually from the Consolidated Support Pack Web site.

For information on the latest Support Pack issues, see TID 10077724 at the Support Connection Web site .

To order the Support Pack CD, go to the Consolidated Support Pack Web site .

For information on the issues corrected in the Support Pack since the original version of ZfD 4 was released, see TID 10077083.

1.0 Readme Updates
1.1 April 28, 2003
1.2 May 2, 2003
1.3 June 24, 2003
1.4 June 26, 2003
2.0 Product Limitations
2.1 Policy Limitations
2.1.1 Unsupported Policies
2.1.2 Unsupported Windows XP Group Policy Security Settings
3.0 Installation Issues
3.1 ZfD Server Installation Issues
3.1.1 Insufficient Free Space on Installing Workstation May Cause Installation to Fail
3.1.2 Installation Might Fail on a NetWare Server
3.1.3 Can't Authenticate to a Windows 2000 Server During Installation
3.1.4 Installing ConsoleOne from a Windows 2000 Server Alters The Windows Registry
3.2 ZfD Middle Tier Server Installation Issues
3.2.1 Installing NetWare 6 SP1 Causes ZfD Middle Tier Server Problems
3.2.2 Installing ZfD Middle Tier Server on a Windows 2000 Server Requires Two Reboots
3.2.3 ZfD 4 SP1b Middle Tier Server Fails if Installed over Previous Version of ZfD 4
3.2.4 Uninstalling the Novell Client on a Windows 2000 Server with the ZfD Middle Tier Server Causes a Failure
3.3 ZfD Management Agent Installation Issues
3.3.1 Microsoft Windows Installer Must Be Installed on Windows Workstations
3.3.2 Preparing for the ZfD Management Agent Installation
3.3.3 ZfD Management Agent Install Fails When ConsoleOne is Open on the Workstation
3.3.4 Uninstalling the ZfD Management Agent Using NAL Does Not Prompt For a Workstation Reboot
3.3.5 Users Cannot Remove Previously Installed ZfD Management Agent Features
3.3.6 Installing ZfD 4 SP1b Remote Management over ZfD 4 SP1 Remote Management
3.3.7 Installing ZfD 4 SP1b Management Agent over ZfD 4 SP1 Management Agent on a Windows 98 Workstation
3.4 Application Management Installation Issues
3.4.1 Additional Configuration of a NetWare 5.1 Server is Necessary to Use the Application Browser View
3.5 Workstation Imaging Installation Issues
3.5.1 Reinstalling or Upgrading Workstation Imaging on a Windows NT/2000 Server Generates an Error in the Log File
4.0 ZfD Middle Tier Server and Authentication Issues
4.1 Unable to Authenticate to Windows 2000 ZfD Server with Active Directory and eDirectory Installed
4.2 Manually Unloading Middle Tier Server Handlers Causes a Server Abend
4.3 Using NDS Server Console on Windows 2000 Requires Administrator Rights
4.4 Logging in to the Workstation with a Different Password Causes MSI Distribution to Fail
4.5 Server Hangs When Many Users Log In Simultaneously
4.6 Changing the eDirectory Password from a Security Dialog Box
5.0 Workstation Management Issues
5.1 Workstation Management Does Not Work Outside the Firewall
5.2 Group Policies Do Not Run Correctly on Windows XP Desktops
5.2.1 Group Policies Might Not Be Applied on Windows Workstations if Policies are not Refreshed Synchronously
5.2.2 User Policy Security Settings Overwrite Workstation Policy Security Settings
5.3 Renaming a Default User Account in a Windows Group Policy
5.4 iPrint Printers Are Not Distributed to Windows 2000/XP Users by the iPrint Policy
5.5 Using the ZfD 4 iPrint Policy to Install the iPrint Client
6.0 Application Management Issues
6.1 Nal.exe and Nalexpld.exe
6.2 Running Nal.exe from the Server
6.3 Application Objects Are Not Visible if Launched from a Remote Terminal Session
6.4 Renaming a Personal Folder in Application Explorer Adds a Second Folder
6.5 Uninstalling Applications Does Not Force a Workstation Reboot
6.6 Applications Are Not Delivered through a Firewall if ZfD Is Installed on Windows 2000 Servers
6.7 Using Software License Metering and Monitoring
6.8 Applications Associated to Windows 98 Workstations Are Unavailable Offline
6.9 Windows 98 Computer Standby Feature Disabled
7.0 Workstation Imaging Issues
7.1 Upgrading to a Dynamic Disk System on Windows 2000 Workstations
7.2 Workstations Might Not Recognize an Imaging Multicast Session from a Server without an eDirectory Replica
7.3 Unable to Choose an IP Address on a Windows 2000 Imaging Server with Multiple NICs
8.0 Remote Management Issues
8.1 Display Adapters Are Not Supporting the Screen Blanking Feature
8.2 Remote Control with a Full-Screen DOS Window
8.3 Wallpaper Suppression During a Remote Session
8.4 Cursors Are Not Supported for Remote Management
8.5 Spaces Are Not Allowed in a Password for Remote Management Sessions
8.6 Remote Management Password Does Not Support Extended Characters on Non-English Platforms
8.7 Win 2000/XP Workstations with Remote Management Agent Do Not Support Older NVIDIA Drivers
9.0 Workstation Inventory Issues
9.1 Support for Sybase Adaptive Server Anywhere Version 8
9.2 Double-Byte Characters Are Not Supported in the SCANDIR Path if the Novell Client Is Not Installed on Inventoried Workstations
9.3 DBExport Fails to Run in An Isolated Mode on a Windows NT/2000 Server
10.0 Upgrade Issues
10.1 ZfD 4 Management Agents Must Be Rebooted after Server Is Upgraded to ZfD 4 SP1b
11.0 Interoperability Issues
11.1 ZfD 4 Interoperability With ZENworks for Servers 3 SP1
11.2 ZfD 4 Interoperability With Novell iChain 2.0
11.3 ZfD 4 Interoperability With ZfD 3.2
11.3.1 Rollup Database Server Does Not Work
11.3.2 Inventory Query Does Not Work if ZfD 3.2 ConsoleOne Snap-Ins Are Loaded
11.3.3 ZfD 4 Remote Control Features Do Not Work on a ZfD 4 Workstation if ZfD 3.2 Snap-ins Are Loaded
11.4 ZfD 4 SP1b Interoperability with ZENworks for Servers 3 SP2
12.0 Other Known Issues
12.1 No Support for DNS-Rooted or Federated Trees
12.2 Some ConsoleOne Properties Pages Have Been Consolidated
12.3 Workstation Import and Workstation Management Do Not Work with VPN
13.0 Documentation Conventions
14.0 Legal Notices


1.0 Readme Updates

This document was updated in the following sections on the dates indicated.


1.1 April 28, 2003

The section entitled "DBExport Fails to Run on Windows NT/2000 Servers If Other JREs are Installed" was added to Workstation Inventory issues.


1.2 May 2, 2003

The section entitled 6.9 Windows 98 Computer Standby Feature Disabled was added to the Application Management issues.


1.3 June 24, 2003

The section entitled 9.3 DBExport Fails to Run in An Isolated Mode on a Windows NT/2000 Server was added to the Workstation Inventory issues.


1.4 June 26, 2003

The section entitled "DBExport Fails to Run on Windows NT/2000 Servers If Other JREs are Installed" was deleted from the Workstation Inventory issues.


2.0 Product Limitations


2.1 Policy Limitations

Beginning with ZfD 4, some previously supported Windows desktop policies were discontinued. In addition, in ZfD 4 SP1b, some Group Policy settings cannot be applied to Windows XP desktops. This section explains the details of these policy limitations.


2.1.1 Unsupported Policies

The following policies are not a part of the ZENworks for Desktops 4 SP1b installation.

Customers who are upgrading from 3.x versions of ZfD will be able to retain the functionality of these policies. Retaining the functionality requires the continuing use of the previously-used directory tree. ZfD 3.x snap-ins will also be required to administer the legacy policies.


2.1.2 Unsupported Windows XP Group Policy Security Settings

Although they can be configured locally, certain security settings cannot be extended to a Windows XP Group Policy on the network because Microsoft* doesn't publish any method to modify them. The following security settings cannot be modified and will not work in a Windows XP Group Policy pushed to the network:


3.0 Installation Issues


3.1 ZfD Server Installation Issues

This section explains the installation issues for the ZfD Server, the ZfD Middle Tier Server, and the ZfD Management Agent. It also discusses some installation issues for ZfD components such as Application Management and Workstation Imaging.


3.1.1 Insufficient Free Space on Installing Workstation May Cause Installation to Fail

The ZfD 4 SP1b installation program requires free space on the designated system drive of the workstation from which you are installing. If the installation program fails, it might be because there is not sufficient free space to continue.

You must create sufficient space in order to continue with the installation. If your Windows drive is almost full, you can set the SystemDrive environment variable to use disk space on another drive.

Example: SystemDrive=D:


3.1.2 Installation Might Fail on a NetWare Server

The ZfD Server installation program reads its autoexec.ncf file to find and use the first listed BIND IP Address statement. If the file has two or more BIND IP Address statements and if the first address is incorrect or inactive, the installation will fail.

To correct the problem, make sure that the correct IP address is listed first in the autoexec.ncf file.


3.1.3 Can't Authenticate to a Windows 2000 Server During Installation

If you are trying to install ZfD Server software to a Windows 2000 server, you might not be able to add it as a targeted server in the Add Servers dialog box, particularly if Novell eDirectoryTM is installed on the Windows 2000 server and you are authenticated to eDirectory. You must also be authenticated through Windows in order for the file transfer to occur during the installation.

Use the following steps to authenticate to the target server:

  1. From the Windows Explorer, click Tools > Map Network Drive to open the Map Network Drive Wizard.

  2. Click the active link on the Connect Using a Different User Name string to open the Connect As dialog box.

  3. Enter the computer name of the target server, followed by a backslash (\) and the administrator name. For example:

    zenserver\administrator

  4. Enter the password for the target server to return to the Map Network Drive Wizard.

  5. In the Folder field, type or browse to the shared folder name followed by a backslash (\) and C$. For example:

    \\zenserver\C$

  6. In the Drive field, select the drive letter you want to map to this folder > click Finish.


3.1.4 Installing ConsoleOne from a Windows 2000 Server Alters The Windows Registry

If you use a Windows 2000 server with ConsoleOne® installed to install ConsoleOne to another server, Windows adds the new installation path to ConsoleOne to its registry, which also includes the default location of the previously installed ConsoleOne.

If you use this same Windows 2000 server to install ConsoleOne snap-ins to another server, the installation will fail because it uses the default path for installation.

If you cannot install the snap-ins from another server, we recommend that you delete the default value from the following registry entry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App_Paths\ConsoleOne.exe


3.2 ZfD Middle Tier Server Installation Issues

This section contains information about the issues that might occur when you install the ZfD Middle Tier Server software.


3.2.1 Installing NetWare 6 SP1 Causes ZfD Middle Tier Server Problems

If you install NetWare 6 SP1 on a server that already has ZfD Middle Tier Server installed, the ZfD Middle Tier Server will stop working. If this happens, you need to reinstall the ZfD Middle Tier Server software.


3.2.2 Installing ZfD Middle Tier Server on a Windows 2000 Server Requires Two Reboots

If you install the ZfD Middle Tier Server software on a Windows 2000 server, you must restart that server twice to load the newly installed software.


3.2.3 ZfD 4 SP1b Middle Tier Server Fails if Installed over Previous Version of ZfD 4

If you upgrade a shipping version of ZfD 4 Middle Tier Server running on NetWare 5.1 SP5 with ZfD 4 SP1b Middle Tier Server, the Middle Tier Server components will not work.


3.2.4 Uninstalling the Novell Client on a Windows 2000 Server with the ZfD Middle Tier Server Causes a Failure

If you install the Novell Client on a Windows 2000 server, then install the ZfD Middle Tier Server on the same machine, then uninstall the Novell Client from this server, the ZfD Middle Tier Server will fail.


3.3 ZfD Management Agent Installation Issues

This section contains information about the issues that might occur when you install the ZfD Management Agent software.

IMPORTANT:  The version of the ZfD Management Agent that shipped with ZfD 4 (setup.exe) is no longer supported. Current ZfD 4 users should replace the older version of the agent with the version of the agent shipping with ZfD 4 SP1b or ZfD 4.0.1 (zfdagent.msi). ZfD 4 SP1b is included as part of Consolidated Support Pack (CSP) 9, and can be downloaded individually from the CSP download Web site. The updated ZfD Agent MSI (ZfD 4 SP1b/4.0.1) can also be downloaded from the Novell Product Downloads Web site.

If you have downloaded and installed interim patches for the ZfD 4 Management Agent, refer to the ZfD 4 Upgrade guide at the ZfD 4 documentation Web site for information about upgrading from your current ZfD Management Agent to the ZfD 4 SP1b/4.0.1 Management Agent.


3.3.1 Microsoft Windows Installer Must Be Installed on Windows Workstations

The Microsoft Windows Installer engine (msi.dll) must be present on the workstation in order for the ZfD Agent MSI package to be unpacked and executed. Some Windows 98 and Windows NT workstations might not have the MSI engine installed, so the ZfD Agent MSI package will not install.

You can obtain the latest version of the Windows Installer from the Microsoft downloads site or you can use the MSI 2.0 file that is available in the \windows installer folder of the ZENworks for Desktops Companion CD.


3.3.2 Preparing for the ZfD Management Agent Installation

When the ZfD Management Agent MSI package is distributed and installed, it uninstalls the existing installation of the ZfD 4 Management Agent (that is, the last shipping version, setup.exe) on Windows workstations.


3.3.3 ZfD Management Agent Install Fails When ConsoleOne is Open on the Workstation

If you distribute the ZfD Management Agent MSI through Application Launcher to a Windows workstations, users should not have ConsoleOne open on those workstations.

If ConsoleOne is open during the distribution, the ZfD Agent Installation MSI will fail.


3.3.4 Uninstalling the ZfD Management Agent Using NAL Does Not Prompt For a Workstation Reboot

If you configure the ZfD Management Agent MSI object to allow a user-based uninstall, the workstation does not currently prompt for a reboot when the user executes an uninstall by right-clicking the Application object icon.

If you grant Administrator rights to the user, he or she can uninstall the ZfD Management Agent using Add/Remove Programs. In this case, the workstation does display a prompt for reboot.

Because the uninstall might have had an effect on the Windows registry, other applications reading the registry at startup might be adversely affected unless the workstation is rebooted. Users should always reboot their workstations manually after uninstalling the ZfD Management Agent by right-clicking the application icon.


3.3.5 Users Cannot Remove Previously Installed ZfD Management Agent Features

If you previously installed some ZfD features with the ZfD Management Agent installation, and you subsequently try to manually uninstall those features by using the Modify Features dialog box, you will receive the following error message:

A feature must be selected in order to proceed with the install.

The uninstall of the feature will not be successful.

You must use an Application object with the Novell Application LauncherTM to uninstall previously installed features.


3.3.6 Installing ZfD 4 SP1b Remote Management over ZfD 4 SP1 Remote Management

If you have installed ZfD 4 SP1 Remote Management with Mirror Driver option selected, do not install ZfD 4 SP1b Remote Management directly over it.

To install ZfD 4 SP1b Remote Management, do the following:

  1. Uninstall the ZfD 4 SP1 Management Agent.

  2. Reboot the workstation.

  3. Install the ZfD 4 SP1b Management Agent.

If you install the ZfD 4 SP1b Remote Management component over the ZfD 4 SP1 Remote Management component, the Found New Hardware Wizard dialog box prompts you to install Novell ZENworks Remote Management Driver. If this happens, click Next. In the Hardware Installation or Digital Signature Not Found dialog box, click Continue Anyway.


3.3.7 Installing ZfD 4 SP1b Management Agent over ZfD 4 SP1 Management Agent on a Windows 98 Workstation

If you have installed ZfD 4 SP1 Management Agent, do not install the ZfD 4 SP1b Management Agent directly over it.

To install the ZfD 4 SP1b Management Agent, do the following:

  1. Uninstall the ZfD 4 SP1 Management Agent.

  2. Reboot the workstation.

  3. Install the ZfD 4 SP1b Management Agent.

If you install the ZfD 4 SP1b Management Agent over the ZfD 4 SP1 Management Agent, the following error messages are displayed on reboot:

Cannot load dynamic link library for path\wmnetp.dll

Cannot find ZENautil.dll

Click OK on the error messages, then log in and install the SP1b ZfD Management Agent using a manual installation. This will add the missing files.


3.4 Application Management Installation Issues

This section contains information about the issues that might occur when you install the Application Management component of ZfD 4 SP1b.


3.4.1 Additional Configuration of a NetWare 5.1 Server is Necessary to Use the Application Browser View

If you want to use the Application Browser view of the Novell Application Launcher, some additional configuration is necessary if you have installed ZfD Middle Tier Server software to a NetWare 5.1 server where apache\htdocs is the default directory of the Apache files.

You need to manually copy two files, myapps.html and zfdwebsw.exe, from the apache\nwdocs directory to a public directory (the default is apache\htdocs) on this server.


3.5 Workstation Imaging Installation Issues

This section contains information about the issues that might occur when you install the Workstation Imaging component of ZfD 4 SP1b.


3.5.1 Reinstalling or Upgrading Workstation Imaging on a Windows NT/2000 Server Generates an Error in the Log File

If you reinstall or upgrade the Workstation Imaging component of the ZENworks Server installation, the following lines will be added to the zfdlog.txt log file:

Imaging\NTa Components NOT successfully installed on <server_name> at <installation_path> 
Imaging\NTb Components NOT successfully installed on <server_name> at <installation_path>

The installation log file (zenworks_for_desktops_server_installlog.log) indicates that the zenimgdsr.dll file was not successfully copied. This condition exists because the original .dll file remains open on the server during the installation. Both the ZfD 4 and the ZfD 4 SP1b versions of the .dll are the same, so the failure to install is inconsequential.

If you want to avoid the error, you can rename zenimgdsr.dll on the server and then run the installation program.


4.0 ZfD Middle Tier Server and Authentication Issues

This section explains the issues that might occur when users try to authenticate to the ZfD Server using either the Novell Client or the ZfD Management Agent for login.


4.1 Unable to Authenticate to Windows 2000 ZfD Server with Active Directory and eDirectory Installed

If you try to authenticate through the ZfD Middle Tier Server to a ZfD Server installed on a Windows 2000 machine that already has Active Directory* (installed because the ZfD Server acts as the Primary Domain Controller) and eDirectory (installed to accommodate ZfD) both installed, the authentication will fail unless the user logs on with a full context.

The reason for this failure is a contention for the default LDAP port between the Active Directory and eDirectory LDAP listeners. To work around this port conflict, during the install of eDirectory either choose an LDAP port other than the default of 389 or modify the LDAP Group object found in the server's container in ConsoleOne, then use the nsadmin utility in the ZfD Middle Tier Server to configure the ZfD Middle Tier Server to communicate over that port.

To configure the port in NSADMIN:

  1. In the Address box of Internet Explorer, type the URL for the NSADMIn utility. For example:

    http://IP_address/oneNet/nsadmin

  2. In the Value field of the LDAP Port configuration parameter, specify the LDAP port number you already set in eDirectory, which the ZfD Middle Tier Server should use to communicate with the ZfD Server > click Submit.


4.2 Manually Unloading Middle Tier Server Handlers Causes a Server Abend

If you try to manually unload the Middle Tier Server Handlers (for example, xzen.nlm) running on NetWare 5.1 or NetWare 6, the server will abend.

On NetWare 6, you should use NVXADMDN to unload Apache and Middle Tier handlers. Use NVXADMUP to restart Apache and Middle Tier handlers.

On NetWare 5.1, enter the following command:

unload apache


4.3 Using NDS Server Console on Windows 2000 Requires Administrator Rights

Using ndscons.exe on Windows 2000 to verify the connection between the ZfD Middle Tier Server and the ZfD Server will not work unless you have Administrator rights for the local Windows 2000 user.


4.4 Logging in to the Workstation with a Different Password Causes MSI Distribution to Fail

If users log in to a local workstation with a User ID that does not match the user ID in eDirectory, the distribution of MSI applications to the workstation (including the Agent MSI program) will fail.

For user a workstation to receive an MSI application distribution, the user's local User ID and eDirectory User ID must match.


4.5 Server Hangs When Many Users Log In Simultaneously

If many (that is, hundreds of) users attempt to log in to the network at the same time through a ZfD Middle Tier Server on NetWare 6, NetWare 6 SP1b, or NetWare 6 SP2, the server might hang because of high utilization problems. To fix this problem, download and install the patch for Novell Storage ServicesTM (NSS) available from Novell Support at http://support.novell.com. Search for TID 10072765.

The issue is resolved with NetWare 6 SP3, which includes the fix mentioned above.


4.6 Changing the eDirectory Password from a Security Dialog Box

A workstation with the ZfD Management Agent installed and running in Passive mode without the Novell Client presents the following option in a drop-down box when you click Change Password from a Windows Security dialog box (Ctrl+Alt+Delete):

<Novell Netidentity Credentials Provider>

This option for changing the eDirectory password from Netidentity is currently non-functional. To change the password for the Agent running in Passive mode, open the Control Panel, click Network Identity, and change the password in the appropriate dialog box.


5.0 Workstation Management Issues

This section identifies some areas of the ZfD Workstation Management component that might not work properly or that might require further configuration in ZfD 4 SP1b.


5.1 Workstation Management Does Not Work Outside the Firewall

If the Novell Client and the ZfD Management Agent are installed on a workstation (for example, a laptop workstation) and that workstation is taken outside of the corporate firewall, only the traditional Novell Client login will be displayed at login, and the user will only be able to log in locally by choosing Workstation Only.

In this scenario, ZfD Workstation Management will not work (that is, no ZfD policies will be applied and Workstation Manager will not work), but ZfD Application Management will work (that is, applications will be available from any view of the Novell Application Launcher). If users log in locally they will see only the installed applications that are marked "disconnectable" or applications that were force-cached when they were connected.

If the ZfD Management Agent and the Novell Client are both installed and the agent is configured with a Middle Tier Server address, users can log in to the Middle Tier through the Application Launcher after logging in only to the workstation with the Client. In this case, the Application Launcher works normally, except it accesses eDirectory and the file system through the Middle Tier Server instead of the Novell Client.

If you have only the ZfD Management Agent installed on a workstation outside the firewall, ZfD Policies and the Workstation Manager will work.


5.2 Group Policies Do Not Run Correctly on Windows XP Desktops

This section discusses some aspects of Windows Group policy administration that might not work properly or that might require further configuration in ZfD 4 SP1b.


5.2.1 Group Policies Might Not Be Applied on Windows Workstations if Policies are not Refreshed Synchronously

Some Group Policy settings might not appear on Windows desktops because ZENworks, by default, signals Windows to refresh Group Policies asynchronously. The most noticeable effect of this behavior occurs when policies remove items from the desktop. If those items aren't processed early in the login process, the settings will not work.

ZENworks can be configured to refresh Group Policies synchronously to address this issue.

To enable synchronous processing of Group Policies at each Windows workstation, create a new DWORD value named "Apply Policies Synchronously" with a value of 1 in the registry in the following location:

HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Workstation Manager\Group Policies

This setting will cause ZENworks to wait for Windows to process the Group Policies before pushing them to the desktop.


5.2.2 User Policy Security Settings Overwrite Workstation Policy Security Settings

If you apply a workstation group policy created for Windows XP that is configured with security settings and you also apply a user group policy created for Windows XP that is configured with security settings (for example, you want to define a user certificate), the security settings applied with the user group policy will overwrite the security settings applied by the workstation group policy.

If you disable the security settings in the user policies, the security settings configured in the workstation policy are set and activated.


5.3 Renaming a Default User Account in a Windows Group Policy

If you launch the Microsoft Management Console (MMC) from ConsoleOne to edit a Windows Group Policy---specifically to rename a default user account (Administrator or Guest), you must not be logged in as the user whose default account name you are changing. If you log in using this default account and rename the account, the changes will not be saved to the network path you designate in ConsoleOne and might remain on the administration machine.


5.4 iPrint Printers Are Not Distributed to Windows 2000/XP Users by the iPrint Policy

After ZfD 4 SP1b installation, iPrint printers are not distributed to users running Windows 2000/XP workstations, even after the ZfD 4 SP1b iPrint policy is configured in the User Policy package (which installs the iPrint Client and pushes printer drivers to the users) and their workstations are rebooted.

To work around this problem, modify the AllowUserPrinters value in the iprint.ini file in the \\server_name\sys\login\ippdocs directory from zero (0)---the default value---to one (1), which will allow the user to add the printer.

NOTE:  The iprint.ini file is available only if you have installed Novell Distributed Print ServiceTM as part of a NetWare installation and if you have extracted the nipp.exe to that directory. If you do not have iprint.ini and nipp.exe, you can download them from Novell Support at http://support.novell.com. Search for TID 10080443.


5.5 Using the ZfD 4 iPrint Policy to Install the iPrint Client

If you use the ZfD 4 iPrint Policy to install the iPrint Client on a network workstation and then reboot, non-Administrator users are prompted with a dialog asking for Administrator credentials. The system asks for a reboot because a value is placed in the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce key in the Windows registry by InstallShield (the installation program used by the iPrint Client).

This value initializes the cleanup routine for the InstallShield installation and requires Administrative privileges to execute. Until either the prompt is satisfied with Administrative credentials or this value is removed from the RunOnce key, the non-Administrative user will continue to be prompted for Administrator credentials at login to the local workstation.


6.0 Application Management Issues

This section identifies some areas of the ZfD Application Management component that might not work properly or that might require further configuration in ZfD 4 SP1b.


6.1 Nal.exe and Nalexpld.exe

Although nal.exe and nalexpld.exe are included the product and still launch executables, their purpose is to facilitate the continued functioning of existing login scripts.

The ZENworks for Desktops 4 release only supports switches that are supported by nalwin32.exe. To see a list of these switches, enter the following command:

nalwin32.exe /?

These switches are fully documented in the Application Management section of the ZfD Administration guide available at the ZENworks for Desktops documentation Web site.


6.2 Running Nal.exe from the Server

Running nal.exe from the server returns the following error:

The ordinal 6625 could not be located in the dynamic link library MFC42.DLL

This error occurs because an older version of mfc42.dll is already installed on the server in sys:\public. To work around the problem, you need to copy a newer version of mfc42.dll to this location. You can find a newer version in the \supplemental folder of the ZENworks for Desktops Companion CD.


6.3 Application Objects Are Not Visible if Launched from a Remote Terminal Session

The new Terminal Server system requirement on an Application object applies only to remote Terminal Server sessions. Sessions running at the Terminal Server console are considered to be remote sessions by default. This behavior can be changed by creating the following registry key on the Terminal Server itself:

HKEY_LOCAL_MACHINE\Software\Netware\Nal\ConsoleIsNotTS

Creating this registry key will cause sessions running on the Terminal Server console to be treated as non-Terminal Server sessions.


6.4 Renaming a Personal Folder in Application Explorer Adds a Second Folder

If you enable personal folders when you configure the Novell Application Launcher snap-in for ConsoleOne, users with the Windows XP, Windows 2000, or Windows 98SE operating systems who rename folders in Application Explorer view will notice that the act of renaming a personal folder actually creates a new folder instead. The issue occurs only when the following steps are used:

  1. Enable personal folders in ConsoleOne.

  2. From a Windows 98SE/2000/XP workstation, open the Application Explorer view.

  3. Right-click the personal folder > click Explore.

  4. Create one or more new folders > rename a folder.

    A new folder is created.

Users can work around this problem after it occurs by closing the Application Explorer view and then reopening it. The view will open without displaying a duplicate folder with the original name.


6.5 Uninstalling Applications Does Not Force a Workstation Reboot

When a distributed application is configured to be uninstalled from a workstation, the workstation does not currently prompt for a reboot when the uninstall is complete.

Because the uninstall might have had an effect on the Windows registry, other applications reading the registry at startup may be adversely affected unless the workstation is rebooted. Users should always reboot manually after a distributed application is uninstalled.


6.6 Applications Are Not Delivered through a Firewall if ZfD Is Installed on Windows 2000 Servers

Applications cannot be delivered through a network firewall if ZfD Server software and ZfD Middle Tier Server software are installed and running on a Windows 2000 server.

If the ZfD Server and the ZfD Middle Tier Server use Active Directory and Windows Domains, and if the ZfD Middle Tier Server is part of a domain, create a user and password in Active Directory to correspond exactly to the username and password in eDirectory. The Middle Tier Server and the ZfD Server must be members of the same Active Directory domain. Windows workgroups do not work.


6.7 Using Software License Metering and Monitoring

A key component of Novell Licensing Services, nls32.dll, does not ship with the current Novell Client. As a result, an error will be generated when you try to use Software License Metering and Monitoring in ZfD.

You can find a newer version of nls32.dll in the \nal licensing folder of the ZENworks for Desktops Companion CD. Copy nls32.dll to the following location:

Windows NT/2000/XP Workstation: Copy to c:\winnt\system32

Windows 98 Workstation: Copy to c:\windows\system


6.8 Applications Associated to Windows 98 Workstations Are Unavailable Offline

If you associate an application to a Windows 98 workstation, configure it to Force Cache, distribute the application to the workstation, and then try to run the application when the workstation is disconnected from the network, the application icon will disappear from any launching point (that is, the desktop, system tray, or Start menu). The icon reappears when the workstation is reconnected to the network.


6.9 Windows 98 Computer Standby Feature Disabled

After you install the ZfD Management Agent to a Windows 98 workstation, the Computer Standby feature will no longer work. When you initiate standby, the Computer Standby dialog box appears. However, the dialog box never dismisses and Task Manager displays "Not Responding."


7.0 Workstation Imaging Issues

This section identifies some areas of the ZfD Workstation Imaging component that might not work properly or that might require further configuration in ZfD 4 SP1b.


7.1 Upgrading to a Dynamic Disk System on Windows 2000 Workstations

Upgrading a Windows 2000 workstation hard disk from a Basic Disk System to a Dynamic Disk System changes the partition table so that it does not does not allow the workstation to boot to the production partition, only to the ZfD Linux* partition. No fixes for this issue are included in ZfD 4 SP1b.

If you choose to use dynamic disks on the workstation, you must create the image after the disks have been upgraded from basic to dynamic disks.


7.2 Workstations Might Not Recognize an Imaging Multicast Session from a Server without an eDirectory Replica

When booting multiple workstations from a Preboot Services environment to a server object configured for an imaging multicast session, some workstations might not recognize the multicast session unless the server contains a RW replica of eDirectory.

To correct the problem, add a RW replica to the server.


7.3 Unable to Choose an IP Address on a Windows 2000 Imaging Server with Multiple NICs

If you install the ZfD 4 SP1b Workstation Imaging component to a Windows 2000 server that has more than one network interface card (NIC), you do not have the option of binding the imaging proxy server to a specific IP address.

If you install ZfD 4 SP1b Workstation Imaging to a NetWare server, you can bind the imaging proxy server to a specific IP address (that is, the NIC of your choice) by using the following switch:

load imgserv -i:IP_Address


8.0 Remote Management Issues

This section identifies some areas of the ZfD Remote Management component that might not work properly or that might require further configuration in ZfD 4 SP1b.


8.1 Display Adapters Are Not Supporting the Screen Blanking Feature

The display adapters listed below do not support the Screen Blanking feature of Remote Management. The managed workstation screen will not be blanked when these adapters are used.

IMPORTANT:  Some of the following adapters may cause the managed workstation to hang or crash.

In addition, the Screen Blanking feature will not work on any display adapter that is not 100% VGA-compatible.


8.2 Remote Control with a Full-Screen DOS Window

If the managed workstation has a full-screen DOS window open, you will not be able to remotely control it.


8.3 Wallpaper Suppression During a Remote Session

During a Remote Control or Remote View session, the active desktop wallpaper on the managed workstation might not be suppressed.

To improve the Remote Management performance, suppress the wallpaper before starting the Remote Control or Remote View session.


8.4 Cursors Are Not Supported for Remote Management

The animated and the colored cursors on the managed workstation are not supported for Remote Management.


8.5 Spaces Are Not Allowed in a Password for Remote Management Sessions

Password-based authentication will fail if spaces are included in the password that is used to initiate a Remote Management session.


8.6 Remote Management Password Does Not Support Extended Characters on Non-English Platforms

Only English characters are supported in the Remote Management password on non-English platforms. If extended characters are used while setting the password, Remote Management authentication will fail.


8.7 Win 2000/XP Workstations with Remote Management Agent Do Not Support Older NVIDIA Drivers

NOTE:  The following information is applicable if you do not select the Mirror Driver, which is available as a Remote Management subfeature in the ZfD Management Agent installation program.

A Windows 2000/XP workstation with the NVIDIA graphics driver version 41.09 (or earlier) installed and with the Remote Management Agent also installed will crash with a General Protection Fault (blue screen) if a user changes the display settings or previews the screen saver or reboots the workstation after installing Remote Management.

Use the following steps to work around this problem.

  1. From the NVIDIA Web site, download the NVIDIA graphics driver version 42 and install it on the affected Win 2000/XP workstation.

  2. Reinstall the Remote Management Agent on the workstation.

For more information, see TID 10076769 in the Novell Support Knowledgebase.


9.0 Workstation Inventory Issues

This section identifies some areas of the ZfD Workstation Inventory component that might not work properly or that might require further configuration in ZfD 4 SP1b.


9.1 Support for Sybase Adaptive Server Anywhere Version 8

The ZfD 4 Inventory database cannot be mounted on a Sybase* Adaptive Server* Anywhere 8 database. Also, the Sybase engine shipping with ZfD 4 cannot coexist on a NetWare server where Sybase ASA 8 is running.


9.2 Double-Byte Characters Are Not Supported in the SCANDIR Path if the Novell Client Is Not Installed on Inventoried Workstations

If the Novell Client is not installed on inventoried workstations, and if you use double-byte characters in the Inventory Service object's scan directory (scandir) path, the .str files will not be transferred to the Inventory server.

By default, the scandir path is the installation path where the Inventory server-side components and the database are installed (unless you manually changed it after the ZfD 4 installation by configuring the Inventory Service object).


9.3 DBExport Fails to Run in An Isolated Mode on a Windows NT/2000 Server

When you install ZfD 4 SP1 Workstation Inventory on a Windows NT/2000 server, the installation program will automatically copy the JRE 1.3.1 to the server. DBExport might not work if you have installed other JREs separately.

If DBExport fails to run in an isolated mode on a Windows NT/2000 server, do the following:

  1. Open Windows Registry and note the value of InvSrvPath from the HKEY_LOCAL_MACHINE\Software\Novell\ZENworks entry.

  2. Open InvSrvPath\server\wminv\bin\dbexport.bat in a text editor.

  3. Remove the -xbootclasspath flag and its value in the Java command line.

  4. Append the following entry to <InvSrvPath>\server\wminv\bin\javadir.bat:

    set path=%java_dir%\bin;%java_dir%\njclv2\bin;%path%

  5. Run dbexport.bat.

    At the server console prompt, type the following string:

    DBEXPORT configuration_filename.EXP csv_filename.CSV

    where configuration_filename.exp is an existing file that contains the data export settings and csv_filename.csv is the filename where the data exported from the database will be stored.


10.0 Upgrade Issues

This section identifies some potential problems that might occur when you upgrade to ZfD 4 SP1b from earlier versions of ZENworks for Desktops.


10.1 ZfD 4 Management Agents Must Be Rebooted after Server Is Upgraded to ZfD 4 SP1b

In a typical upgrade situation, you will upgrade the ZfD Server to SP1b and begin using it before the ZfD 4 Agents on all of the workstations are upgraded.

Workstations that continue to use the older version of the ZfD 4 Management Agent might not be able to send Workstation Inventory scans to the server and cannot be remotely managed by ZfD 4 SP1b until they are rebooted.


11.0 Interoperability Issues

This section identifies some things to look for when you use ZfD 4 SP1b in the same environment with other Novell products.


11.1 ZfD 4 Interoperability With ZENworks for Servers 3 SP1

When installed to the same network location, ZENworks for Desktops 4 and ZENworks for Servers (ZfS) 3 give you the ability to manage and distribute software, files, and applications, to monitor the network's usage and health, and to enforce network policies, all from a central location.

For more detailed information on ZfD 4 and ZfS 3 SP1 Inventory interoperability, see Interoperability with ZENworks for Servers 3 in the Workstation Inventory section of the ZENworks for Desktops 4 Administration guide at http://www.novell.com/documentation/lg/zdpr/index.html.


11.2 ZfD 4 Interoperability With Novell iChain 2.0

Novell iChain® features such as SSO, Caching, Access Control, and Secure Exchange, are not currently supported with ZfD 4. ZfD 4 features will work through an iChain 2.0 tunnel.


11.3 ZfD 4 Interoperability With ZfD 3.2

The following sections provide the details of what will not work properly in ZfD 4 if ZfD 3.2 is also running.


11.3.1 Rollup Database Server Does Not Work

If you have a network environment with a ZfD 4 Workstation Inventory Root Server and an Intermediate Server or Leaf Server that is ZfD 3.2, the inventory service on the Intermediate or Leaf Server will not start. In this scenario, the ZfD 3.2 inventory service displays the following error:

getID() out ->exception[Root exception is com.novell.service.jncp.NDSException: ccode = -669 (0xfffffd63)]com.novell.java.security.LoginException: Login failed.

If the ZfD 3.2 server is the Root Server and ZfD 4 is the Intermediate Server or Leaf Server, the inventory service on the Intermediate/Leaf Server will not start. The following error is displayed:

Error Type 15 Error 630

The problem can be resolved by applying a software patch to the ZfD 3.2 server. For more information, see the ZENworks for Desktops 4 Upgrade guide at http://www.novell.com/documentation/lg/zdpr/index.html.


11.3.2 Inventory Query Does Not Work if ZfD 3.2 ConsoleOne Snap-Ins Are Loaded

If you load ConsoleOne from the ZfD 3.2 server, you cannot view the workstation inventory information if the workstation was inventoried into the ZfD 4 database. Users will get the error that the workstation inventory is not available in the database.

If you load ConsoleOne from the ZfD 4 Server, you will be able to see workstation inventory information of the workstation that is inventoried in either a ZfD 3.2 database or ZfD 4 database.


11.3.3 ZfD 4 Remote Control Features Do Not Work on a ZfD 4 Workstation if ZfD 3.2 Snap-ins Are Loaded

ZfD 4 Remote Control features will fail if the remote workstation has the ZfD 4 agents installed and if the Remote Management Console has ConsoleOne loaded with ZfD 3.2 ConsoleOne snap-ins.

ZfD 4 Remote Control features will work if the remote workstation has the ZfD 3.2 agents installed and if the Remote Management Console has ConsoleOne loaded with ZfD 4 ConsoleOne snap-ins.


11.4 ZfD 4 SP1b Interoperability with ZENworks for Servers 3 SP2

ZfD 4 SP1b Workstation Inventory is interoperable with ZENworks for Servers 3 SP2.


12.0 Other Known Issues

This section identifies other issues that might cause problems or require work-arounds when you use ZfD 4 SP1b.


12.1 No Support for DNS-Rooted or Federated Trees

ZENworks for Desktops 4 SP1b does not support DNS-rooted trees or federated trees.


12.2 Some ConsoleOne Properties Pages Have Been Consolidated

In the shipping version of ZENworks for Desktops 4, the property pages for User, Workstation, and Container objects in ConsoleOne included an Application Launcher and an Applications tab.

With ZfD 4 SP1b, these two pages are now consolidated under the ZENworks tab in the User, Workstation, and Container objects.


12.3 Workstation Import and Workstation Management Do Not Work with VPN

Workstation Import and Workstation Management (that is, policies pushed to workstations or users) do not work properly when users connect through a VPN.

In this documentation, a greater-than symbol (>) is used to separate actions within a step and items in a cross-reference path.

A trademark symbol (® , TM, etc.) denotes a Novell trademark; an asterisk (*) denotes a third-party trademark.

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

You may not export or re-export this product in violation of any applicable laws or regulations including, without limitation, U.S. export regulations or the laws of the country in which you reside.

Copyright © 2003 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.


US Patent Nos. 5,633,931; 5,692,129; 5,758,069; 5,761,499; 5,859,978; 5,893,118; 5,905,860; 6,023,586; 6,047,312; 6,061,743; 6,105,069; 6,115,549; 6,144,959; 6,173,289. Patents Pending.

ConsoleOne, Groupwise, DirXML, iChain, NDS, Novell, Novell Support Connection, NetWare, and ZENworks are registered trademarks of Novell, Inc. in the United States and other countries. eDirectory, NLM, Novell Application Launcher, Novell Client, Novell Distributed Print Service, and Novell Storage Services are trademarks of Novell, Inc.

All third-party products are the property of their respective owners.