The Audit feature enables administrators to record various changes or actions that occur in the zone. The recorded information can be audited for compliance. It provides the ability to centrally monitor activities related to Primary Servers, Satellites and Managed Devices. You can view details of the ZENworks Audit events in the ZENworks Control Center Dashboard.
ZENworks Audit includes two types of audit events:
Change Audit Events: These events capture any configuration changes made by the ZENworks administrators to the zone. For example, an event that records the activity of an administrator assigning a bundle to a device.
Agent Audit Events: These events capture actions that occur on the ZENworks managed devices. They are also called Device Events. For example, an audit event that records the login activity by a ZENworks user on a managed device.
ZENworks Audit is also supported for events related to Patch Management, Endpoint Security and Full Disk Encryption. For more information, refer to the ZENworks 11 SP3 Audit Management Reference.
When ZENworks 11 SP3 Adaptive Agent is installed or an existing managed device is updated to ZENworks 11 SP3, the administrator can select an option not to reboot the device after completing the installation. Additionally, the administrator can select to start the Adaptive Agent services on the managed device. If the services are selected to be started without a reboot, the adaptive agent works with limited functionality until a reboot is performed by user. For more information, refer to the Section Reboot-less Agent
in the ZENworks 11 SP3 Discovery, Deployment, and Retirement Reference.
The Standalone Agent Updater is an independent executable to update Windows managed devices and Windows Satellite Servers. Even if the device is unable to connect to the server, it will be updated to the latest version of the agent. The executable can be generated from any ZENworks Primary Server in the zone by using the zman system-update-create-package (sucp) command for the update that is imported into the zone. For more information, refer to the section Standalone Agent Updater
in the ZENworks 11 SP3 System Updates Reference.
A new diagnostics dashboard and diagnostics tool is available for the ZENworks Primary Server. This allows the administrator to diagnose the state of Primary Servers. This uses the ZENworks Probe tool, an open source diagnostics toolkit, which is useful in monitoring and troubleshooting problems with Java processes.For more information, refer to the ZENworks 11 SP3 Diagnostics and Probe Guide.
As ZENworks Primary Servers are not supported on 32-bit operating systems, it is necessary to migrate from 32-bit operating systems to 64-bit operating system. The new ZENworks Server Migration utility facilitates this migration. For more information, refer to the ZENworks 11 SP3 Server Migration Guide.
The following new features have been introduced in Remote Management:
Join Proxy: The Join Proxy role provides the ability to remotely manage devices across the Internet and behind NAT, when you are unable to reach the devices directly. You can promote any ZENworks 11 SP3 Windows or Linux managed device to the Join Proxy Satellite role and perform remote management operations on Windows managed devices that are in a private network. Before you can remote control a device through Join Proxy, you need to configure the Join Proxy role. You also need to configure Join Proxy Closest Server rules for the location and network environment. A managed device connects to the closest Join Proxy server configured for the location in which the managed device is located.
Identifying Remote Operator in an External Certificate Authority Environment: In a zone that is configured with external certificate authority, when a remote management operation is launched from ZENworks Control Center to manage a Windows device, the remote operator will now be identified even without the availability of a key pair.
For more information, refer to the ZENworks 11 SP3 Remote Management Reference.
In ZENworks Control Center, the improved rights-based management allows you to restrict objects that the non-super administrators can view. This is done through the View Leaf rights feature that allows or denies access to information within parent folders and sub folders. Users can see the contents of a folder (objects, groups) only if the View Leaf right is granted for the given context.
For more information, refer to the ZENworks 11 SP3 ZENworks Control Center Reference.
ZENworks Imaging has introduced the following:
Support for UEFI 2.3.1 or higher
Ability to create a bootable USB flash drive for booting either BIOS or UEFI firmware to perform Imaging operations
Third-Party Scripted Imaging
For more information, refer to the ZENworks 11 SP3 Preboot Services and Imaging Reference.
The Share and Subscribe feature provides the ability to share assignable content objects like bundles and policies across multiple ZENworks zones. The Share and Subscribe feature includes the following zones:
Sharing or Publisher Zone: The Sharing or Publisher zone shares its content with other zones. This zone validates and accepts the subscription created by the Subscriber zone and the Sharing zone administrator shares several bundles or policies with the Subscriber zone
Subscriber Zone: The Subscriber zone subscribes to the Sharing or Publisher zone and replicates the shared content. The ZENworks subscription is created using the subscription key and the sharing server details provided by the Sharing zone administrator.
The Subscriber zone administrators have the option to select and replicate only those shared objects that are important in their zone. After replication, if any of these objects are using any zone-specific variables or values, the Subscriber zone's administrator has the option to review them and map them to a value more suited for their zone. Also, the Subscriber zone has the option to configure a regularly scheduled subscription. For more information, refer to the ZENworks 11 SP3 Subscribe and Share Reference.