When a software execution fails, compliance status is returned as compliant

Products

• Software Management Solution

Issue/Introduction

For some reason a software application, delivered via a managed software delivery policy, fails to install with some sort of error.  On the managed software delivery policy, if the advanced options, results-based actions, actions after termination or failure, is set to continue, the compliance is recorded as compliant.  The expectation is that the compliance would be not compliant.  This setting is shown as follows:

No error message is applicable to this situation.

Cause

When you set the results-based action to continue, this will cause the compliance of the policy to be essentially ignored.  This is stated in the policy, when you choose continue.  The wording used is as follows:  Compliance status of the policy will not be affected with the software.

If your managed software delivery policy is configured to delivery a 32-bit and 64-bit software application, with applicability checks for both, you were required to set the results based action to continue because setting it to abort, would cause the policy to abort when it failed the 32-bit applicability or 64-bit applicability checks.

Environment

ITMS 8.0

ITMS 8.1

Resolution

By creating a new custom core setting, MdpContinueOnApplicabilityFailure, setting it to true, you enable expected functionality for applicability failure.  Here is what will happen with this new setting configured:

You have a managed software delivery policy configured to deliver a 32-bit and 64-bit software application.

Each software release has an applicability check configured for 32-bit and 64-bit.

You now configure your managed software delivery policy, advanced options, with abort upon termination or failure as shown:

Your 64-bit endpoint will receive the managed software delivery policy and execute it.

When the 32-bit applicability check runs against the 64-bit operating system, it will now show as not detected and will continue on without actually aborting.

To install this point fix, please do the following:

Issue is fixed in a 8.0 HF6 pointfix (attached). It is also fixed in 8.1 RU4 and 8.5.

1. Retrieve files from the archive to the NS hard drive.
2. Make sure PointFix is extracted not to Altiris install directory (or any subfolder to it).
3. Run as administrator PFinstaller2.EXE, click on 'Install Files' button
4. Accept UAC (User Account Control) prompt, select Install Files. Old files will be automatically backup to the Backup folder at the same location where PFinstaller is and replaced with the new ones. Log-file Log.txt will be created at the same location where PFinstaller is.
5. After PF install need to enable continue on applicability failure functionality by adding custom core setting to C:\ProgramData\Symantec\SMP\Settings\CoreSettings.config file:  <customSetting key="MdpContinueOnApplicabilityFailure" type="local" value="true" />
6. Change Continue to Abort in Actions after termination or failure section in Result-based actions tab in Advanced Options for each software in problematic MDP.