.Loading..Loading.

Advanced File Download (lddwnld)

• 1045281 IPv6 Support for Preferred Server
  • Preferred servers now support IPv6 address ranges.  Since there are no default IPv6 range limitations applied to the preferred server, this may cause some devices to use preferred servers that they were not intended to use.  It is advised that for preferred servers that have an associated IPv4 address range, to add a corresponding IPv6 range that matches the desired devices, or a range that won’t match any devices so that the devices continue to match preferred servers as the administrator intended.

Engine-Based Agent

• 1080511 Provisioning Disconnected Templates to support EBA Agent
  • Provisioning Disconnected Templates now supports both legacy and EBA agent types.

Linux

• 926574 Add agent support for Red Hat 9 and Oracle Linux 9
  • Added Support for RedHat 9 and Oracle 9 which use Patch To Zero technology for patching vulnerabilities.
• 1035432 Add agent support for Raspberry Pi OS 11 (Bullseye)
  • Added Support for Raspberry Pi OS 11 (Bullseye). Support includes only Inventory and Software Distribution.
• 1050227 Oracle 9 Linux Patch to Zero support
  • Oracle 9 Linux now supports Patch to Zero.
• 1056844 Red Hat Enterprise Linux Patch to Zero support
  • Red Hat Enterprise Linux (RHEL) now supports Patch to Zero.

Patch Manager

• 1043289 Maintenance windows per day configuration enhancement
  • Added the option for multiple maintenance time windows to be configured for managed devices.
• 1045282 IPv6 Support for Patch and EPS security
  • Patch and Endpoint security (EPS) now support IPv6 addresses.
• 1057335 Microsoft 365 Severity Filters
  • The Microsoft Office Click-to-Run product filters has been renamed to 'Office 365'. Console users can now filter Office 365 products to selected groups and rollout projects during download and can also be filtered based on the severity level criteria.
• 1057414 Ukrainian language Windows OS updates support
  • IT admins now have the option to download Microsoft Windows updates for Ukrainian.

Provisioning

• 1083896 Increase the number of simultaneous Provisioning templates the core can process at a time
  • Performance improvements were made to SQL queries to increase the number of simultaneous imaging templates that can be processed by the core and console.

Remote Control

• 1036683 In Remote Control, Mouse Pointer of end node not visible when end user is moving the mouse
  • Add the ability for the IT admin to see where the end user's cursor is if the end user is moving their mouse on the screen.

Software Distribution

• 581999 IPv6 support for SWD Policy-based
  • IPv6 support has been added for policy-based Software Distribution.

Advanced File Download (lddwnld)

• 1098499 Insufficient space available - Peer Download
  • Modified oemdownload to handle both 32 and 64 bit time_t properly.

Agent Common

• 1061351 Policysync/Portal Manager crashes if Remote Console is Installed on agent machine
  • Fixed an issue that caused problems with parts of the agent when the remote console is installed on the same device.  

Data Analytics

• 1068737 webshare.exe in the ManagementSuite directory has no digital signature
  • A digital signature has been added to \managementsuite\webshare.exe.

Endpoint Security

• 1001493 Whitelisting in EPS is allowing all program processes to run
  • The issue in the SQL query has been fixed that was getting the incorrect data from the remote DB, which was causing the incorrect pass and allowing all programs to run.
• 1053715 Duplicate and Inaccurate Entries in EPM Crowdstrike Security Activity
  • The issue has been fixed for duplicate and inaccurate entries in EPM Crowdstrike Security Activity by getting the right information
• 1080477 Authorization code to disable Device Control in EPS does not work on side by side migrated Core Server.
  • The value for core server name has been fixed to allow the authorization code when doing side by side migration of the Core Server.
• 1090971 EPS Reportedly Blocking Emails From PowerShell When Binaries Have Rights to Send Emails
  • Added the check for the required FilePass so that the EPS service does not block the process if it has the required pass.

Engine-Based Agent

• 1054588 Variable %TMC_CACHE_DIR% is pointing incorrectly to \programdata\ivanti\EPM Agent\SDMCache
  • The environment variable was not being set correctly by the EBA installer for SWD. 
• 1061352 EBA Endpoint Security Components showing as disabled on agent
  • After Installing the EBA agent, any EPS component configured to be enabled will now be enabled.
• 1065365 EBA - For EPMAgentInstaller.exe, Provisioning calls with command line parameter /config "Agent name.ini" instead of /config "Agent Name"
  • The provisioning action now calls the command line interface to specify the desired configuration name correctly.
• 1071299 EBA Agent installation shows in Add/Remove Programs on workstation
  • Modified the self contained engine based agent msi to not be shown in add/remove programs.
• 1071531 Disabled Firewall Causes EBA Installation to Fail
  • The install no longer requires the Windows firewall to be enabled. Customers must manually add the required firewall exceptions if not using Windows Firewall.
• 1075072 Scheduling Content Replication from Managed Script fails with EBA
  • Going forward, customers should use new environment variables in their scripts. These new variables all map to the ldclient folder for the wscfg32 type agents but map to their respective subfolders for EBA. For additional information on this please see https://forums.ivanti.com/s/article/How-To-Use-New-EBA-Environment-Variables
• 1077800 Distribution and patch setting "Defer until next login" not working in EBA agent
  • Defer until next login is now working properly in EBA.
• 1078302 EBA - Installing over WSCFG32 Agent causes SWD to rerun tasks that were already processed
  • Uninstallwinclient.exe was modified to handle the upgrade to EBA. When the upgrade occurs, it doesn't remove the C:\ProgramData\Landesk\profiles folder. All other folders under C:\ProgramData\Landesk are removed.
• 1079426 EBA - Windows Actions' Scan Vulnerability action fails
  • Vulnerability scan when executed from windows actions is working properly on an EBA agent.
• 1080102 EBA self-heal option doesn't restore vulscan.exe to C:\Program Files (x86)\Ivanti\EPM Agent\Patch Management
  • If vulscan.exe gets removed/renamed/deleted from "C:\Program Files (x86)\Ivanti\EPM Agent\Patch Management",  the agentupdaterservice will restore vulscan.exe via the Agent health service.
• 1080457 EPSUI Prompting for Admin Credentials with EBA Agent
  • On the EBA agent, when EPS is installed and machine is rebooted once, no admin prompt is seen and the EPS service starts successfully.
• 1081242 EBA - policysync Local Scheduler task is not getting updated when changes are made to the settings
  • Local Scheduler task is now updated correctly in EBA agents.
• 1082372 On EBA, the "Computer.OS.last logon date" and "Computer.OS.last logoff date" Not Populating or Updating
  • Fixed the local scheduler service to get logon events for EBA.
• 1085154 EBA Agent - Windows Actions file copy action to %LD_CLIENT_DIR% resolves incorrectly to "C:\Program Files (x86)\Ivanti\EPM Agent\SWD"
  • Windows Actions file copy action to %LD_CLIENT_DIR% resolves correctly on an EBA client.
• 1087334 EBA - vulscan.exe /installEPS deletes Windows operating system files when no EPS installed prior the command execution
  • On the EBA agent, if we run "vulscan /installEPS", vulscan starts and fails with an error and now does NOT delete or corrupt the C drive. Please note: this is not an expected workflow, customers should not install or remove EPS using the command line parameters. They should make use of default windows configuration and force agent-in to install/remove EPS.
• 1089620 EPS blocks EBA Software distribution
  • On EBA agents, Ivanti self protection will not block running the batch file.
• 1094616 EBA Agent Not Honoring Global Never Autofix or Never Reboot in Agent Configuration
  • In the EBA agent, if the "Global never autofix" option and/or the "Never reboot" option is checked, it creates the correct keys in vulscan.
• 1100430 EBA - Policysync schedule - Run at log in schedule is not getting created correctly.
  • The file that is necessary for the scheduler to detect logon/logoff events is now included for EBA.
• 1100811 EBA Patch user feedback dialog not properly localized
  • The 'Report an application' dialog in the Patch user feedback UI is now localized in all languages.
• 1111294 ldscnhlp.ini will be overwritten in EBA agent installed machine
  • Fixed EBA agent health to not overwrite the info in the ldscnhlp.ini file.

Inventory

• 1071911 Softmon.exe deleting files that exist in HKLM:\SYSTEM\CurrentControlSet\Control\SessionManager\PendingFileRenameOperations
  • Added a registry DWORD value at: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\landesk\managementsuite\WinClient\SoftwareMonitoring\PerformPendingFileRename with a value of 0 to disable deleting files list. The change can take up to 30 seconds.

Ivanti Antivirus

• 1084689 Ivanti Antivirus Licensing Information is Inaccurate
  • "Vulscan /submitavdata" is updated to send the correct Licensing information to the core server.

Linux

• 1090509 Linux Agent Retries Failed Tasks Each Policy Sync
  • Updated to check for push vs policy supported push, so that tasks are not retried.

macOS

• 982766 EPM - Ivanti MDM Enroller.app - user status is "not enrolled" in MDM even when enrolled
  • The UI has been updated to more accurately represent the information we collect with modern macOS technology.

MBSDK

• 1108382 MBSDK "SetMachineData" API unintentionally replaces ALL "." (periods) with Inventory BNF leading to broken paths
  • Improvements were made to the BNF parsing in MBSDK SetMachineData API to allow "." characters in the 1:* key field.

Patch Management

• 1025211 Patch Automation does not work with Targeted Scopes
  • Get the list of targeted devices if the patch automation step uses any targeted scope.
• 1029639 Excessive WindowPatchData-delta files in the timber directory
  • Logic has been updated to keep only 20 delta files at any time so that it does not cause excessive unneeded downloads to the new agents.
• 1066415 Vulscan /changesettings not waiting for the mutex - causing issues with adaptive settings
  • When two vulscan UI's are run together, one status dialog will show "waiting for other running scanners", it will wait. If by this time the previous status dialog is done, it will execute. Otherwise, the second vulscan will fail.
• 1069218 Oracle Linux devices cause GatherHIstoricalData to fail after patching
  • GatherHistoricalData module has been updated to handle the Oracle Linux device patches using Patch to Zero.
• 1079415 Office 365 download using Download Updates in a Remote Console fails.
  • Office 365 applications can now be downloaded from the remote console download updates dialog.
• 1090195 Vulscan logs do not show any verbose or Xtrace logging
  • Customers can now use Loginfo and logverbose for getting the information.
• 1094589 Vulscan does not take preferred server settings into account during patch remediation
  • The agent will now download the patches from the configured preferred server.

Provisioning

• 1068124 Retry provisioning actions and disabling provisioning actions with IF/ELSE sub-actions does not work correctly
  • IF/Else sub actions are now working as expected if retry or disable actions are used.
• 1090406 Unable to view Provisioning History on Deleted Task
  • Now able to view provisioning history on deleted tasks.
• 1094335 Provisioning failing during agent installation - Common Monitoring module error
  • Fixed an error returned by winoem.exe during the CommonMonitoring engine install.

Remote Control

• 1056028 Polish characters are not displayed on Remote Control custom message prompt
  • Fixed an issue with some languages not showing custom messages correctly.  
• 1062279 RC not working after device is isolated from the network
  • EPS service is now allowing the right permissions to RCSERVICE.EXE so that it will be allowed to connect in case of isolation.
• 1085802 The remote control service does not detect an IP change on VPN
  • Changed the IP address detection in remote control to help with various VPN solutions.  

Reporting

• 1056157 Scheduled report as XLS failes with "Failed. Exception was encountered"
  • The customer can now schedule the report in PDF.

Role-Based Administration

• 1034352 Issues with SLM Console for Users with SLM role only
  • SLM only RBA role now works as expected.
• 1062684 LDAP Groups Not Updating with Non Domain Joined User
  • LDAP Groups are now properly updating.
• 1075290 CreateLandeskRights.exe failing to add "Ivanti Administrator" role to CustomGroup table
  • Fixed the crash in CreateLandeskRights.exe.

Rollout Projects

• 1079832 On German cores adding patches to a patch group in the rollout project fails with an error.
  • In German language consoles, adding and removing patches to a patch group in the rollout project will succeed and patches will be added to the rollout project. 
• 1099196 On German/French cores removing patches from a patch group in the rollout project fails with an error.
  • On German language or French language cores, we are able to remove patches from patch groups when assigned to rollout projects

Software Distribution

• 1065872 Unable to Delete a User that Owns a Package
  • The deletion routine was enhanced to show the appropriate message if/when packages still had an owner that needed to be reassigned before the deletion can complete successfully.

Web Console 2.0

• 1066539 HSTS Missing From EPM web Server
  • Added HSTS headers to the following core endpoints:  Webconsole, RC Console, MBSDK.
• 1068776 Users have access to the Web Console 2.0 after removing their web console access
  • Will now limit access to the web console 2.0 to those that have the "Basic web console" view right.
• 1068780 Users can see machines out of their scope in some parts of Web Console 2.0
  • Applied user scope to reports and queries.

Ivanti Antivirus

• 1113155 Ivanti Antivirus Fails to install on Windows 11 (23H2)
  • Ivanti Antivirus fails to install on Windows 11 (23H2) on both classic and EBA agents.  Windows 11 on versions prior to 23H2 are supported. For Windows 11 23H2 support, download the latest Ivanti Antivirus through content.

Provisioning

• 1122179 Provisioning Actions do not work on UEFI boot devices in WINPE environment
  • Provisioning Actions do not work on UEFI boot devices in WINPE environment. The following article explains more details and a workaround: Template Actions Fail for WinPE in EPM 2022 SU5