Apply Procedures to Devices
- Device list - Click ‘Devices’ > ‘Device List’ > select target devices > Click ‘Run Procedure’
- Schedule in a profile – Click ‘Configuration Templates’ > ‘Profiles’ > click on a profile name > Click ‘Add Profile Section’ > ‘Procedures’
- On users - Click ‘Users’ > ‘User List’ > select target users > Click ‘Run Procedure’
- On user groups - Click ‘Users’ > ‘User Group’ > select target groups > Click ‘Run Procedure’
- On
customer groups - Click ‘Devices’
> ‘Device List’ > select customer groups in the middle
column > Click ‘Run Procedure’
The following section describes 1), how to apply procedures from the procedures interface. Note - EM does not support patch procedures on Mac devices.
For Windows devices, make sure patch management setting is disabled to execute patches.
Run a procedure
- Click 'Configuration Templates' > 'Procedures'
- Browse the folder tree to locate the procedure you want to run
- Select the procedure and click 'Run' at the top. Note - only approved procedures can be applied. You can also run only one procedure at a time.
Choose the execution options from the 'Run Procedure' dialog
- All Devices - The procedure is applied to every device which matches its target operating system.
- Selected Device(s) - Type the name of a device and select it from the list. You can add multiple devices in the field.
- Send the resulting logs by email - Script procedures only.
- Send to current user - Procedure results are sent to the admin who is currently logged into Endpoint Manager.
- Send to the following email addresses - Add email addresses to whom log results should be sent.
- Run as Local System User / Run as Logged in user - Choose the user account with which the procedure has to be run on the devices based on the access rights required for the procedure. Please note this option will not be available for a patch procedure.
- Maintenance window status - Details of any maintenance windows in the device's profile.
- Total number of devices outside of maintenance window - The number of devices that are not part of a maintenance window. The procedure can run on these devices.
- Number of devices blocked by maintenance windows settings - The number of devices on which you cannot run the procedure because the admin has blocked procedures outside the maintenance window.
- Number of devices warned by maintenance window settings - The number of devices that are part of a maintenance window and have warnings enabled. You can still run the procedure on these devices.
- Skip devices warned by maintenance windows settings - A maintenance window is a time-slot reserved for running important tasks on target devices. Admins can enable a warning if somebody attempts to run a procedure outside of the window. This setting will skip those devices which have been added to a maintenance window with warnings enabled.
- Configure parameters - Available only for script procedures defined with variable parameters and allows you to enter the values for them.
To specify values for variable parameters
- Click 'Configure Parameters'
The list of variable parameters will appear with their default values pre-populated in their respective text fields
- Enter the value for each parameter in the respective text box
- Select 'Use default value' if you want the default value to be applied for a parameter,
- Click 'Apply'.
Tip: You can skip this step If you want to use default values for all parameters. For more info on default values, see Create a Custom Procedure. |
-
Click the 'Run' button in the 'Run Procedure' dialog.
The procedure is applied to the selected devices. A confirmation dialog is displayed and the process is logged. You can view the details in the Procedure Logs screen for script procedures. Patch procedure logs will be available in the respective patch procedure itself.
Important Note: Patches that are hidden by administrators will not be executed. See 'Manage OS Patches on Windows Endpoints' for more details. |