I think I found it, and it's not what I thought. Part of the batch file uses a 
random password generator, and putting a PAUSE file I see that the password 
(%randpass%) is not part of the command line when the script runs.

Wow, that would be a big misdiagnosis on my part, and something you would have 
no way of knowing. Other mitigating (read: self induced) factors might be 
contributing to it working when logged in at the PC but not via SMS. 
Troubleshooting ensues...

From: David Lum [mailto:[email protected]]
Sent: Wednesday, July 13, 2011 11:34 PM
To: NT System Admin Issues
Subject: RE: So close yet so far...

Bloody hell....please hold...

From: Brian Desmond [mailto:[email protected]]
Sent: Wednesday, July 13, 2011 11:20 PM
To: NT System Admin Issues
Subject: RE: So close yet so far...

What's in your dsm.err file on the client? Also are you specifying anything for 
Node Name/ID (I think there are two separate parameters here) in your dsm.opt 
file?

Also IIRC there's some DNS funny business here. If your TSM server is 
tsm-srv.domain.com and your client is client1.sub.domain.com, then usually your 
nodename needs to be client1.sub.

Thanks,
Brian Desmond
[email protected]

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:[email protected]]
Sent: Wednesday, July 13, 2011 11:10 PM
To: NT System Admin Issues
Subject: RE: So close yet so far...

I am trying to register the workstation with the Tivoli server. Specifically 
these commands:

I typo'd in my previous e-mail "but the .CAM that registers the workstation"   
.CAM should be.CMD but I bet you caught that

- This registers with the TSM server
dsmadmc.exe -id=TSM -password=<obfuscated> "REGISTER NODE %COMPUTERNAME% 
%RandPass% PASSEXP=0 USERID=none CONTACT='' DOMAIN=WORKSTATIONS 
CLOPTSET=WORKSTATIONS FORCEPWRESET=NO URL=http://%COMPUTERNAME%:1581";

- This installs the TSM scheduler
dsmcutil.exe inst /name:"TSM Scheduler %computername%" 
/clientdir:"c:\progra~1\tivoli\tsm\baclient" 
/optfile:c:\progra~1\tivoli\tsm\baclient\dsm.opt /node:%COMPUTERNAME% 
/password:%RandPass% /autostart:yes

Both fail - if I launch the backup-archive GUI I get "node ID unknown to 
server".

The SMS package/program is configured to run using an installation account this 
is a local admin on the box.

Dave

From: Brian Desmond [mailto:[email protected]]
Sent: Wednesday, July 13, 2011 10:56 PM
To: NT System Admin Issues
Subject: RE: So close yet so far...

Which part of the Tivoli stack are you referring to?

Thanks,
Brian Desmond
[email protected]<mailto:[email protected]>

w - 312.625.1438 | c   - 312.731.3132

From: David Lum [mailto:[email protected]]
Sent: Wednesday, July 13, 2011 10:29 PM
To: NT System Admin Issues
Subject: So close yet so far...

I am pushing IBM's Tivoli software via SMS and it has worked beautifully with 
Win XP. Trying to push to Windows 7 the batch file works fine if I log in 
directoly, find the .BAT file and choose "Run as administrator", but doesn't 
work with the standard SMS push (which does run under a DA account, but I'm 
thinking UAC is blocking the elevation needed to install the Tivoli scheduler 
service).

The Tivoli client itself installs fine (uses an .MSI file), but the .CAM that 
registers the workstation with the TSM server doesn't work (although the code 
SMS receives is "advertisement completed successfully").

So I think need to have SMS elevate to run the script. Am I on the right track? 
Anyone have any ideas for me?

David Lum
Systems Engineer // NWEATM
Office 503.548.5229 // Mobile 503.267.9764



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to