Tasks
In Verify Privilege Manager tasks are activities that can be run on demand or regularly scheduled. If they are regularly scheduled, the schedule triggers the execution of a task instance, which performs specific actions based on set parameters.
Remote Scheduled Client Command type tasks that are considered agent-side require policies to be applied on the agent endpoints, the ones that are considered server-side do not require policies to be executed.
With Verify Privilege Manager v11.2.0, UTC support on task schedules has been deprecated. IBM Security recommends to disable UTC on any configured task schedules.
Tasks are set-up via Admin | More and then selecting the Tasks link. They are categorized as following:
- Client Tasks - Scheduled Jobs default policies
- Server Tasks
- HelpDesk Tasks
- Infrastructure Scheduled Activities
The following general task topics are available:
- Agent Hardening 10.7.1 and up
- Maintenance tasks details
- Reset Licensing
- Tasks Launching Executables without User Context
Upgrading to Verify Privilege Manager v10.8 causes a task to run to merge computer groups and remove unused system computer groups. This primarily affects the Application Control policies that are using resource targets/computer groups named All Windows Computers with Application Control Agent Installed. With v10.8, those policies will use the Windows Computers computer group and macOS will use macOS Computers.
If you want to prevent this automatic merge, modify the XML of this item:
PrivilegeManager/#/item/xml/b2e02684-d154-48ca-9987-12b1759df822
Add on line 2 <adc:Attributes>NoModify</adc:Attributes>.