Agent Specific Tasks
Certain Verify Privilege Manager tasks are directly related to agent processes and their operational loads.
Server side tasks, also known as Remote Client Scheduled Commands do not require a policy. Agent tasks require a policy. These types of tasks are with the exception of one, by default enabled and run on a scheduled basis. Most are read-only system tasks, that can be copied, renamed, and then customized.
The majority will run for the first time after system initialization.
Windows Remote Client Scheduled Commands
| Name | Description | Schedule | Enabled |
|---|---|---|---|
| Restrict Account Permissions on Agent Services (Windows) | Instructs computers to only allow the specified users to start and stop the IBM Security services. | n/a | No |
| Basic Inventory (Initial, Windows) | Instructs computers to report the Win32_ComputerSystem, Win32_ComputerSystemProduct and Win32_OperatingSystem WMI classes to the server. | daily | Yes |
| Basic Inventory (Windows) | Instructs computers to report the Win32_ComputerSystem, Win32_ComputerSystemProduct and Win32_OperatingSystem WMI classes to the server. | daily | Yes |
| Cleanup Agent Inventory Transfers (Windows) | Completes and cleans BITS transfers and temporary files used by the TMS Agent Inventory Helper. | daily | Yes |
| Cleanup sent Verify Privilege Manager Events (Windows) | Purges Agent events that have been successfully transmitted from managed endpoints to reclaim disk space. | daily | Yes |
| Configure Verify Privilege Manager Remove Programs | Configure the Verify Privilege Manager Remove Programs behavior. | daily | Yes |
| Default File Inventory Policy (Windows) | The purpose of this policy is to inventory software programs running on the managed computer. | weekly | Yes |
| Deploy File Hash Exclusion Setting (Windows) | The purpose of this policy is to provide the ability to exclude certain file extensions from the hash process. | daily | No |
| Ensure UAC Override Setting (Windows) | Ensures that the UAC Override Registry Key is set. | daily | Yes |
| Local User Inventory Policy | The purpose of this policy is to inventory Local User account, groups and group membership on the client. This policy can also be used to inventory for specific account privileges. | weekly | Yes |
| Perform Resource Discovery (Windows) | Schedule on which agents will check with server to determine if any local resources require discovery. | daily | Yes |
| Retry errored TMS Events (Windows) | Scan Agent queue for any events that require retransmission. | daily | Yes |
| Scheduled Check Pending Client Tasks - Internet Clients (Windows) | Initiate a check for pending client tasks. Used by agents that are unable to receive an incoming connection from the server. | daily | Yes |
| Scheduled Registration - Internet Clients (Windows) | Initiate agent registration with server less frequently than internal clients. | daily | Yes |
| Scheduled Registration (Windows) | Initiate agent registration with server. | daily | Yes |
| Update Agent Commands (Windows) | Instructs Agent to update any agent commands if required. | daily | Yes |
| Update Applicable Policies - Internet Clients (Windows) | Instructs Agent to check with server for policy changes. | daily | Yes |
| Update Applicable Policies (Windows) | Instructs Agent to check with server for policy changes. | daily | Yes |
| Update Provisioned Resource Client Items (Windows) | daily | Yes | |
| User Logon Inventory Policy | Updates user logon data on the given schedule. | weekly | Yes |
| Windows Service Inventory Policy | The purpose of this policy is to inventory Windows Services on the client. | weekly | Yes |
macOS Remote Client Scheduled Commands
| Name | Description | Schedule | Enabled |
|---|---|---|---|
| Basic Inventory (Initial, macOS) | This scheduled task triggers the Agent to send macOS basic inventory. | daily | Yes |
| Basic Inventory (macOS) | This scheduled task triggers the Agent to send macOS basic inventory. | daily | Yes |
| Cleanup sent Verify Privilege Manager Events (macOS) | Purges Agent events that have been successfully transmitted from managed endpoints to reclaim disk space. | daily | Yes |
| Default File Inventory Policy (macOS) | The purpose of this policy is to inventory software programs running on the managed computer. | weekly | Yes |
| Ignore macOS Catalina software update (macOS) | The purpose of this policy is to provide a way in Verify Privilege Manager to ignore macOS updates. | daily | no |
| Local User Inventory Policy (macOS) | The purpose of this policy is to inventory Local User account, groups and group membership on the client. This policy can also be used to inventory for specific account privileges. | weekly | Yes |
| Perform Resource Discovery (macOS)] | Schedule on which agents will check with server to determine if any local resources require discovery. | daily | Yes |
| Reset ignored macOS software updates (macOS) | The purpose of this policy is to provide a way in Verify Privilege Manager to reset ignored macOS updates. | daily | No |
| Retry errored TMS Events (macOS) | Scan Agent queue for any events that require retransmission. | daily | Yes |
| Scheduled Registration (macOS) | When this policy is triggered the Agent will attempt (or re-attempt) to register with the server. | daily | Yes |
| Update Agent Commands (macOS) | When this policy is triggered the Agent will update agent command items. | daily | Yes |
| Update Applicable Policies (macOS) | When this policy is triggered the Agent will check the server for updated policies. | daily | Yes |
| Update Provisioned Resource Client Items (macOS) | daily | Yes |
Unix/Linux Remote Client Scheduled Commands
| Name | Description | Schedule | Enabled |
|---|---|---|---|
| Basic Inventory (Initial, Unix/Linux) | This scheduled task triggers the Agent to send initial Unix/Linux basic inventory. | daily | Yes |
| Basic Inventory (Unix/Linux) | This scheduled task triggers the Agent to send Unix/Linux basic inventory. | daily | Yes |
| Remove Successful Agent Events (Unix/Linux) | This command will remove agent events that have been successfully uploaded to Verify Privilege Manager. | daily | Yes |
| Scheduled Registration (Unix/Linux) | This agent-scheduled task refreshes registration data for the assigned agents. | daily | Yes |
| Update Applicable Policies (Unix/Linux) | This remote-scheduled command will update policies applicable to the assigned agents. | daily | Yes |