Tips and Troubleshooting
If the Software Kiosk or Installation UI cannot be displayed
The new user dialogs are based on a locally executed web page that is displayed with an embedded chrome browser. To do this, it is necessary to set the Internet properties so that no proxy is used locally, and the local computer is classified as secure. In addition, the "localhost" should not be part of the trusted site list. Use GPOs to ensure this for all computers.
Software Kiosk or Installation UI prompts for Username/Passwort
If internetsettings are configured that local intranet pages prompt for username/password, then also the software kiosk or installation UI will prompt for it. The new user dialogs are behaving just like a local website. In order to use an automatic logon you have to modifiy the local intranet settings accordingly.
Anti Virus Programs
Some antivirus programs prevent the installation or execution of the UEM Agent. Please use the AV options to exclude the"%Program Files%\Matrix42\UniversalAgent Framework" directory.
How to use the global silent switch
To ensure more standardized installations and minimize disruptions for the end user, there is the option to set a global “silent” key in the registry, which ensures that all packages installed via the software kiosk use the same mode. Ideally, this should be the “0” (/S0) mode. Progress is displayed to the user in the kiosk in larger increments.
With Empirum 17.0 Update 2 the Setup.exe will know the new value /S4. This suppresses all output except for process queries and prompts (user input).
Current restrictions:
- Mode “0” and “1” does not work for packages where an user entry is required.
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\Agent] "GlobalSilentLevel"=dword:00000004
In this example, all installations are set to “/S4”.
Shutdown the computer after OS installation
If the registry key below is set to 1, the "InstallAtShutdown" mode is active for the agent. This can be set in UEMAgent.bat to turn off the computer completely after the OS installation.
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "InstallAtShutdown"=dword:00000001
Example in UEM Agent.bat:
REG ADD HKLM\SOFTWARE\MATRIX42\AGENT /v InstallAtShutdown /t REG_DWORD /d 1 /f
Hide the option "Install on Shutdown"
The option "Install on Shutdown" can be hidden from the user:
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "AllowPostponeUntilShutdown "=dword:00000000
Suspend mode
With a registry key the UEM Agent can be set to a mode in which no polling, download or installation actions are performed. Internally this mode is used for the Auto Update. If required, this mode can be used, for example, to prevent the agent's possible data consumption when establishing a VPN connection via a satellite telephone.
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\Agent] "Suspenduntil" (STRING) = end date of suspend mode
The value specifies the end of the suspend mode. For example, 2018-12-24T18:15. Any specified value that is not recognized by the agent as an ISO time value in the past will pause the agent.
Script files check for kiosk packages
The check of the script files on the depot server can be deactivated with the following registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "UseCheckFileForKiosk"=dword:00000000
Configure behaviour if Windows requires a reboot
The UEM Agent detects if Windows Update requires a reboot.
You can configure the behaviour with the following registry value.
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "WindowsUpdateRebootCheck"=dword:00000002
Possible values:
- 0: The agent ignores the required reboot and continues its tasks.
- 1: The agent suspends its tasks until a reboot is performed or the reboot request is withdrawn. (This is the behaviour like before version 2009)
- 2 or value not available: After a delay the agent initiates the reboot behaviour as configured in the agent configuration.
The delay until the reboot behaviour is initiated can be configured by the following registry value.
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "WindowsUpdateRebootDelaySeconds"=dword:00000120
The value is interpreted in seconds. If the value is missing the agent waits 15 minutes.
Set Rights of Agent Cache
The behaviour of setting the agent cache rights can be defined by the following registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "SetNTFSCacheRights"=dword:00000001
Possible Values are:
- 0: No rights are set by the agent
- 1: The standard access rights are set by the agent (default behaviour)
- 2: The standard access rights are set by the agent, but no rights for "Everyone" are set to the "User" folder.
The default access rights are:
- System" user and "local administrators" have full access to all folders.
- Additionally, "everyone" has the following rights:
- Read right on the folders "Packages", "UserValues", "Log", "EmpInv" and "User".
- Write right to the folders "Log" and "EmpInv".
- Execute right to the folder "User".
Behavior in case of problems during package download
If there are problems while downloading a package (e.g. temporary network errors, access problems), the Agent can be configured to retry the process automatically. To do this, you can set the number of retries (default: 5) and the pause between retries in seconds (default: 60). The default can be overwritten in the registry:
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "RetryTransferRepetitionLimit"=dword:00000005
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "RetryTransferPause"=dword:00000060
OS installation mode
Following an operating system installation, the UEM Agent is put into a special mode via the following registry value.
[HKEY_LOCAL_MACHINE\SOFTWARE\Matrix42\AGENT] "OsInstallMode"=dword:00000001
In this mode, restricted installation timeframes are ignored. The UEM Agent will attempt to install all assigned packages. After that, or after multiple unsuccessful installation attempts, the UEM Agent will switch to normal mode. Configured installation timeframes and polling interval are now enabled again.
In this mode, a package that cannot be installed due to missing dependencies (as opposed to normal mode) is counted as faulty and the package error counter is incremented. This ensures that a package whose missing dependency is never satisfied is removed from the distribution and can exit OS installation mode.
Computer-specific configuration via variables
By setting computer variables below the MX42_UEM_AGENT variable, the agent configuration of the assigned agent template can be overwritten.
Starting with Empirum version 23.0.0, predefined variables for installation timeframes are available.
This makes it possible to set targeted installation timeframes for computers and groups that are independent of the configured values of the currently assigned agent template.
The SoftwareDepot/Polling/Interval/Timeframes/ArbitraryFrame and SoftwareDepot/Polling/Interval/Timeframes/ProhibitedFrame variables define installation timeframes or supplement the installation timeframes defined in the agent template.