Issue: User accounts getting locked out in the Ivanti End-Point Manager / LANDesk Management Suite

Version 21

    Verified Product Versions

    Endpoint Manager 9.5Endpoint Manager 9.6Endpoint Manager 2016.xEndpoint Manager 2017.xEndpoint Manager 2018.x

    Service Accounts used by Ivanti EPM / LANDESK Management Suite

     

    There are many places that user credentials can be stored in the Ivanti End-Point Manager (LANDesk Management Suite).  If the user/service accounts password is changed it is possible that the account will get locked out due to exceeding the failed login attempt threshold.

     

    Here are the most common locations that will need to be checked when an account gets locked out:

     

     

    Services

      • Configure - Services - Scheduler - Change Login
      • Update the password in the service login as well as the alternate credentials.

     

    Windows Services (Services.msc)

      • Managed Planet Core Scan Processor
      • LANDesk Scheduler Service

     

    Component Services

      • Start -> Programs -> Administrative Tools -> Component Services.
      • Component Services -> Computers -> My Computer -> COM+ Applications.
      • LANDesk and LANDesk1 -> right click -> Properties -> Identity.

     

    Preferred servers

      • Tools -> Distribution -> Content replication / Preferred servers
      • Edit each server and update the credentials being used.

     

    Directory Manager (LDMS 9.5 ONLY)

      • Tools -> Distribution -> Directory Manager.
      • Remove any configured LDAP directories.

     

    Active Directory Sources

      • Configure -> Manage Active Directory Services
      • Edit and Update credentials used by all active directory sources

     

    Security and Patch Downloads

    (LDMS 9.5)

      • Tools - Security - Security and Patch Manager.
      • Click on the Download updates icon.
      • Update any credentials on the Proxy Settings and Patch Location tabs.

    (LDMS 9.6 - 2016.3 & EPM 2017)

      • Tools - Security and Compliance - Patch and Compliance
      • Click on the Download updates icon. (yellow diamond with a down arrow)
      • Verify any credentials on the Proxy Settings and Patch Location tabs.

     

    Agent Settings

    Patch and Compliance

    (LDMS 9.5)

      • Tools - Security - Security and Patch Manager.
      • "Configure settings" icon - Scan and Repair Settings
      • Edit settings, check for credentials on the MSI tab.

    (LDMS 9.6 - 2016.3 & EPM 2017)

      • Tools - Configuration - Agent Settings - All agent settings - Distribution and Patch
      • All listed items are Scan and Repair Settings (There could be many)
      • Edit settings, check for credentials on the MSI tab

    Inventory Settings

      • Tools - Configuration - Agent Settings - All agent settings - Inventory settings - Click on the settings - Software Usage Monitoring
      • Update any credentials here.

     

    Core Server Activation

      • Start - All Programs (or Programs) - LANDesk - Core Server Activation
      • Click the "Proxy" tab.
      • Clear all the text boxes, then un-check the "Require Login" and then "Use Proxy Server" (Note that un-checking the "Use Proxy Server" first will result in the credentials still being cached).

     

    Software Distribution Packages

      • Tools - Distribution - Distribution Packages
      • For each package, go to Properties - Accounts.
        • You can also update all your package credentials using Bulk Package credentials update in the Distribution Packages toolbar.
      • By default Local System is the account used, but it is possible to cache credentials here.  Remove or replace any outdated cached credentials.

     

    Core server settings on Mobility Management (9.6 and earlier)

      • Tools - Mobility - Mobile device management
      • Verify any credentials on the LDMS Core Server part of the settings