Just how locked is "Locked"?

Are there any technical details on exactly how the “Locked” setting in BESClient works? Is there a strict obedience to the lock enforced by the client software itself, or is it checked in the action script and obeyed (or not) from there? I could do (and have done, frankly) some testing, but I’d rather not rely on just my empirical findings. Thanks!

1 Like

There are a few bits of details so see the links below.

Basically when a client is locked, only BES Support and any site you added in the exclusion list in BESAdmin can have actions that will run (see Edit Masthead https://www.ibm.com/support/knowledgecenter/en/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Config/c_editing_the_masthead.html#c_editing_the_masthead )

https://www.ibm.com/support/knowledgecenter/en/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Config/c_locking_clients.html
https://www.ibm.com/support/knowledgecenter/en/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Console/c_locking_computers.html
http://www-01.ibm.com/support/docview.wss?uid=swg21506105

4 Likes

Client lock is an Action lock. to prevent agent from performing Actions.

Other client functions will continue.

  • Reporting on results from existing relevance evaluations (properties, Fixlet relevance, automatic group membership reporting) and
  • Gathering of subscribed and mailbox sites.
  • Selecting a relay.

Client settings actions are exempt from locking. We use a client setting to perform the unlock, so this needs to continue to function.

There are a few “special” types of actions that I am not sure on.

  • Do site subscribe and unsubscribe actions still function while endpoint is action locked?
  • How about changes to Console operator administered computers?
3 Likes

Reporting, Gathering, and Relay selection can all be tuned as well to happen less often for a client in an “inventory only” mode, in addition to “locking”.

This is how I would describe it. No actions that make changes to the system should be possible in the locked state.

2 Likes

Thanks all! This is exactly the information I was looking for. :slight_smile:

1 Like