Question about Locked computers

(imported topic written by SystemAdmin)

Is there any way, short of Unlocking, for an action to be taken on a client computer even if it is locked?

If not, how would I request this ability as a feature?

I’m running into is a large number of computers that need to be LOCKED because a vendor claims their support contract is voided if OS patches beyond a certain level are installed (these systems tend to be attached to very high dollar lab equipment). We still put TEM on the systems so that we can tell which systems are missing patches, but they get LOCKED so that OS patches don’t get applied to them “by accident”. It’s happened a few times, and has resulted in someone having to rebuild the system which leaves expensive equipment idling and time sensitive samples backing up.

The problem with Locking comes when there’s a need to update TEM Agents and other non-OS items on these systems, but there might be pending actions. Currently, we are doing the client updates manually. It would be much simpler if we could force an override of the Lock status for select actions, but still have any “normal” actions remain blocked.

(imported comment written by mcalvi91)

TEM agents are in the BES support site. Ive heard anything in that site is allowed to be deployed despite the system being locked. There is a back door listed in the old forum as well but i dont remember it off hand.

(imported comment written by cstoneba)

yup, anything in the BES Support site can be deployed to a Locked endpoints. Also, in the BES Admin tool, you can define a custom site that allows any content in that custom site to run against Locked endpoints.

(imported comment written by SystemAdmin)

Thanks for the answers!

I haven’t created a custom site in a while. I’ll need to check that out. It might be worth creating a site just for locked research machines where I can copy existing fixlets/tasks.