To use Enterprise Manager, you create a configuration that holds all the information necessary to perform tasks and set up the necessary elements inside the configuration. You then combine or associate different elements so the appropriate computers are selected and the appropriate profiles are applied to them. You can then get various kinds of reports and status information about the elements you created and the results of the operations that were performed on them.
You create or prepare many of these elements in the Enterprise Manager console. Other elements are created in Command Center and made available to Enterprise Manager.
You can prepare many of these elements in any order. After you create, establish, or do what is necessary with each element, you associate copies of some elements with other elements.
NOTE: Before you use Enterprise Manager for the first time, you must enable the Enterprise Remote Servers.
A configuration holds all the elements that you create, prepare, and associate with other elements within the same configuration. All activity is performed within a configuration; for example, to apply a policy to a group, both the group and the policy must reside in the same configuration.
ConfigTemplate contains items, arranged in a tree format, for all of the elements that may be required in a configuration.
Warning: Always clone the ConfigTemplate and do your work in the copy. If you make any changes to ConfigTemplate, you cannot restore the defaults or get a copy of the original ConfigTemplate.
Copies of ConfigTemplate contain these elements:
Groups
Queries
Directories
Policy Plans
Master Profiles
Groups are candidates for policy deployment. You can create several different types of groups, depending on how you intend to populate use them. Groups can be formed by different means, and can come from different sources, such as an inventory, a query, or from an external source such as Active Directory.
Some examples of types of groups are:
A Query Group has no content until you associate a query with it. Later, when you run a report, the query runs and populates the group.
A DS Link Group contains computers obtained from MS Active Directory. The group's content is controlled by Active Directory criteria.
See...
Regardless of the type of group, groups fall into two main categories: Target Groups and Select Groups.
A Target Group is the set of computers to which an entire policy tree is assigned. from which a policy will select, when it is time to assign the Policy. It is the set of computers to be managed by Enterprise Manager.
A Select Group is a set of computers that are selected from the Target Group within a policy tree. Select Groups are subsets of the Target Group to which specific sub-policies apply.
When you build your policy plans, a group (which represents a set of computers) may be added to a SELECT folder within the policy plan, When the policy plan is eventually assigned to a Target Group, the sets of computers within the SELECT folder are selected from the set of computers in the Target Group.
All groups are created under the configuration's Group item.
See...
You can query for computers using three built-in sources:
The Inventory Wizard (if you have purchased this ON product and established a connection to it)
All Symantec LiveState Configuration Servers
Enterprise Manager Database
Each query source provides a list of queries that you can use to return a specific set of computers.
See...
This is where you connect to Active Directory. You can use groups that are "built" in Active Directory as groups in Enterprise Manager.
You must inform Enterprise Manager about the Active Directory server. You do this either during the setup, where you are prompted for connection information for the Active Directory server, or in the Enterprise Manager console, on the Directory's Properties dialog when you create an external Directory Browser.
See...
Directories and Directory Services
Before you can build policy plans, you need to have the following items already set up
Groups you want to use as Target and Select Groups
Master Profiles that contain package jobs with all required Admin Parameters set. You do this in Command Center.
See...
Master Profiles are package profiles that have been created in Command Center, had all required administration parameters filled in, and enabled to display in Enterprise Manager.
Enterprise Manager supports profiles that contain System and Application packages.
In Enterprise Manager you assign profiles to policy plans by dragging a profile to a policy plan's APPLY folder. Later, when the policy is assigned to a group, and the policy is evaluated, the package jobs in the profile are deployed to the resultant set of computers that are managed by Symantec LiveState Delivery.
See...
Reports let you see the results of populating groups and evaluating policies.
See...