Contents

• Notices

• Summary of amendments

• Preface

• 1. Product Overview

  • 1.1 Product overview

    • 1.1.1 Product benefits

    • 1.1.2 Functionality to support security management using a PDCA cycle

    • 1.1.3 Flow of asset management

  • 1.2 System components

  • 1.3 Program modules

    • 1.3.1 Basic module layout

    • 1.3.2 Working with the Home module

    • 1.3.3 Working with the Security module

    • 1.3.4 Working with the Assets module

    • 1.3.5 Working with the Inventory module

    • 1.3.6 Working with the Distribution (ITDM-compatible) module

    • 1.3.7 Working with the Events module

    • 1.3.8 Working with the Reports module

    • 1.3.9 Working with the Settings module

• 2. Features of JP1/IT Desktop Management 2

  • 2.1 List of features

  • 2.2 Displaying a system summary

    • 2.2.1 List of Panels

  • 2.3 Managing user accounts

    • 2.3.1 Locking user accounts

    • 2.3.2 Authentication methods for user accounts

    • 2.3.3 User account permissions

    • 2.3.4 Available operations by user account permission

    • 2.3.5 Task allocations for user accounts

    • 2.3.6 Available operations by task allocation

    • 2.3.7 Administration scopes for user accounts

    • 2.3.8 Differences in operation windows when administration scopes are assigned

  • 2.4 Using the Getting Started wizard

    • 2.4.1 Discovering devices

    • 2.4.2 Discovering networked devices

    • 2.4.3 Linking with Active Directory

  • 2.5 Installing the agent

    • 2.5.1 Distributing the agent to online-managed computers

    • 2.5.2 Criteria for agent distribution to online-managed computers

    • 2.5.3 Assigning agent configurations to online-managed computers

  • 2.6 Managing devices

    • 2.6.1 Designating discovered devices as management targets

    • 2.6.2 Collecting device information

    • 2.6.3 Controlling devices

    • 2.6.4 Managing offline computers

    • 2.6.5 Agentless management

    • 2.6.6 Linking with an MDM system

    • 2.6.7 Auto maintenance of devices

    • 2.6.8 Registering device information by using the API

  • 2.7 Controlling devices remotely

    • 2.7.1 Process for remotely controlling devices

    • 2.7.2 Remote control features

    • 2.7.3 Functional differences between remote control connection methods

    • 2.7.4 Notes on using the remote control feature in multi-language environments

    • 2.7.5 Notes on files generated by the controller in user environments

    • 2.7.6 Automatically updating the controller program

    • 2.7.7 Setting a connection mode for remote control sessions

    • 2.7.8 Displaying the connection status of remote control sessions

    • 2.7.9 Using the remote control feature in NAT and DHCP environments

    • 2.7.10 User permissions required for remote control using Windows authentication

    • 2.7.11 Setting user permissions required for remote control using Windows autpagehentication

    • 2.7.12 Setting authentication information for remote control

    • 2.7.13 Connecting from a controller to a remote computer

    • 2.7.14 Controlling the interface of a computer during a remote control session

    • 2.7.15 Transferring files during remote control sessions

    • 2.7.16 Issuing connection requests from remote computers to controllers

    • 2.7.17 Managing connection targets for the remote control feature

    • 2.7.18 Recording and playback of remote control sessions

    • 2.7.19 Using the chat feature

    • 2.7.20 Remote control menus

  • 2.8 Managing network connections

    • 2.8.1 Detecting devices by using the network monitoring function

    • 2.8.2 Settings for controlling network connections

    • 2.8.3 Notes on network monitoring

    • 2.8.4 Displaying the operating status of the network monitor

    • 2.8.5 Changing the network access control agent

    • 2.8.6 Using network monitor settings to control network access

    • 2.8.7 Managing network monitor settings

    • 2.8.8 Managing the network control list

    • 2.8.9 Managing network access using a blacklist

    • 2.8.10 Managing network access using a whitelist

    • 2.8.11 Timing of network control list updates

    • 2.8.12 Settings in the network control list

    • 2.8.13 Registering devices that are accessible to blocked devices

    • 2.8.14 Automatically controlling network access

    • 2.8.15 Automatic updating of the network control list

    • 2.8.16 Managing exclusive communication destinations for devices denied network access

    • 2.8.17 Manually controlling network access

    • 2.8.18 Importing the network connection information

    • 2.8.19 Exporting the network connection information

    • 2.8.20 Network control function by linking with JP1/NETM/NM - Manager

    • 2.8.21 Network control function by linking with NX NetMonitor/Manager

  • 2.9 Managing security

    • 2.9.1 Managing security status

    • 2.9.2 Devices available for security management

    • 2.9.3 Judging security status

    • 2.9.4 Managing a security policy

    • 2.9.5 Restricting prohibited operations

    • 2.9.6 Managing Windows updates

  • 2.10 Managing operation logs

    • 2.10.1 Types of operation logs that can be collected

    • 2.10.2 Managing operation logs on the management server

    • 2.10.3 Investigating suspicious movements of files from systems using operation logs

    • 2.10.4 Conditions for determining whether a file is to be monitored for suspicious file movements

    • 2.10.5 Collecting logs for suspicious print operations

    • 2.10.6 Conditions for checking for large numbers of print jobs

    • 2.10.7 Prerequisites and notes on collecting operation logs

    • 2.10.8 Importing HIBUN logs into the management server

  • 2.11 Managing assets

    • 2.11.1 List of the fields for asset information

    • 2.11.2 Managing hardware asset information

    • 2.11.3 Checking the usage status of software licenses

    • 2.11.4 Managing contract information

    • 2.11.5 Associating asset information

    • 2.11.6 Checking asset information

    • 2.11.7 Importing asset information

    • 2.11.8 Exporting asset information

    • 2.11.9 Importing asset association information

    • 2.11.10 Exporting asset association information

  • 2.12 Distributing software and files by using Remote Install Manager

    • 2.12.1 Distributing files efficiently using Remote Install Manager

    • 2.12.2 Distributing packages to computers managed offline by using Remote Install Manager

  • 2.13 Distributing software and files to computers managed online (ITDM-compatible distribution)

    • 2.13.1 Managing packages and tasks (ITDM-compatible distribution)

    • 2.13.2 Distribution enforced as an automatic countermeasure for security (ITDM-compatible distribution)

    • 2.13.3 Preparation for distribution (ITDM-compatible distribution)

    • 2.13.4 Types of software that can be uninstalled by the distribution function (ITDM-compatible distribution)

    • 2.13.5 Notes on distribution (ITDM-compatible distribution)

    • 2.13.6 Postponing download or installation on a computer to which a package is distributed (ITDM-compatible distribution)

    • 2.13.7 Reducing load by distribution (ITDM-compatible distribution)

    • 2.13.8 Caching distributed packages (ITDM-compatible distribution)

    • 2.13.9 Executing a task when a user is logged off (ITDM-compatible distribution)

    • 2.13.10 Power control by the distribution function (ITDM-compatible distribution)

    • 2.13.11 Judging the result of software installation executed by the distribution function (ITDM-compatible distribution)

  • 2.14 Collecting files by using Remote Install Manager

  • 2.15 Displaying events

    • 2.15.1 Events to be output

    • 2.15.2 Event types

    • 2.15.3 Event format

    • 2.15.4 Checking events on the JP1/IM event console

  • 2.16 Displaying reports

    • 2.16.1 Viewing reports

    • 2.16.2 Calculation of the assessment level in Security Diagnosis Reports

    • 2.16.3 Criteria for judging whether Green IT has been applied

    • 2.16.4 Calculation of ideal energy consumption (theoretical value) and energy consumption (theoretical value)

    • 2.16.5 Calculation schedules for reports

    • 2.16.6 Printing reports

    • 2.16.7 Deleting reports

  • 2.17 Using filters

    • 2.17.1 Filters provided by JP1/IT Desktop Management 2

  • 2.18 Managing a large system comprised of multiple departments or networks

    • 2.18.1 Information displayed in the operation windows in a multi-server configuration

    • 2.18.2 Restrictions on operations to a device managed by a management relay server under the local server

    • 2.18.3 Checking the status of management relay servers under the local server

    • 2.18.4 Logging in to the operation window of a management relay server under the local server

    • 2.18.5 Automatic installation of the agent to the management relay server

    • 2.18.6 Agent configuration of a managed computer in a multi-server configuration

    • 2.18.7 Managing devices in a multi-server configuration

    • 2.18.8 Remote control in a multi-server configuration

    • 2.18.9 Managing network connections in a multi-server configuration

    • 2.18.10 Security management in a multi-server configuration

    • 2.18.11 Managing operation logs in a multi-server configuration

    • 2.18.12 Managing assets in a multi-server configuration

  • 2.19 Operations in a cluster system

  • 2.20 Managing the database

    • 2.20.1 Data output during backup

  • 2.21 Using commands

  • 2.22 Operations on users' computers

    • 2.22.1 Users' entry of user information

    • 2.22.2 Display of balloon tips on users' computers

    • 2.22.3 Behavior when users are directed to turn off computers

    • 2.22.4 Behavior when users are directed to restart computers

    • 2.22.5 Behavior when distribution is performed on users' computers

    • 2.22.6 Behavior when operations are restricted on users' computers

    • 2.22.7 Users who receive notifications from the agent

    • 2.22.8 Notes on users' computers

  • 2.23 Controlling smart devices

  • 2.24 Managing devices used outside the company

    • 2.24.1 Managing devices connected via VPN

    • 2.24.2 Managing devices connected via the Internet

  • 2.25 Operation in a large-scale environment

    • 2.25.1 Differences due to the large-scale management option

    • 2.25.2 Restrictions when the large-scale management option is enabled

  • 2.26 Priority distribution

    • 2.26.1 Priority distribution function

    • 2.26.2 Set priority function

    • 2.26.3 Change priority function

    • 2.26.4 Agent settings

• 3. About Product Licenses

  • 3.1 Overview of product licenses

  • 3.2 Relationship between device status and product license

  • 3.3 Managing product licenses in a multi-server configuration

    • 3.3.1 Distributing product licenses to management relay servers

    • 3.3.2 Authorizing license registration for management relay servers

  • 3.4 Cautions about product licenses

• 4. System Design

  • 4.1 Installation and operation procedure

    • 4.1.1 Installation procedure

    • 4.1.2 Operation procedure

  • 4.2 System prerequisites

    • 4.2.1 Management server prerequisites

    • 4.2.2 Prerequisites for an administrator's computer

    • 4.2.3 Prerequisites for a computer on which an agent will be installed

    • 4.2.4 Prerequisites for a computer on which a relay system will be installed

    • 4.2.5 Prerequisites for a computer on which the controller will be installed

    • 4.2.6 Prerequisites for a computer on which to install an Internet gateway

    • 4.2.7 Prerequisites for a computer on which the network monitor is enabled

    • 4.2.8 Prerequisites for agentless management

    • 4.2.9 Prerequisites for linking with JP1/IM

    • 4.2.10 Network prerequisites

  • 4.3 Prerequisites for functions

    • 4.3.1 Device management prerequisites

    • 4.3.2 Network monitor prerequisites

    • 4.3.3 Prerequisites for remote control

    • 4.3.4 Security control prerequisites

    • 4.3.5 Prerequisites for acquiring operation logs

    • 4.3.6 Asset management prerequisites

    • 4.3.7 Prerequisites for the distribution function

    • 4.3.8 Prerequisites for reports

  • 4.4 Examining the system configuration

    • 4.4.1 Minimum configuration

    • 4.4.2 Basic configuration

    • 4.4.3 Multi-server configuration

    • 4.4.4 Offline management configuration

    • 4.4.5 Agentless configuration

    • 4.4.6 Support service linkage configuration

    • 4.4.7 Active Directory linkage configuration

    • 4.4.8 MDM linkage configuration

    • 4.4.9 Network monitoring configuration

    • 4.4.10 Remote control configuration

    • 4.4.11  JP1/IM linkage configuration

    • 4.4.12 Cluster configuration

    • 4.4.13 JP1/NETM/NM - Manager linkage configuration

    • 4.4.14 Internet gateway configuration

    • 4.4.15 NAT Environment Configuration

    • 4.4.16 External system linkage configuration

  • 4.5 Examining the database

    • 4.5.1 Database overview

    • 4.5.2 Disk space requirements for the management server

    • 4.5.3 Guidelines for disk space requirements for operation log backup folder

    • 4.5.4 Guidelines for disk space requirements for the operation log database

    • 4.5.5 Guidelines for disk space requirements in the data folder for acquiring operation logs

    • 4.5.6 Guidelines for disk space requirements for revision history archive

    • 4.5.7 Guidelines for disk space requirements for revision history database

    • 4.5.8 Guidelines for recommended disk space

    • 4.5.9 Acquiring operation logs when the connection destination of the agent is turned off

  • 4.6 Analysis and Preparation before operation

    • 4.6.1 User account considerations

    • 4.6.2 Creating user accounts for efficient internal controls

    • 4.6.3 Analyzing management targets

    • 4.6.4 Creating groups

    • 4.6.5 Analyzing management options required in a multi-server configuration

    • 4.6.6 Analysis of network monitoring requirements

    • 4.6.7 Analyzing periodic maintenance needs

    • 4.6.8 Notes when running anti-virus software

• Appendixes

  • A. Miscellaneous Information

    • A.1 List of folders

    • A.2 List of services and processes

    • A.3 Port number list

    • A.4 Lists of parameters

    • A.5 Lists of properties

    • A.6 Performance and Estimates

    • A.7 List of limit values

    • A.8 Times at which functions are executed automatically

    • A.9 Cases in which settings are applied after a restart

    • A.10 Connectivity with lower versions

    • A.11 Functional differences between an agent for Windows, agent for UNIX, and agent for Mac

    • A.12 Restrictions when using Asset Console to manage assets

    • A.13 Functional restrictions in JP1/IT Desktop Management 2 - Operations Director

    • A.14 Version changes

    • A.15 Miscellaneous information for this manual

  • B. Glossary

• Index

To Page Top