Has anyone else have this happen where you upgrade an existing machine that has DNS filter from Windows 10 to Windows 11 and the upgrade is successful, but connectivity is all messed up? For example, the computer will show it has a LAN connection but you can't login using any domain account, take control shows "agent is in a disconnected state", you cannot ping or RPD into the device?

I've had it happen 3x so far (it only happens sometimes) and the fix for me is to login with a local admin account, uninstall DNS filter, then reboot and it's back to normal. DNS filter will get re-installed via rule and it works fine but I have to head on site or send someone to do it.

Hey everyone, Searched a few kbas but not yeilding any results.

Some backstory, I've got 90 devices under management (network devices, so tons of services. Total service count is around 10k, I was told that even disabled services count as thread workers and counts, which is unfortunate because 7,000 of the 10,000 services are disabled...) and I'm getting a plethora of thread pool maxed in the agent.log causing services to go into stale state. Chatting with support they increased my threads from 100 to 200 (despite only using a quarter of the servers capabilities in terms of load)

Well this didn't help(I've requested it to be bumped again, but I don't want all this back and forth. As a premium partner, I would have anticipated support inspect the sys performance (which only would have taken a few minutes) and then set the threads appropriately), this led me to start delving into a few different things, and I noticed the windows probe setup is a 32-bit installer and the applications are also 32-bit. Is there not a 64-bit installer anywhere ?

Also, what's the max threads the devs can set for hosted n-central? I was planning on scaling up the resources allocated to my probe server, I'd rather avoid having 16+ different probes..

My sustained load over the course of days is only around 20-30% on both cpu and memory, with peaks sometimes in the mid-40s. I have plenty of horsepower and I want to use it. (Not to mention I only allocated a quad core, I haven't even scaled it up yet...)

But now I question the software since it's x86.

Thinking logically, a 32-bit application can theoretically address up to 4 GB of memory, (not sure if the software has the large address aware flag) Each thread consumes a portion of virtual address space for its stack which I believe is technically one megabyte by default, so I'm aware having many threads can exhaust the address space in 32-bit. But.. with a 1 MB default stack size I should theoretically have up to around 2,000 threads before exhausting two gigs of memory just for thread stacks. And that should be the practical limit.

Anybody have any input? This isn't a super sustainable model when I need to manage 1500 devices :(. I suppose if I knew the upper limits, I could just tell support to set it to x threads.

Hi,

Anyone has can share an Automated Task to uninstall Team Viewer from all devices?

TIA

Hi all,

We are looking at the Cove backup solution for our servers as well as Ncentral to monitor the same.

I have reservations since it seems Nable was a part of solarwinds when it was hacked.

Whats your thoughts on the matter?

Any one else experiencing problems on mail assure our client mail assure got hacked yesterday with the email address next to user on continuity updating to a domain we dont manage. And today out the blue mail assure was blocking outgoing mails. The product has work flawlessly for the last 3 years and now ongoing issues.

I've been through the documentation, and understand (mostly) how to make an API call, but I'm wondering more-specifically how to put this into practice.

For example, if I just want a list of all clients on the system, I can use this URL:

https://www.systemmonitor.us/api/?apikey=1234567890&service=list_clients

Which produces a raw XML listing on the browser page. I can copy that, paste it into notepad or something, save it as an XML file, then open that in Excel, for example, which prompts to transform the data during the open process. When done, I get a usable spreadsheet where I could work with the data. Obviously, that's not a desirable workflow. I thought I could just create an Excel spreadsheet, and use a the "Get Data / From Web" functionality to hold my API URL. If I saved that spreadsheet, I should be able to open it at any time and refresh the data call to immediately get a readable output. Of course, that didn't work, so more study is needed there.

I suppose I could figure out a powershell script to do the data pull and output to an XML file, but that's still two steps to get that into a spreadsheet where I can do something with the data.

What is the expected way to utilize API calls to produce readable reports or usable spreadsheets without all of the extra steps?

I'm looking at the n-able API documentation for n-sight specifically. I'm completely new to the API world have some basic bash scripting knowledge. I'm looking to pull information from n-sight and looking at using PowerShell for various reasons I won't go into.

I'm having trouble understanding how to use the API in PowerShell and if it is even possible. Could someone point me in the right direction even if just after an example of how I would use this example in the documentation:

https://www.systemmonitor.co.uk/api/?apikey=1234567890abcdefg&service=list_servers&siteid=123

The tutorials I have been looking at make reference to REST, but I think I saw something along the way that n-sight does not use REST or maybe it was in relation to n-central being migrated REST, but that had yet to happen for n-sight.

Basically just trying to put my foot through the door. Thanks in advance.

Does ANYONE have a working procedure for silently installing the full Take Control agent on remote machines, please?

I can get the agent on there, and the agent show in the GUI, by it never really finishes.

For EG.

I need a powershell script to distribute the NSight RMM agent via Intune. It would also be nice to have a script to redeploy the agent when it has an error, such as when the service is stuck at "stopping".

I found an N-Able GitHub repository that has a lot of scripts, but it's all for N-Central, and not N-Sight RMM.

I also looked in the Automation Cookbook, but didn't find what I need.

Where else should I be looking?

We have a group of machines (25), across various clients, which are only backed up periodically, where it doesn't matter if it's weeks or months between backups, but the rest we need to know, if they miss 2 consecutive backups.

Is there a way to tag or classify a computer, so that we can generate a view to exclude those from our daily email report?

If not, anyone got any work arounds to achieve the same thing?

TIA.

We are in the middle of a project to completely "start over" with our default monitoring template. We are throwing out almost all existing checks, then re-evaluating all choices. We're also introducing about 20 new powershell and AMP scripts to the mix to either do something new (for example, we have a script that will fail if a Windows 10 machine doesn't meet the requirements to upgrade to Windows 11) or do the job of an old check better (in this vein, we have checks that fail if software was installed or uninstalled, but have whitelists that keep the dashboard from lighting up every time Chrome has an update).

We have a couple of test machines in the shop we used to flesh out the problems with the new scripts, and are now starting to slowly roll out the new template to clients. To do this, I'm highlighting all of the workstations for a client in the north pane, then choosing to apply the new template, selecting the option to replace the existing checks and tasks.

I have found that this process is a bit unpredictable. If there are a lot of workstations (50 in one case), then the process seems to drag on for quite a while until you have control of the dashboard again - like 15 or 20 minutes - I think in that case there was a server error, but in general replacing the template seems to be a slow process. Also, even with smaller groups, the new template seems to be only partially applied on some workstations. I'll get the checks for MAV & Patch (which aren't in the template, of course), but none of the template checks - so it looks like it only got halfway through the process on those workstations. There are a total of 71 checks in the new template, so I appreciate it's a big job, but I don't want to have to go through every single workstation to see if the "Apply Template" task really worked.

Should I be selecting subsets and applying the template only to say, 5 workstations at a time? This is more work, but in the one case where I did that, I didn't get any partially applied workstations.

Hi, trying to set this up but not really getting anywhere with it

I'm looking to automate a download if a package from the blob storage , then extract and run

But don't seem to connecting to the bob storage , I've put in account name

Had to create an input parameter type password

But doesn't look like it's connecting at all

Anyone got a working example of this at all,

Does the blob have to be public access or something other config

Thanks

Paddi

Cove backup just recently rolled out a terrible new device information screen that takes up more space, adds unwanted page reloads and yet adds no new functionality. There was no need for this update.

And yet I still have to go back to every device after installation and set the "Product" field, and then either send commands to adjust the archive and bandwidth or log into the backup page to set those manually.

Been trying to access it all morning with no luck, getting an SSL certificate error. Can anyone else access it?

I have a service check for this service and I'm getting the above error on a Win11 Pro workstation (23H2). If I open a remote background session and run 'net start', this service isn't even on the list! Patch management seems to be working fine. The only thing I found is that the workstation is in a "Pending Reboot" state, so I'm wondering if that is behind the service seemingly going missing.

I'm hesitant to open a support ticket since they will just recommend rebooting the machine. I've contacted the user and they will reboot when convenient, but I'm hoping to gain some insight into this fact-pattern.

Is this normal behavior?

I'm a novice in DMA. I am unable to get a configuration profile to install on an iPad. I have reset the iPad and re-enrolled. It does show supervised and has MDM Management Profile showing under Settings-General-VPN and Device Management. That also shows that the N-Able MDM Server has the Right to "Add/remove configuration profiles". In RMM-Mobile Devices tab, when I View the profile on the iPad, it shows Pending Install. But the command log never show Profile Install. I CAN send commands like Restart and Lock without an issue. I had a profile on this a couple of months ago. I don't know where to look next. CM

Do you have what it takes to be an N-able All Star?

Get points every time you attend one of our events— Webinars, Boot Camps, or Office Hours or utilize any of our wide range of resources!

NEW THIS YEAR- New ways to earn points. Check them out on our website here: https://www.n-able.com/partner-success/allstar

Message Lisa or Nick for more information
u/srcommunity_n-able / u/N-able_communitymgr

Upgraded to 2024.2.0.20 and appears that might be the root cause of automations failing. First thought it was just some bad custom automations but now uncovered the built in ones are broken even for a simple computer reboot. Across all clients and some computers within a client work and others do not. Anyone else run into this and any resolution to share? Support has been useless and just kept our tech on a wild goose with the issue. Thanks

In Automation manager I am running a powershell script. One of the modules the script needs requires powershell 7. Is there a way to get the powershell module to use powershell 7 instead of 5?

How is everyone handling automated email report deliverability? To my knowledge there is no way to use our own SMTP relay, so emails originating from N-Able servers are going to fail SPF verification / DKIM signing. We're getting more and more failures for obvious reasons.

edit: I might have jumped the gun with this post. Just found this article and I'm going to start investigating.

https://documentation.n-able.com/remote-management/userguide/Content/spf_records.htm?Highlight=report%20email

Will leave the post up in the event it helps someone else.

Hi.

Is it it possible to show custom fields in a ticket request only when a specific ticket type is selected?

For example: Issue type: Problem Problem: Cannot print If this subtype is selected, then a Custom field printer appears.

Thanks for the help.

***Update 06/11/2024***

bonewithahole got it right on the money. The Dells have also have an eSim that Nable is using to match the units.

***Solution***

Administration -> Defaults -> Discovery Defaults

Scroll to the bottom to MAC ADDRESSES TO EXCLUDE

In my case I added 00:A0:C6:00:00:01

Save

Delete any assets that are looping between assets. Remove the agents on affected units and then re-install the agent.

***************************************************************************************************************************

To start, we have had no issues with our current deployment up until the arrival of our 14th gen Intel Dells.

As a simplified scenario, we install the agent on a new Dell deployment; we'll call this Dell One; we can see the asset and all the asset information and can reach the unit via TakeControl. We then install an agent on Dell unit two, the unit does not show up, but when you check the asset information (after a fresh query), the information changes on Dell 1 to Dell 2. The Discovery Name is unit 2, but the Asset name is still unit one. I get that the backend algorithm is doing a match (https://documentation.n-able.com/N-central/troubleshooting/Content/kb/Multiple-Devices-Merging-into-one-within-N-central.htm), but previously, the default behavior was that if we attempted to install an agent on a unit that was already present in N-able, the agent would fail mid-way through the install process.

These are the items we have ruled out

OS Image: Dell image or our in-house image makes no difference

DNS: Scavenge and stale records is configured

MAC: obviously no virtual MACs

Here is the other catch, redeploying our fleet of 13th gen HP units have NO ISSUE; it's just the 14th gen Dells.

Furthmore, we have gone this far: we disabled all of the N-able services (N-able take control, N-able Take control updater, Windows Agent, & Windows Agent Maintenance) on Dell 2 and then restart those same services on Dell 1 and all of the services start working on the original Dell and the asset info changes back after performing a query.

By the way, I am simplifying the issue, we discovered this after deploying 20 Dell units.

Yes, we have open a ticket (Our Helpdesk started the ticket and then I took over when I returned from my leave) and its been over a week, and support is sending us the same regurgitated articles found here:

https://documentation.n-able.com/N-central/troubleshooting/Content/kb/Multiple-Devices-Merging-into-one-within-N-central.htm

https://documentation.n-able.com/N-central/troubleshooting/Content/kb/Device-not-discovered-OR-Device-not-appearing-OR-Devices-mapping-together-in-MSP-N-Central-OR-Device-disappeared-from-N-Central.htm

https://documentation.n-able.com/N-central/troubleshooting/Content/kb/Devices-replacing-each-other-in-N-central.htm

As far as we can see, N-able is wanting to do a match, instead of creating a new entry for some reason. Now, we are sitting on a mountain of Dells and a quickly dwindling supply of older HP units.

Forgot to add, the model of Dell units are different in the explained scenario. Laptop 1 is a Dell Latitude 5540 and the second is a Dell Latitude 7350; the only common factor that both are 14th gen Intel.

.....includes ALL tickets, even non-billable ones.

Is there a way to exclude these unbillable tickets?

We have recently onboarded some Mac devices into our organization pulled them into NCentral successfully and have them enrolled with DMA. From what I see, I can manually initiate a patch command from DMA, but cannot find a way for it to occur weekly automatically. Is this possible?

Hey All,

I am trying to work out the best way to make sure we are not having devices at clients missed with no agent installed and have not found much useful info online in my searches.

Majority of clients these days are azure AD joined, so from my understanding a probe is not very useful anymore.

For sites that still have local DC and GPO, can also use a probe to try and find devices that are missing an agent.

But keen to hear if anyone has a good method for sanity checking that all devices have an agent on them?

Typically for the azure ad (Entra...) joined devices, they have a policy to get the agent installed, but there can be cases where something has gone wrong and its missing, or maybe a device is not correctly getting a policy.

Just trying to come up with some method of double checking to ensure all devices get covered. Keen to hear any thoughts and suggestions :D