zac - The command line management interface for the Endpoint Agent that is installed and running on Windows managed devices.
zac command options
The zac utility performs command line management functions on the Endpoint Agent, including installing and removing software bundles, applying policies, and registering and unregistering the device.
Most commands have a long form and a short form:
Long form: add-reg-key
Short form: ark
When both forms are available, the command is listed as follows:
add-reg-key (ark) arguments
When using the command, enter only the long form or the short form:
zac add-reg-key arguments
zac ark arguments
Arguments can be mandatory or optional. Mandatory arguments are included in angle brackets <argument>. Optional arguments are included in square brackets [argument]. If an argument includes a space, enclose it in quotation marks:
zac ark "arg 1"
Installs the specified bundle. Use the bundle-list command to get a list of the available bundles and their display names.
Example:
zac bin bundle1
Launches the specified bundle. Use the bundle-list command to get a list of the available bundles and their display names.
Example to launch a bundle based on the display name:
zac bln bundle1
Example to launch a bundle based on the display name and turn selfhealing off if the launch action fails (by default, selfhealing is turned on):
zac bln bundle1 -noSelfHeal
Displays the list of bundles assigned to the device and the logged in user.
Example:
zac bl
Displays the status, version, GUID, and requirements information for the specified bundle. Use the bundle-list command to get a list of the available bundles and their display names.
Example:
zac bln bundle1
Refreshes information about the specified bundle.
Example:
zac br bundle1
Uninstalls the specified bundle. Use the bundle-list command to get a list of installed bundles and their display names.
Example:
zac bu bundle1
Verifies an installed bundle (specified by bundle display name) to ensure that no files have been removed or corrupted. Use the bundle-list command to get a list of the installed bundles and their display names.
Example:
zac bv bundle1
Rolls up the status information of a given bundle to the server, based on the display name or GUID of the bundle.
Options:
-a Rolls up the status information of the available bundles.
-s Rolls up the status information of a bundle to the specified server. The server name can be a DNS name of the server. Specify the new port number in addition to the server name.
-n Rolls up the status information of specific bundles, based on the display name or the GUID of the bundle.
Examples:
To roll up the status information of available bundles:
zac bundle-status-rollup -a
To roll up the status information of a given bundle, based on the display name or GUID of the bundle:
zac bsr -n
To roll up the status information of available bundles to the specified Primary Server:
zac bsr -a -s <server name>
For example, zac bsr -a -s 164.99.137.50
To roll up the status information of a given bundle to the specified Primary Server, based on the display name or GUID of the bundle:
zac bsr -n "Bun1 display name" "Bun2 display name" -s <server name>
NOTE:To run the zac bsr command, you need to be a Windows administrator.
Displays, removes, or restores the workstation GUID in the file system in preparation for taking an image.
For example:
To display the GUID value:
zac fsg
To remove the GUID and also conninfo.dat from the file system:
zac file-system-guid -d
To restore the GUID to the file system:
zac file-system-guid -r
To display the GUID value:
zac fsg
Runs an inventory scan or opens the Collection Data Form.
Example to run an inventory scan:
zac inv scannow
Example to open the Collection Data Form:
zac inv cdf
Example to run a full scan:
zac inv -f scannow
Changes or displays the logger configuration for the Endpoint Agent.
You can use the following options:
Example to reset the log file:
zac logger resetlog
Example to show the current log level:
zac logger level
Example to set the log level to DEBUG and above:
zac logger level DEBUG
Lists the policies that are currently being enforced on the device (effective policies). To list all policies (effective and non-effective), use the --all option.
Examples:
zac pl
zac pl --all
Applies all of the policies assigned to the device and user.
Example:
zac pr
Applies all of the policies assigned to the device and user forcefully and without logging off.
Example:
To apply forcefully all of the policies assigned to the device and user:
zac pr /force
To forcefully apply all of the policies assigned to the device and user without logging off:
zac pr /force /nologoff
Registers the device by using the specified key. Registration with keys are additive. If the device has previously been registered with a key and you register it with a new key, the device receives all group assignments associated with both keys.
Example:
zac ark key12
Registers the device in a Management Zone.
You can use the following options:
Examples:
To register a device using the enrollment token and subscription name, run the following command:
zac register -a <EnrollmentToken> -sn <subscriptionname> https://abcd.opentext.com
If you run the command without specifying the parameters, then you will be prompted to provide enrollment token and subscription name.
To register using a key, run the following command:
zac register -k mykey https://abcd.opentext.com
To generate a new device GUID and then register, run the following command:
zac register -g https://abcd.opentext.com
NOTE:When you modify or update the GUID using the -g option, then audit and messages generated with the old GUID will be lost.
Removes the device’s registration from the current Zone.
Example:
To force a device to unregister locally when a server cannot be contacted:
zac unr -f
Clears the Endpoint Management cache on the device. This removes all entries in the cache database and deletes any cache files associated with those entries.
Example:
zac cc
NOTE:If your administrator has enabled the self defense feature for the Endpoint Agent, you must supply an override password before running the zac cc command. Otherwise, you receive the following message:
You do not have permission to clear the cache. Please contact your Endpoint Management administrator.
You must request the override password from your Endpoint Management administrator. If he has not set an override password, he must do so before you can use the command. After you receive the password:
Double-click the Agent tray icon in the system tray, click Agent (under Status), then click the Policy Override link in the Agent Security Settings section to display the About box.
Click Override Policy, enter the override password, then click Override.
Go to a command line prompt and run the zac cc command.
After the cache is successfully cleared, return to the About box and click Load Policy to disable the password override.
Outputs the HTML pages displayed in the Endpoint Management icon’s property pages to files in the specified target directory.
Example:
zac dpp c:\temp
Initiates a general refresh to refresh all bundles, policies, registration, and configuration settings; initiates a partial refresh to refresh all policies, registration, and configuration settings.
Use bypasscache to avoid using data from the server cache during the refresh. This option is useful for testing or troubleshooting.
Examples:
zac ref general bypasscache
zac ref partial bypasscache
Specifies a proxy to contact rather than contacting a Cloud Server directly.
The options are:
Examples:
IPv4:
zac sp 123.456.78.90:2349 administrator novell
zac sp /default 123.456.78.90:2349
zac sp /clear
IPv6:
zac sp /ipv6 [2001:db8:0:1:1:1:1:1]:2349 administrator novell
zac sp /default /ipv6 [2001:db8:0:1:1:1:1:1]:2349
zac sp /clear /ipv6
If a username and password is not specified, then you will be prompted to enter them.
Displays information about the Cloud Server that the device is accessing for configuration information (the Configuration server) or lists the information for the Configuration server.
Examples:
zac zc
zac zc -l
This command rolls up status information to the Primary Server. You can either roll up information that was updated since the last time the status was rolled-up or you can roll up the complete status information.
Examples:
To roll up status information that was updated since the last successful status roll up:
zac sts rollup
To roll up status information on the same thread
zac sts rollup syn
To roll up complete status information:
zac sts rollup full
Enables administrators to resend the agent update status to the cloud server immediately.
Executes external message processor command.