User's Guide

Document number: 320205-005US

Revision 1.7
Legal Information

Quick Links
Start Here

www.intel.com/go/ITDirector
 Table of Contents
Introduction ..............................................................................................2
System Configuration .................................................................................3
Security....................................................................................................4
Network Status..........................................................................................5
Setting up Preferences................................................................................6
Preferences Page: Overview ...................................................................6
Application Preferences .........................................................................6
Application Preferences: Overview .....................................................6
Setting User Privileges .....................................................................6
Changing the Remote Monitoring Account Password .............................7
Retrieving the Manageability Admin Password .....................................7
Enabling and Disabling Local Setup....................................................8
Network Monitoring Preferences..............................................................8
Network Monitoring Preferences: Overview .........................................8
Configuring Subnets ........................................................................9
Configuring Data Backup and Restore Requirements ............................9
Configuring the Software Health Monitor – Basic Mode ....................... 10
Configuring Hard Drive Free Space Requirements .............................. 10
Exporting and Importing Settings.......................................................... 11
Configuring Your Computer ....................................................................... 13
Configuring Your Computer: Overview ................................................... 13
Manageability Setup............................................................................ 13
About the Manageability Capability .................................................. 13
Manageability Capability System Prerequisites................................... 14
Setting Up the Manageability Capability............................................ 14
Data and System Protection ................................................................. 15
Blocking USB Devices .................................................................... 15
Launching Data Backup and Restore ................................................ 18
Configuring the Software Health Monitor - Advanced Mode.................. 19
Performance and Diagnosis .................................................................. 20
Configuring the Power-on Monitor.................................................... 20
Monitoring Your Network ........................................................................... 21
Monitoring Your Network: Overview ...................................................... 21
Computers without Intel(R) IT Director .................................................. 22

ii
 Table of Contents

Hardware and Software Assets Monitor .................................................. 22

System Details Page ........................................................................... 23
Software Health Monitor ...................................................................... 23
Violations and Warnings ...................................................................... 24
Warning Messages .............................................................................. 25
Troubleshooting ....................................................................................... 27
Troubleshooting: General..................................................................... 27
Troubleshooting: Manageability Capability.............................................. 30
Configuring Norton Internet Security* ................................................... 33
Configuring McAfee Security Center* ..................................................... 36
Configuring Kaspersky Internet Security*............................................... 37
Configuring Trend Micro Internet Security Pro* ....................................... 38
Configuring KV Antivirus Software* ....................................................... 40
Configuring Rising Internet Security* .................................................... 41
Configuring Microsoft Windows* Small Business Server ............................ 43
Index ..................................................................................................... 45

iii
Disclaimer and Legal Information
INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL(R)
PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE,
TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT.
EXCEPT AS PROVIDED IN INTEL'S TERMS AND CONDITIONS OF SALE FOR SUCH
PRODUCTS, INTEL ASSUMES NO LIABILITY WHATSOEVER, AND INTEL
DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR
USE OF INTEL PRODUCTS INCLUDING LIABILITY OR WARRANTIES RELATING TO
FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT
OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT.
UNLESS OTHERWISE AGREED IN WRITING BY INTEL, THE INTEL PRODUCTS ARE
NOT DESIGNED NOR INTENDED FOR ANY APPLICATION IN WHICH THE FAILURE
OF THE INTEL PRODUCT COULD CREATE A SITUATION WHERE PERSONAL INJURY
OR DEATH MAY OCCUR.
Intel may make changes to specifications and product descriptions at any time,
without notice. Designers must not rely on the absence or characteristics of any
features or instructions marked "reserved" or "undefined." Intel reserves these
for future definition and shall have no responsibility whatsoever for conflicts or
incompatibilities arising from future changes to them. The information here is
subject to change without notice. Do not finalize a design with this information.
The products described in this document may contain design defects or errors
known as errata which may cause the product to deviate from published
specifications. Current characterized errata are available on request.
Contact your local Intel sales office or your distributor to obtain the latest
specifications and before placing your product order.
Copies of documents which have an order number and are referenced in this
document, or other Intel literature, may be obtained by calling 1-800-548-4725,
or by visiting Intel's Web Site.
Intel processor numbers are not a measure of performance. Processor numbers
differentiate features within each processor family, not across different processor
families. See http://www.intel.com/products/processor_number for details.
BunnyPeople, Celeron, Celeron Inside, Centrino, Centrino Atom, Centrino Atom
Inside, Centrino Inside, Centrino logo, Core Inside, FlashFile, i960, InstantIP,
Intel, Intel logo, Intel386, Intel486, IntelDX2, IntelDX4, IntelSX2, Intel Atom,
Intel Atom Inside, Intel Core, Intel Inside, Intel Inside logo, Intel. Leap ahead.,
Intel. Leap ahead. logo, Intel NetBurst, Intel NetMerge, Intel NetStructure, Intel
SingleDriver, Intel SpeedStep, Intel StrataFlash, Intel Viiv, Intel vPro, Intel
XScale, Itanium, Itanium Inside, MCS, MMX, Oplus, OverDrive, PDCharm,
Pentium, Pentium Inside, skoool, Sound Mark, The Journey Inside, Viiv Inside,
vPro Inside, VTune, Xeon, and Xeon Inside are trademarks of Intel Corporation in
the U.S. and other countries.
* Other names and brands may be claimed as the property of others.
Copyright (C) 2008-2009, Intel Corporation. All rights reserved.

1
Introduction
Intel(R) IT Director enables you to configure and monitor system protection for
computers in your network. It enables you to monitor up to 25 client computers
on all subnetworks (subnets) connected to your computer plus one extra subnet.
Before using Intel(R) IT Director, configure your system as explained in the
Getting Started Guide.
To set up Intel(R) IT Director:
1. On each computer, set user privileges on Intel(R) IT Director.
2. On each computer, configure Intel(R) IT Director settings for that
computer.
3. From computers you will use to monitor the network, configure your
network.
Once you finish these steps, you can start monitoring your network.
The Intel(R) IT Director interface includes the following tabs:
• Local Setup. Configure protection and monitoring on client computers.
• Dashboard. Monitor your network.
• Preferences. Set user privileges, disable Local Setup settings, and
configure your network.
For support and more information about Intel(R) IT Director, see
http://support.intel.com/support/go/itdirector.htm.

See Also
Getting Started Guide
Setting User Privileges
Monitoring Your Network: Overview
Configuring Your Network: Overview
Configuring Your Computer: Overview
Blocking USB Devices: Overview
Configuring the Power-on Monitor
Troubleshooting

2
System Configuration
Before using Intel(R) IT Director, use the Intel(R) IT Director configuration tool to
configure your system, as explained in the Getting Started Guide.
This tool automatically opens the first time you use Intel(R) IT Director.

See Also
Getting Started Guide

3
Security
Intel(R) IT Director uses manageability capability for the Advanced Software
Health Monitor feature. Intel(R) IT Director sets up manageability in Basic Mode
(formerly Small Business Mode) or Enterprise Mode depends on the manageability
feature provided on your system, both modes do not encrypt communications.
Because these communications are not encrypted, you can more easily use third-
party applications in conjunction with the manageability capability. Intel(R) IT
Director does encrypt communications for all features that do not use the
manageability capability.

See Also
About the Manageability Capability

4
Network Status
You can monitor your network status through the Intel(R) IT Director icons that
resides in the system tray of your computer.

Icon Access to Access to Notes

Local Setup Dashboard
Tab Tab

No Yes Fully compliant

No Yes Scanning the network

No Yes There is violation in the

network

No Yes There is warning in the

network

No No Being monitored only

Yes Yes Fully compliant

Yes Yes Scanning the network

Yes Yes There is violation in the

network

Yes Yes There is warning in the

network

Yes No Being monitored only

5
Setting up Preferences
Preferences Page: Overview
The Preferences page includes the following sections:
• Application Preferences
o User Privilege Settings
o Change Intel(R) IT Director Remote Monitoring Account Password
o Retrieve Manageability Admin Password
• Network Monitoring Preferences
o Subnet Settings
o Data Backup and Restore Settings
o Software Health Monitor Settings - Basic Mode
o Hard Drive Free Space Threshold
You can configure settings manually, or you can import the settings from a file.
To use settings from the current computer on other computers, export your
settings to a file.

See Also
Setting User Privileges
Application Preferences
Network Monitoring Preferences
Exporting and Importing Settings

Application Preferences
Application Preferences: Overview
From Preferences > Application Preferences, you can:
• Set user access privileges to Intel(R) IT Director
• Change Intel(R) IT Director Remote Monitoring Account password
• Retrieve Manageability Admin password
• Disable your changes to the Local Setup tab, and prevent access to that
tab.

See Also
Preferences tab
Configuring Your Computer: Overview

Setting User Privileges

The user logged on when you first access Intel(R) IT Director has access to all
features of Intel(R) IT Director.
For the first time use, Intel(R) IT Director applies default settings includes user
privileges.

6
 Setting up Preferences

You can also set which features other users with Windows* Administrator
privilege can access. Set access privileges from Preferences > User Privilege
Settings.
You have two options:
• Dashboard tab
• Local Setup tab

See Also
Introduction
Preferences tab

Changing the Remote Monitoring Account Password

To change the Intel(R) IT Director Remote Monitoring Account Password:
1. In Intel(R) IT Director, go to Preferences > Application Preferences.
Click Change Password.
2. If your Manageability Setup is not completed, skip to the next step.
If your Manageability Setup is completed, you need to answer the password
retrieval questions that you have answered during the first setup of the
manageability capability.
3. Enter the password and confirm again.
4. Click Change Password.
Your Intel(R) IT Director Remote Monitoring Account password is now changed.

NOTE
Please make sure the Intel(R) IT Director Remote Monitoring Account
password matches the password rules given on your Windows* system.

See Also
Application Preferences

Retrieving the Manageability Admin Password

To retrieve your manageability admin password:
1. In Intel(R) IT Director, go to Preferences > Application Preferences.
Click Retrieve Password.
2. Answer the password retrieval questions as you answered them when you
first set up the manageability capability.
3. If the answers are correct, a dialog box shows you the password. If your
answers are not correct, a dialog box enables you to choose whether to try
again or quit.
If you do not know your password and cannot answer the questions correctly, you
cannot retrieve your manageability admin password. To reset the password, you

7
Intel(R) IT Director User's Guide

must clear the CMOS settings. For more information, see the documentation for
your motherboard.

See Also
About the Manageability Capability
Troubleshooting: Manageability Capability

Enabling and Disabling Local Setup

By default, Intel(R) IT Director grants user the privilege to access the Local Setup
tab. You also can disable this privilege.
To disable local setup to Intel(R) IT Director:
1. From Intel(R) IT Director on the computer, go to Preferences >
Application Preferences > User Privilege Settings
2. Check the box Disable local setup to Intel(R) IT Director.
3. Press Apply.
Once local setup is disabled, you can not:
• Access the Local Setup tab
• Use the configuration you have set up in Local Setup tab.
For example: if you have set to block USB devices previously, after local
setup is disabled, this setting is no longer effective
To enable local setup to Intel(R) IT Director:
1. From Intel(R) IT Director on the computer, go to Preferences >
Application Preferences > User Privilege Settings
2. uncheck the box Disable local setup to Intel(R) IT Director.
3. Press Apply.

See Also
Setting User Privileges

Network Monitoring Preferences

Network Monitoring Preferences: Overview
You can configure settings for monitoring machines on your network through
Preferences > Network Monitoring Preferences.
Network Monitoring Preferences enables you to:
• Set which additional subnet to scan.
• Choose to monitor Microsoft Windows* Backup
• Choose the software to be monitored in the Software Health Monitor.
• Set the Hard Drive Free Space Threshold.

See Also
Monitoring Your Network

8
 Setting up Preferences

Preferences tab

Configuring Subnets
A subnetwork (or subnet) is a part of a larger network. Your network may have
multiple subnets. Intel(R) IT Director automatically searches for all computers on
the local subnet. You can instruct Intel(R) IT Director to search on an additional
subnet.
To instruct Intel(R) IT Director to search for computers on additional subnets:
1. Go to Preferences > Network Monitoring Preferences > Subnet
Settings.
2. Select In addition to the local PC subnet, scan the following subnet
and enter the subnet address.
3. Press Apply.
For Intel(R) IT Director to find and monitor a computer, that computer must have
remote queries configured.

See Also
Monitoring Your Network: Overview
Configuring Your Network: Overview

Configuring Data Backup and Restore Requirements

Intel(R) IT Director provides interface to use Microsoft Windows* Backup, it
enables you to back up data on a regular basis.
You can choose to monitor whether Microsoft Windows* Backup is running on
network computers. By default, Intel(R) IT Director monitors Microsoft Windows*
Backup running status.
To start or stop monitoring whether Microsoft Windows* Backup is running on
network computers:
1. Go to Preferences > Network Monitoring Preferences.
2. Check or uncheck the box next to Monitor Microsoft Windows Backup...
3. Click Apply.

NOTE
You also can find your Microsoft Windows* Backup application from:

• For Windows XP*: Start > All Programs > Accessories > System
Tools > Backup

• For Windows Vista* / Windows 7*: Start > All Programs >
Maintenance> Backup and Restore

If Microsoft Windows* Backup is not available on a computer, that computer

will be listed in Dashboard as not supporting backup and restore through
Intel(R) IT Director.

See Also

9
Intel(R) IT Director User's Guide

Enabling Data Backup and Restore

Configuring the Software Health Monitor – Basic Mode

Through the Internet, your computer could be exposed to damage or
unauthorized access. To increase your control over computer security, Intel(R) IT
Director monitors settings of important software on computers in your network.
You can choose which of these settings to require. If a computer is missing a
required setting, Intel(R) IT Director records a violation.
To select required Software Health Monitor settings:
1. Go to Preferences > Network Monitoring Preferences > Software
Health Monitor Settings - Basic Mode.
2. Under Choose the application types to be monitored, select any
options from the following list:
• Microsoft Windows Automatic Updates.
• Firewall
• Anti-Virus Software
• Anti-Spyware Software
3. Press Apply.

NOTE
If you set the network Software Health Monitor Settings - Basic Mode from
the Preferences tab, those settings override the Software Health Monitor-
Advanced Mode settings, which you set from the Local Setup tab.

Use the Dashboard tab to view messages from the Software Health Monitor.

See Also
Configuring Your Network: Overview
Monitoring Your Network: Overview
Violations and Warnings
Configuring the Software Health Monitor-Advanced Mode
About the Manageability Capability

Configuring Hard Drive Free Space Requirements

Intel(R) IT Director monitors free space on the hard drives on your network. You
can choose to receive warnings if free space on a hard drive drops below a
threshold.
To set a threshold for the free space on your hard drive:
1. Go to Preferences > Network Monitoring Preferences.
2. For Hard Drive Free Space Threshold, choose a percentage.
3. Click Apply.

10
 Setting up Preferences

See the free space on your hard drives and all warning messages in the System
Details page.

NOTE
If a hard drive has multiple partitions, Intel(R) IT Director treats the entire
hard drive as if it were only one partition. The percentage of free space is
calculated as the total free hard drive space divided by the total hard drive
space.

See Also
Configuring Your Network: Overview
Monitoring Your Network: Overview

Exporting and Importing Settings

Instead of separately configuring each Intel(R) IT Director setting, you can export
a group of settings from Intel(R) IT Director to a file, then import the settings on
other computers from this file.
You can export/import any of the following settings:
• Configurations in Preferences tab:
o User Privileges
o Local Setup Setting
o Additional Subnets
o Data Backup and Restore
o Software Health Monitor Settings - Basic Mode
o Hard Drive Free Space Threshold
• Configurations in Local Setup tab:
o USB Blocking
o Software Health Monitor- Advanced Mode
o Power-on Monitor
To export settings:
1. Go to Preferences.
2. Click the Export button at the bottom of the window.
3. Select the settings to export. Click Next.
4. Set the file name and directory path. Click Next.
5. Click Finish to export your settings to the file.
To import settings:
1. Go to Preferences.
2. Click the Import button at the bottom of the window.
3. Choose whether to save your current settings to a file. Click Next.
4. Choose the file from which to import settings.

11
Intel(R) IT Director User's Guide

5. Choose the settings to import. Click on each setting to see how it is set.
6. Click Finish to import the settings.

NOTE
Importing settings overwrites the previous settings.

See Also
Network Monitoring Preferences: Overview
Preferences Tab: Overview

12
Configuring Your Computer
Configuring Your Computer: Overview
Configure protection and monitoring on a computer from the Local Setup tab in
Intel(R) IT Director on that computer.

TIP
You can use Local Setup to configure one computer, and then export the
settings for use on other computers. For more information, see Exporting and
Importing Settings.

The Local Setup tab includes the following features:

• Manageability Setup
o Manageability Setup
• Data and System Protection
o USB Blocking
o Data Backup and Restore
o Software Health Monitor-Advanced Mode
• Performance and Diagnosis
o Power-on Monitor
Once you configure features from the Local Setup tab, you can monitor those
features from the Dashboard tab.

See Also
Monitoring Your Network: Overview
Network Monitoring Preferences: Overview

Manageability Setup
About the Manageability Capability
The manageability capability enables you to remotely monitor whether software is
properly running on computers. Intel(R) IT Director uses the manageability
capability for the Advanced Software Health Monitor feature.
Intel(R) IT Director includes a tool for setting up manageability on your computer.
The manageability capability is supported on computers with:
• Intel(R) vPro(TM) Technology
• Intel(R) Standard Manageability
• Level III Manageabiltiy Upgrade
You can find more information from: http://www.intel.com/technology/platform-
technology/intel-amt/

See Also
Security

13
Intel(R) IT Director User's Guide

Setting Up the Manageability Capability

Troubleshooting: Manageability Capability
Prerequisites for the Manageability Capability
Software Health Monitor

Manageability Capability System Prerequisites

To set up the manageability capability, your system must be configured as follows:
• In the system BIOS, Intel(R) AMT must be enabled.
• In the Intel(R) Management Engine BIOS Extensions (Intel(R) MEBx),
Manageability must be set to Intel(R) AMT.
• The manageability drivers for your chipset must be installed.
• The Local Management Service must be installed and running.
• The Intel(R) Management Engine Interface must be installed and enabled.

See Also
Setting Up the Manageability Capability
Troubleshooting: Manageability Capability

Setting Up the Manageability Capability

Before setting up the manageability capability, verify that at least one other
computer with Intel(R) IT Director is accessible on your network.
To set up the manageability capability:
1. If your computer supports the manageability capability, Intel(R) IT
Director asks you to open the manageability setup wizard the first time
you open Intel(R) IT Director.
2. The Intel® IT Director Manageability Setup Wizard opens. On the welcome
page, click Next.
3. If Intel® Remote Platform Assistance Technology is detected, choose
whether to continue:
• If click Cancel, you can continue use Intel® Remote Platform
Assistance Technology, manageability setup is canceled
• If click Next, Intel® Remote Platform Assistance Technology will
be disabled, manageability setup continues
4. Select whether your manageability capability has been configured on this
computer.
• If yes, enter the manageability admin password from the previous
setup.
• If no or you do not know, follow the instructions on the screen.
5. Answer three password retrieval questions. To retrieve your password in
the future, you will need to answer the questions as you do here. Click
Next.

14
 Configuring Your Computer

6. Select a connected USB drive on which to generate files needed for

manageability setup, and click Generate. If your USB drive is not blank,
all data on the drive will be erased.
7. Manageability setup requires a reboot. To continue, save and close all
open files and click Reboot now. Leave the USB drive connected to the
system, for use later in the process.
8. During reboot, the following screen will ask if you want to Continue with
Auto Provisioning. At that screen, press Y and press any key when
prompted.

9. If there was a problem with the files on the USB drive, you will see an
error screen. Follow the instructions in the error screen.
10. After the system reboots, manageability setup continues. If you cancel
manageability setup, you return to this page the next time you open the
Manageability Setup Wizard.
11. If you continue the manageability setup, there are two scenarios for the
rest steps:
• Scenario 1: System automatically completes the setup, go to next
step.
• Scenario 2: System displays domain information, check the
domain info then click Next.
12. Once manageability setup succeeds, click Finish.

See Also
Troubleshooting: Manageability Capability
Retrieving the Manageability Admin Password

Data and System Protection

Blocking USB Devices

Blocking USB Devices: Overview

Universal Serial Bus* (USB*) is a connection standard for many types of devices.
In some situations, USB devices can pose risks to information security or
computer stability. For example, someone could transfer classified information
from your computer to a USB storage device.

15
Intel(R) IT Director User's Guide

Use Intel(R) IT Director to block USB devices from accessing your computer.
When you plug in a blocked USB device to your computer, Intel(R) IT Director
notifies you that you have tried to plug in a blocked device and prevents you from
using that device.

NOTE
For Intel(R) IT Director to block USB devices, USB blocking must be enabled.

You can block all or specific types of USB devices.

See Troubleshooting for what to do if a new device is blocked, and you think it
should not be blocked.

NOTE

The icon denotes that USB Blocking has stopped working.

The icon denotes one of the following:

• A blocked USB device was connected.

• USB Blocking has not been configured

• Configuration of the feature has been changed or disabled

To choose the USB device types to block on a computer:

1. From Intel(R) IT Director on the computer, go to Local Setup > Data
and System Protection > USB Blocking.
2. Choose to either Allow all USB devices or Block the following USB
devices on this computer:
3. If you choose to block USB devices, check the box next to device types
you want to block.
4. Click Apply.
You can monitor the USB blocking feature on computers on your network from
the Dashboard tab.

See Also
Enabling and Disabling USB Device Blocking
USB Device Types
Troubleshooting

Enabling and Disabling USB Device Blocking

By default, Intel(R) IT Director blocks the USB device types you selected to block.
When you disable USB device blocking, Intel(R) IT Director does not block any
USB devices, even if you have selected devices to be blocked.
To disable USB device blocking on your computer:

16
 Configuring Your Computer

1. From Intel(R) IT Director on the computer, go to Local Setup > Data

and System Protection > USB Blocking.
2. Check the box Allow all USB devices.
3. Press Apply.
To enable USB device blocking on your computer:
1. From Intel(R) IT Director on the computer, go to Local Setup > Data
and System Protection > USB Blocking.
2. Check the box Block the following USB devices on this computer.
3. Select the USB devices that you need to block:
• You can check the box All USB Device Type, all USB devices will
be blocked on this computer
• You also can choose the USB devices to be blocked, including:
o Entertainment USB Devices
o Storage Devices
o Office Devices
o Other Devices
You can click the arrow icon next to each USB device type to extract
the device list
4. Press Apply.
If USB blocking is disabled on a computer, Intel(R) IT Director records a warning
message. You can monitor USB Blocking through Dashboard.

See Also
Blocking USB Devices
USB Device Types

USB Device Types

Choose the USB device types to block from Local Setup > Data and System
Protection > USB Blocking. Here are the device types you can block, along
with examples of each:

Category Device Type Example

Entertainment USB Audio device Headphones, speakers

Devices

Video device Webcam

Digital camera Digital camera

17
Intel(R) IT Director User's Guide

Joystick Joystick or other

controller

Storage Devices Mass storage drive USB flash drive, mp3

player

Smart Card A smart card

Office Devices Network device Router

Wireless controller Wi-Fi* adapter,

Bluetooth* adapter

IrDA Printer or camera using

infrared communications

Printer A device with printing

capabilities

Other Devices Content security Biometric reader

Personal Healthcare Heart rate monitor, blood

pressure cuffs, exercise
watch

Personal Data Assistant Some handheld

computers, smartphones

See Also
Blocking USB Devices: Overview
Enabling and Disabling USB Device Blocking

Launching Data Backup and Restore

Your hard drive stores your electronic information. To prevent losing data in a
hard drive crash, you should back up your data and store in a separate location.
The Intel(R) IT Director hard drive backup and restore feature uses Microsoft
Windows* Backup. It helps you back up data, which you can then store elsewhere.

The icon denotes that Microsoft Windows* Backup is ready to use on your
computer.

The icon denotes that Microsoft Windows* Backup is not supported on your
computer.
For more details, see Configuring Data Backup and Restore Requirements.
To enable data backup and restore on a computer:

18
 Configuring Your Computer

1. From Intel(R) IT Director on the computer, go to Local Setup > Data

and System Protection > Data Backup and Restore.
2. Click the Launch button to launch Windows* Backup.

NOTE
Intel(R) IT Director only monitors whether or not you have configured a
data backup application. It does not monitor the actual configuration of that
application.

See Also
Monitoring Your Network: Overview
Configuring Data Backup and Restore Requirements

Configuring the Software Health Monitor - Advanced Mode

You can only configure the Software Health Monitor on computers with Intel(R)
Active Management Technology or Intel(R) Standard Manageability. The Software
Health Monitor-Advanced Mode monitors whether important software is running
properly.
To set the Software Health Monitor for your local computer:
1. From the Local Setup tab of Intel(R) IT Director, go to Data and System
Protection.
2. In the Software Health Monitor - Advanced Mode settings, you have
two options:
• Monitor if Intel(R) IT Director service in Advanced Mode
• Monitor if Intel(R) IT Director service and the following
security software in Advanced Mode: If you choose this option,
you can then select which specific software to monitor. Including:
o Firewall
o Anti-Virus software
o Anti-spyware software
Unseleted security software will be monitored in Basic Mode if they
have been selected in Preferences > Network Monitoring
Preferences > Software Health Monitor Settings - Basic Mode.

NOTE
If you set the network Software Health Monitor Settings - Basic Mode from
the Preferences tab, those requirements override the Software Health
Monitor-Advanced Mode settings, which you set from the Local Setup tab.

See Also
Configuring Software Health Monitor Settings - Basic Mode
About the Manageability Capability

19
Intel(R) IT Director User's Guide

Setting up the Manageability Capability

Performance and Diagnosis

Configuring the Power-on Monitor
The Power-on Monitor tracks when computers in your network are turned on. This
feature helps you monitor both energy usage and computer usage.

NOTE
When a computer is in a sleep state such as standby or hibernate, Intel(R) IT
Director considers it to be powered off.

The Power-on Monitor does not physically limit computer usage. Instead, it tracks
computer usage, and records a violation when a computer is powered on for more
than one hour outside of office hours in a given day. Intel(R) IT Director does not
send any violation for a computer turned on during office hours. You can set the
office hours for the Power-on Monitor.
For example:
You set the office hours to be Monday-Friday, 8:00 a.m. to 8:00 p.m. If the
computer is on from 9:00 a.m. to 7:00 p.m. on Tuesday, no violation is recorded.
However, if the computer is on from 6:00 a.m. to 7:01 a.m. Wednesday morning,
a violation is recorded.

NOTE

The icon denotes that the Power-on Monitor has stopped working.

The icon denotes one of the following:

• The Power-on Monitor has stopped working

• A violation is recorded

To set the office hours for the Power-on Monitor for a computer:
1. From Intel(R) IT Director on the computer, go to Local Setup >
Performance and Diagnosis > Power-on Monitor.
2. Select Monitor system power usage and notify me if the system is
on outside of office hours option.
3. Select the days and hours to count as office hours.
4. Click Apply.
See the power-on statistics and violation messages in the System Details page.

See Also
System Details
Configuring Your Computer: Overview
Monitoring Your Network: Overview

20
Monitoring Your Network
Monitoring Your Network: Overview
Intel(R) IT Director enables you to monitor status, statistics and warning
messages for client computers on your network. You monitor computers on your
network from the Dashboard tab.
On top of the Dashboard tab, the Computer Asset Report section shows all
computers in two rows:
• The first row includes computers to which Intel(R) IT Director has finished
trying to connect. If Intel(R) IT Director failed to connect, it shows a
picture of the computer with the icon on top of it. See Troubleshooting
for possible reasons.
• The second row includes computers to which Intel(R) IT Director is trying
to connect. Once Intel(R) IT Director connects to those computers, they
move to the first row.
The Dashboard page monitors the following features:
• Computer Asset Report
o Hardware and Software Assets
• Data and System Protection
o USB Blocking
o Data Backup and Restore
o Software Health Monitor
• performance and Diagnosis
o Power-on Monitor
o Hard Drive Free Space
The Dashboard tab can display the following icons in feature heading bars:

• denotes Intel(R) IT Director has recorded violations for the feature.

• denotes all computers comply with the requirements for the feature.

• denotes Intel(R) IT Director has warnings in the network, e.g. the

feature is present, but has not been configured, has prevented prohibited
usage, or has been changed or disabled.

• denotes Intel(R) IT Director does not detect any computer supporting

this feature.
When you expand a section, you see a list of all computers with warnings or
violations for that section. If you click on a computer from that list, the System
Details page opens with details about that computer.
To see details about the hardware and software assets on a computer, mouse
over the icon of that computer from anywhere in the Dashboard tab.

21
Intel(R) IT Director User's Guide

NOTE
To configure requirements that apply to all computers on your network, go to
Preferences > Network Monitoring Preferences. To configure monitoring
and protection specific to a single computer, go to the Local Setup tab on
Intel(R) IT Director at that computer.

See Also
Violations and Warnings
Network Monitoring Preferences: Overview
Configuring Your Computer: Overview
Blocking USB Devices: Overview
Enabling Data Backup and Restore
Configuring Hard Drive Free Space Requirements
Configuring Software Health Monitor - Basic Mode
Configuring the Power-on Monitor

Computers without Intel(R) IT Director

For Intel(R) IT Director to monitor a computer, remote queries must be
configured on that computer. For more details, see the Getting Started Guide.
On computers that do not have Intel(R) IT Director installed, you can monitor:
• Software health monitor settings - basic mode
• Free hard drive space
• Hardware and software assets
You monitor computers without Intel(R) IT Director in the same way as you
monitor computers with Intel(R) IT Director.

See Also
Monitoring Your Network: Overview
Getting Started Guide

Hardware and Software Assets Monitor

Intel(R) IT Director monitors the hardware and software assets of computers on
your network. You can see the list of hardware and software assets in two ways:
• By mousing over the icon of a computer from anywhere in the Dashboard
tab.
• From System Details > Computer Asset Report > Hardware and
Software Assets.
Intel(R) IT Director monitors the following information about hardware and
software assets for each computer:
• ITD ID
• Computer System (manufacturer and model number)
• Processor

22
 Monitoring Your Network

• Operating system
• For computers with manageability capability:
o Manageability (manageability type)
o Memory
o Hard drive
o Battery

See Also
Monitoring Your Network: Overview
System Details

System Details Page

When you click a computer icon on the Dashboard page, the System Details
page opens with the details of the computer you selected.
The System Details page shows all violations and warnings Intel(R) IT Director
has recorded for computers on your network. Once you acknowledge seeing a
message, that message no longer appears in the list of violation and warning
messages.
The System Details page shows the details of the computer for the following
features:
• Computer Asset Report
o Hardware and Software Assets
• Data and System Protection
o USB Blocking
o Data Backup and Restore
o Software Health Monitor
• performance and Diagnosis
o Power-on Monitor
o Hard Drive Free Space

See Also
Monitoring Your Network: Overview
Configuring Your Network: Overview
Violations and Warnings

Software Health Monitor

Intel(R) IT Director monitors whether the following important software is installed
and running on network computers:
• Intel(R) IT Director Service
• Microsoft Windows Automatic Updates
• Firewall

23
Intel(R) IT Director User's Guide

• Anti-virus software
• Anti-spyware software
To see the status of this software, go to Dashboard > Data and System
Protection > Software Health Monitor, and click on a computer to see the
System Details for that computer.
The Software Health Monitor section in System Details page includes two columns
for each application. The left column shows the type of software, and the right
column shows the status, which can be OK, Warning, or Violation.

See Also
Configuring the Software Health Monitor - Basic Mode
Configuring the Software Health Monitor - Advanced Mode
Violations and Warnings

Violations and Warnings

In Dashboard page, Intel(R) IT Director shows the status of each feature. Here
are the status definitions:

Symbol Definition
The feature is not present on the
Not Present
system.

The feature is present, and has one of

Warning
these warnings:
• The feature has not been
configured.
• The feature has prevented
prohibited usage.
• Configuration of the feature
has been changed or disabled.

The icon denotes one of these

Violation
violations:
• The feature is present, but a
violation has occurred.
• The feature has stopped
working.

The feature is working normally.

Normal

See Also
Monitoring Your Network: Overview
System Details Page

24
 Monitoring Your Network

Warning Messages

Warning Messages
Warning messages are displayed in the System Details Page. Once you
acknowledge a warning message on the System Details page, the message is no
longer displayed.

Feature Violations and Warnings

USB Blocking Violation: USB Blocking stopped
working.
Warnings:
• A blocked USB device was
connected.
• USB Blocking has not been
configured
• Configuration of the feature
has been changed or disabled

Data Backup and Restore Violation: No successful backup

performed during the last
seven days.

Note

This violation only appears if you

have configured Data Backup and
Restore Settings.

Software Health Monitor Violation: The monitored security

software is not running, or at least
one of them (firewall, anti-virus, anti-
spyware, Windows automatic
updates) is disabled
Warning: Intel® vPro™ technology or
Intel(R) Standard Manageability is not
configured, spyware/virus definitions
are out of date, or Windows*
automatic updates is not configured.

Power-on Monitor Violation:

• A computer was powered on
for more than one hour outside
of office hours in a given day.
• The Power-on Monitor stopped

25
Intel(R) IT Director User's Guide

working.
Warning: The Power-on Monitor has
not been configured, or the
configuration has been disabled or
changed.

See Also
System Details Page
Violations and Warnings

26
Troubleshooting
Troubleshooting: General
Problem Causes and Possible
Solutions
Intel(R) IT Director fails to monitor a Several causes are possible:
client computer on your network.
• The IP address is from a
system not running Microsoft
Windows* OS, such as a
printer or router. You can only
monitor systems with Microsoft
Windows* OS.
• The client computer must be
configured to support remote
queries. For more details, see
the Getting Started Guide.
• Intel(R) IT Director can
monitor up to 25 client
computers. Make sure you
have 25 or fewer computers
on your network.
• For security reasons, the
system times must be within 5
minutes of each other. Verify
that the system time on the
client computer is
synchronized with the system
time on the monitor computer.
• A firewall on the client
computer may be blocking
remote queries. Configure the
firewall to allow remote
queries. Here are instructions
for the firewalls:
• Norton Internet
Security*
• McAfee Security
Center*
• Kaspersky Internet
Security*
• Trend Micro Internet
Security Pro*

27
Intel(R) IT Director User's Guide

• KV Antivirus Software*
• Rising Internet
Security*

You already set the USB devices to USB blocking may be disabled on the
block on a client computer, but those client computer. To enable USB
devices are not blocked. blocking, see Enabling and Disabling
USB Device Blocking.

You cannot access the Local Setup Multiple causes are possible:
tab. • The Local Setup tab may be
disabled. For more
information, see Disabling My
Computer Settings.
• You may not have permission
to access the Local Setup tab.
For more information, see
Setting User Privileges.

You cannot access the Dashboard You may not have permission to
tab. access the Dashboard tab. For more
information, see Setting User
Privileges.

A new USB device is blocked, even If USB Blocking is enabled and you
though it is of an unblocked device connect a device type that Intel(R) IT
type. Director cannot detect, the device is
automatically blocked. To unblock the
device:
1. Disable USB Blocking
2. Install the drivers for the
device
3. Verify that the type of device
you want to use is not blocked.
You can now enable USB Blocking,
while still using your USB device.

Intel(R) IT Director does not work Intel(R) IT Director adds ports to the
correctly in a network that uses Windows* Firewall local programs
Microsoft Windows* Small Business exceptions list. If you have Microsoft
Server (SBS). Windows* Small Business Server
(SBS) 2003 or 2008, your domain
group policy may disable the ports
added by Intel(R) IT Director. See
Configuring Microsoft Windows* Small

28
 Troubleshooting

Business Server.

On a system using Windows* SBS In the default Windows* SBS 2003

2003, entering the wrong user name setting, users are locked out for 10
or password prevents Intel(R) IT minutes after entering an incorrect
Director from monitoring other user name or password. Configure
computers on the network. Windows* SBS 2003 as follows:
1. Go to Start > Run... and type
mmc to open the Microsoft*
Management Console.
2. On the File menu, click
Add/Remove Snap-in.
3. Click Add.
4. In the Available Snap-ins
list, click Group Policy
Object Editor and then click
Add.
5. In the Select Group Policy
Object dialog box, click
Browse and find the relevant
policy to edit:
• For Windows XP* OS:
Small Business
Server Lockout policy
• For Windows Vista* /
Windows 7* OS: Small
Business Server
Windows Vista Policy
6. Click Finish, click Close, and
then click OK. Group Policy
Object Editor opens the Group
Policy object for you to edit.
7. Go to Computer
Configuration > Windows
Settings > Security Settings
> Account Policies >
Account Lockout Policy >
Account lockout threshold
8. Define the policy as 0 invalid
logon attempts.
You will no longer be locked
out after entering an incorrect
user name or password.

29
Intel(R) IT Director User's Guide

9. Force the Group Policy settings

to be applied to the client
computers by one of the
following:
• Restart the client
computer
• From a command
prompt with elevated
privileges on the client
computer, run
gpupdate /force.

The first time you try launching Verify that your computer has a
Intel(R) IT Director, launch is working internet connection.
delayed.

Intel(R) IT Director is unable to Possible causes:

monitor a client computer on which
• The client computer has not
Intel(R) IT Director is not installed.
been configured. For
configuration instructions, see
the Getting Started Guide.
• Even after you configure the
client computer, Remote
Windows Management
Instrumentation* (WMI) may
be still blocked. Reboot the
client computer.

A computer with Intel(R) IT Director The Intel(R) IT Director service may

does not monitor itself. not have started properly. Restart the
service, as follows:
• Go to Start > Control Panel
> Administrative Tools >
Services.
• From the list of services, select
Intel(R) IT Director.
• Click Restart the Service.

For more information, go to the Intel(R) IT Director Expert Center website:

http://communities.intel.com/docs/DOC-2675

Troubleshooting: Manageability Capability

Problem Causes and Possible Solutions
Manageability setup failed Verify that a computer with Intel(R) IT Director
because Intel(R) IT Director is connected. If it is, failure to find the other

30
 Troubleshooting

did not detect another computer could have one of the following
computer with Intel(R) IT causes:
Director on the network. • A firewall is blocking communication
with the other computer.
• The date or time on the two computers
is not synchronized.
• This computer did not have the correct
user name or password to communicate
with the other computer. The Intel(R) IT
Director Remote Monitoring Account
user name and password must be the
same on all computers.
• The Intel(R) IT Director service is not
running on the other computer.
• The other computer is running a
previous version of Intel(R) IT Director.

There are not enough Intel(R) vPr(TM) technology or Intel(R)

resources to create the Standard Manageability supports up to 16
Intel(R) vPro(TM)Technology watchdogs. Intel(R) IT Director will create 4
watchdogs for Intel(R) IT watchdogs to support the Software Health
Director. Monitor feature. If there are not enough
resources to create the watchdogs, the feature
is not supported.

The files for manageability Your USB drive may not be supported. For a
setup cannot be generated list of supported and unsupported USB drives,
on the USB drive. see:
http://communities.intel.com/docs/DOC-
2675#USB_Provisioning

Your computer supports Your system may not be configured correctly.

manageability capability, but For more, see Prerequisites for the
Intel(R) IT Director does not Manageability Capability.
detect Intel(R) vPro(TM)
technology or Intel(R)
Standard Manageability.

You cannot find the See Retrieving the Manageability Admin

manageability admin Password.
password.

When you need to un- Un-provision Intel(R) vPro(TM) technology or

provision Intel(R) vPro(TM) Intel(R) Standard Manageability requires a
technology or Intel(R) reboot. Follow the steps:

31
Intel(R) IT Director User's Guide

Standard Manageability 1. Save and close all open files and reboot
the system.
2. During reboot, screen will appear, press
CTRL-P to enter Intel(R) MEBx screen.

3. There are two scenarios for different

manageability capability provided on
your system:
• Scenario 1: Select Intel(R) AMT (or
Intel(R) Standard Manageability)
Configuration > Un-provision > Full
Unprovision, press Enter.
• Scenario 2: Select Intel(R) ME
General Settings > Unconfigure
Network Access, press Enter. On the
confirmation screen, select Y, then
select Full Unprovision, press Enter.
4. System will automatically start un-
provisioning process. Once finished, exit
Intel(R) MEBx to reboot your system to
OS.

Note

For the scenario 2 in step 3, after un-

provisioning, the Manageability Admin
password is not changed.

If you have forgotten your Manageability

Admin password, you can un-provision as
follows to set your password to the default:

1. Enter BIOS, go to Advanced >

AMT Configuration >
Unconfigure AMT/ME.

2. Select Enabled, press F10 to save

and exit.

3. System displays "Found unconfigure

of Intel(R) ME, Continue with
unconfiguration", click Y to
continue.

32
 Troubleshooting

4. System will automatically start un-

provisioning process. Once finished,
the Manageability Admin password
is set to the default password
"admin".

Configuring Norton Internet Security*

Configuring Norton Internet Security* on a client computer enables Intel(R) IT
Director to remotely monitor that computer.

To configure Norton Internet Security 2009* to enable remote monitoring:

1. Open the Norton Internet Security application.
2. Under Internet, turn on Smart Firewall. Next to Internet, click
Settings.

For all computers with Intel(R) IT Director installed:

1. The Internet Settings page opens. At the bottom, go to Smart Firewall >
Program Control, and click Configure[+].
2. The Program Control page opens. Click Add. Select the file
itdirector.exe.

3. When the dialog asks What do you want to do?, select Allow.
4. Repeat steps 4 and 5 for the itdirectorconfig.exe,
itdirectorservice.exe, and amtprovisiontool.exe files.

5. If your system is Notebook Computer with Intel(R) AMT or Intel(R)

Standard Manageability, repeat steps 2 and 3 to add Intel®
Management and Security Application Local Management Service
(LMS.exe) into program exception. You can find LMS.exe in the
installation folder of the Intel® MEI interface, typically it is located in
c:\program files\intel\Intel® Management Engine Components\LMS\.

6. From the bottom of the Internet Settings page, go to Smart Firewall >
Advanced Settings, and click Configure[+].
7. In the Advanced Settings page, go to General Rules > Configure [+].
8. The General Rules page opens. At the bottom, click Add. Follow the Add
Rules wizard:
• For Do you want to allow, block or monitor a connection,
select Allow, click Next
• For What type of connection do you want to allow, select
Connection to and from other computers, click Next
• For What computers or sites do you want to allow access to,
select Any Computer, click Next

33
Intel(R) IT Director User's Guide

8. For The protocol you want to allow, select TCP, click Next
9. Select Only communications that match all types and ports listed
below, and click Add to add a port. Set as follows:
• Under Filter by:, select Individually specified ports.
• Under Locality:, select Local.
• For the port number, enter 17000.
10. Click OK to return to the Add Rule page. Click Next. On the page with
options for When a connection matches a rule, click Next without
changing the settings.
11. Set the name as ISBNHUPort(17000) and click Finish. The port is now
enabled.
12. In the Add Rules wizard, repeat Step 7 (a-c).
13. For The protocol you want to allow, select TCP, click Next
14. Select Only communications that match all types and ports listed
below, and click Add to add a port. Set as follows:
• Under Filter by:, select Individually specified ports.
• Under Locality:, select Local.
• For the port number, enter 135.
15. Click OK to return to the Add Rule page. Click Next. On the page with
options for When a connection matches a rule, click Next without
changing the settings.
16. Set the name as Remote Procedure Calls (RPC) Port(135) and click
Finish.
17. In the Add Rules wizard, repeat Step 9 (a-c).
18. For The protocol you want to allow, select ICMP.
19. Under Filter by:, select Known commands from list. Select command 8,
named echo-req.
20. Click OK to return to the Add Rule page. Click Next. On the page with
options for When a connection matches a rule, click Next without
changing the settings.
21. Set the name as HVICMP-Incoming(echo request) and click Finish.

22. The new rules are added at the bottom of the General Rules list. Select
the rules and click Move up to move them to the top of the General
Rules list.
23. For Intel(R) IT Director to monitor the computer, restart the computer.

For all computers without Intel(R) IT Director installed:

1. The Internet Settings page opens. At the bottom, go to Smart Firewall >
Advanced Settings, and click on Configure[+].

34
 Troubleshooting

2. In the Advanced Settings page, go to General Rules > Configure [+].

3. Set rule for HVICMP-Incoming(echo request):
a. In the General Rules page, at the bottom, click Add. Follow the
Add Rules wizard:
• For Do you want to allow, block or monitor a connection,
select Allow, click Next
• For What type of connection do you want to allow,
select Connection to and from other computers, click
Next
• For What computers or sites do you want to allow
access to, select Any Computer, click Next
b. For The protocol you want to allow, select ICMP.
c. For What types of communication, or ports, do you want to
allow, select Only communications that match all types and
ports listed below.
d. Click Add.
e. Under Filter by, select Known commands from list. Select
command 8, named echo-req.
f. Click OK to return to the Add Rules page. Click Next.
g. Set the name as HVICMP-Incoming(echo request). Click Next.

h. Check the newly added rule information, click Finish.

4. Set rule for Remote Procedure Calls (RPC) Port (135):
a. In the General Rules page, at the bottom, click Add. Follow the
Add Rules wizard.
• For Do you want to allow, block or monitor a
connection, select Allow, click Next
• For What type of connection do you want to allow,
select Connection to and from other computers, click
Next
• For What computers or sites do you want to allow
access to, select Any Computer, click Next
b. For The protocol you want to allow, select TCP.
c. For What types of communication , or ports, do you want to
allow, select Only communications that match all types and
ports listed below.
d. Click Add.
e. Under Filter by, select Individually specified ports. Under
Locality, select Local. For the port number, enter 135.
f. Click OK to return to the Add Rules page. Click Next.

35
Intel(R) IT Director User's Guide

g. On the page with options When a connection matches a rule,

click Next without changing the settings.
h. Set the name as Remote Procedure Calls (RPC) Port(135), click
Finish.
5. The new rules are added at the bottom of the General Rules list. Select
the rules and click Move up to move them to the top of the General Rules
list.
6. For Intel(R) IT Director to monitor the computer, restart the computer.

Configuring McAfee Security Center*

Configuring McAfee Security Center* on a client computer enables Intel(R) IT
Director to remotely monitor that computer.

To configure McAfee Security Center 2009* to enable remote monitoring:

1. Right click the McAfee Security Center icon to open the menu.
2. Click Common Tasks > Home.
The Home page opens.
3. Click Internet & Network > Configure. The Internet & Network
Configuration page opens.
4. Set the Internet & Network Configuration page as follows:
a. Under Firewall protection is enabled, select On.
b. Under Firewall protection is enabled, click Advanced... The
Firewall Settings page opens.
5. Click Security Level, the Security Level page opens. Make sure Current
Level is set to Automatic, and Security Settings > Allow ICMP ping
requests is selected.

For all computers with Intel(R) IT Director installed:

1. Click Program Permissions. The Program Permissions page opens.
2. For systems with Intel(R) IT Director only: Click Add Allowed Program
and add the files itdirector.exe, itdirectorconfig.exe,
itdirectorservice.exe, and amtprovisiontool.exe to the Program
Permissions list.
3. If your system is Notebook Computer with Intel(R) AMT or Intel(R)
Standard Manageability, repeat step 2 to add Intel® Management and
Security Application Local Management Service (LMS.exe) to the
Program Permissions list. You can find LMS.exe in the installation folder
of the Intel® MEI interface, typically it is located in c:\program
files\intel\Intel® Management Engine Components\LMS\.

36
 Troubleshooting

4. Click OK.
5. Click System Services. The System Services page opens.
6. Click Add, to add a system service port. Set the System Service Port as
follows:
a. For the name, enter ISBNHUPort(TCP:17000).
b. For Local TCP/IP Port(s), enter 17000.
c. For Open port to a computer or network that is, select
Trusted, Standard, and Public
d. For Description, enter Intel(R) IT Director used TCP port.
e. Click OK.
7. Click OK.

For all computers without Intel(R) IT Director installed:

1. Click System Services. The System Services page opens.
2. Click Add, to add a system service port.
3. From the System Services list, select Remote Procedure Calls (RPC)
port 135.
4. Click OK.

Configuring Kaspersky Internet Security*

To configure Kaspersky Internet Security 2009* for use with Intel(R) IT Director:

For all computers with Intel(R) IT Director installed:

1. Open the Kaspersky Internet Security application.
2. Under Protection on the left, click System Security.
3. From the box in the middle, click Settings.
4. The Rules Settings page opens. Click Trusted, and click Add Group...
from the bottom of the screen. Enter INTEL as the group name.
5. After adding the group INTEL, you return to the Rules Settings page.
Select INTEL, and click Add....
6. Navigate to c:\Program Files\Intel\IntelITDirector, select
itdirector.exe, itdirectorconfig.exe, itdirectorservice.exe, and
amtprovisiontool.exe, and click Open.

7. Click OK.
8. If your system is Notebook Computer with Intel(R) AMT or Intel(R)
Standard Manageability, repeat step 6 and 7 to add Intel® Management
and Security Application Local Management Service (LMS.exe). You

37
Intel(R) IT Director User's Guide

can find LMS.exe in the installation folder of the Intel® MEI interface,
typically it is located in c:\program files\intel\Intel® Management
Engine Components\LMS\.

For all computers without Intel(R) IT Director installed:

1. Open the Kaspersky Internet Security application.
2. Under Protection on the left, click System Security.
3. From the box in the middle, click Settings.
4. The Rules Settings page opens. Click on the Network Packets tab.
5. At the bottom of the Network Packets tab, click Add.
6. Under Action, select Allow. Under Network Service, click Add. For the
Network Service, enter:
• Name: ITD_DCOM_135
• Direction: Inbound/Outbound
• Protocol: TCP
• Remote ports: (leave empty)
• Local ports: 135

7. Click OK.

Configuring Trend Micro Internet Security Pro*

Configuring Trend Micro Internet Security Pro* on a client computer enables
Intel(R) IT Director to remotely monitor that computer.

To configure Trend Micro Internet Security Pro 2009* to enable remote

monitoring:
1. Double-click the Trend Micro Internet Security Pro icon to open the
application configuration window.
2. Click My Computer > Personal Firewall Controls > Personal
Firewalls.
3. Under Personal Firewall, click Settings..
4. Set the Personal Firewall Settings as follows:
a. Check Activate the Personal Firewall.
b. Click Change Profile, select Office Network.
c. Click Activate selected profile.
d. Click OK.
e. Under Security Level of Firewall Profile, select Medium.
f. Click OK.
5. Under Security Level of Firewall Profile, click Advanced Settings.

38
 Troubleshooting

For all computers with Intel(R) IT Director installed:

1. Click Program Control tab. If itdirector.exe is not listed, click Add.

2. Set the Personal Firewall Profiles page as follows:

• Enter the Description as IntelITDirector.

• For Target, select Select a Program. Click Browse to select the

file itdirector.exe. By default, it installs to: C:\Program
Files\Intel\IntelITDirector.

• For Settings, select Simple.

• For Firewall Response, select Allow.
3. Repeat steps 2 for files amtprovisiontool.exe, itdirectorconfig.exe
and itdirectorservice.exe.

4. If your system is Notebook Computer with Intel(R) AMT or Intel(R)

Standard Manageability, repeat step 2 to add the Intel® Management
and Security Application Local Management Service (LMS.exe). You
can find LMS.exe in the installation folder of the Intel® MEI interface,
typically it is located in c:\program files\intel\Intel® Management
Engine Components\LMS\.

5. For Security Level of Firewall Profile, click Advanced Settings.

6. Click Network Protocol Control. Click Add.
7. Set the Personal Firewall Profiles page as follows:
• Enter the Description as ICMP-Outgoing.

• Set the Connection as Outgoing.

• For Response, select Allow.
• For Protocol, select ICMP (IPv4).
• For Type number, select All Types.
• For Types, set IP address range (IPv4).
• In the From and To fields, enter a range of IP addresses that
covers all computers in the network.
Click OK.
8. As in step 10, click Network Protocol Control. Click Add.
9. Set the Personal Firewall Profiles page as follows:
• Enter the Description as ISBNHUPort-Incoming.

• Set the Connection as Incoming.

• For Response, select Allow.
• For Protocol, select TCP.
• For Port, select Specific port(s) and enter 17000.
• For Types, set IP address range (IPv4).

39
Intel(R) IT Director User's Guide

• In the From and To fields, enter a range of IP addresses that

covers all computers in the network.
Click OK.
10. As in step 10, click Network Protocol Control. Click Add.
11. Set the Personal Firewall Profiles page as follows:
• Enter the Description as ICMP-Incoming.

• Set the Connection as Incoming.

• For Response, select Allow.
• For Protocol, select ICMP (IPv4).
• For Type number, select All Types.
• For Types, set IP address range (IPv4).
• In the From and To fields, enter a range of IP addresses that
covers all computers in the network.
Click OK.

For all computers without Intel(R) IT Director installed:

1. Click Network Protocol Control tab. Click Add.
2. Set the Personal Firewall Profiles page as follows:
• Enter the Description as ICMP-Incoming.

• Set the Connection as Incoming.

• For Response, select Allow.
• For Protocol, select ICMP (IPv4).
• For Type number, select All Types.
• For Types, set IP address range (IPv4).
• In the From and To fields, enter a range of IP addresses that
covers all computers in the network.
Click OK.

Configuring KV Antivirus Software*

Configuring KV Antivirus Software* on a client computer enables Intel(R) IT
Director to remotely monitor that computer.

To configure KV Antivirus Software 2009* to enable remote monitoring:

1. Double-click the KV Antivirus Software* icon to open the application.
2. Click Settings.
3. For all computers, in the left pane, go to Parameter Setting > IP Rules,
in the right pane, uncheck the box next to Block ICMP Intrusion.

For all computers with Intel(R) IT Director installed:

40
 Troubleshooting

1. In the left pane, go to Parameter Setting > Network Apps.

2. In the right pane, click Add to add the following applications:
• Intel® IT Director Provision Wizard (AMTProvisionTool.exe)
• Intel® IT Director (itdirector.exe)
• Intel® IT Director Configuration Tool (itdirectorconfig.exe)
• Intel® IT Director Service (itdirectorservice.exe)
3. If your system is Notebook Computer with Intel(R) AMT or Intel(R)
Standard Manageability, repeat step 2 to add Intel® Management and
Security Application Local Management Service (LMS.exe). You can
find LMS.exe in the installation folder of the Intel® MEI interface, typically
it is located in c:\program files\intel\Intel® Management Engine
Components\LMS\.

4. For Intel(R) IT Director to monitor the computer, restart the computer.

For all computers without Intel(R) IT Director installed:

1. In the left pane, go to Parameter Setting > IP Rules.
2. In the right pane, click Add to add a new rule ITD RPC 135 as following:
• Name: ITD RPC 135
• Remote IP: Arbitrary Address
• Network Condition: Send Packets/Receive Packets/When
Connecting/Connect Request
• Protocol: TCP
• Local Port: Specified Port: 135
• Remote Port: Arbitrary Port
• Rule Object: All Applications
• Match all conditions: permit
3. For Intel(R) IT Director to monitor the computer, restart the computer.

Configuring Rising Internet Security*

Configuring Rising Internet Security* on a client computer enables Intel(R) IT
Director to remotely monitor that computer.

To configure Rising Internet Security 2009* to enable remote monitoring:

1. Double-click the Rising Internet Security* icon to open the application.
2. Go to Defense > Application Network Monitor > IP Package Filter,
click Enable to enable IP package filter.
3. Click Settings, the Settings page opens, in the left pane, go to Network
Monitor > Rules Setup > IP Rules.

41
Intel(R) IT Director User's Guide

4. In the right pane, check the box next to Allow all ICMP. Double click
Allow all ICMP to set up the rule.
5. Uncheck the box next to Deny inbound ping.
6. Click Apply.

For all computers with Intel(R) IT Director installed:

1. Go to NetControl > App Rules.
2. Click Add to add the following applications:
• Intel® IT Director Provision Wizard (AMTProvisionTool.exe)
• Intel® IT Director (itdirector.exe)
• Intel® IT Director Configuration Tool (itdirectorconfig.exe)
• Intel® IT Director Service (itdirectorservice.exe)
3. If your system is Notebook Computer with Intel(R) AMT or Intel(R)
Standard Manageability, repeat step 2 to add Intel® Management and
Security Application Local Management Service (LMS.exe). You can
find LMS.exe in the installation folder of the Intel® MEI interface, typically
it is located in c:\program files\intel\Intel® Management Engine
Components\LMS\.

For all computers without Intel(R) IT Director installed:

1. Go to Defense > Application Network Monitor > IP Package Filter >
Settings.
2. In the Settings page, go to Net Monitor > Rule Setup > IP Rules.
3. In the right pane, click Add to add a new ITD RPC 135 rule.
4. Enter the following general information, click Next.
• For Rule Name, enter ITD RPC 135
• For Apply Rule, select All IP packages
• For How to deal with IP packet that triggered the rule, select
Allow data packets to pass
5. Enter the following address information, click Next.
• For Set Local Computer Address, select Any Address
• For Set Remote Computer address, select Any Address
6. Enter the following protocol and port information, click Next.
• For Protocol, select TCP
• For Remote Port, select Any Port
• For Local Port, select Specific Port, enter the port number 135
7. Click Finish to complete IP rules setup.

42
 Troubleshooting

8. In the Settings page, uncheck the box next to Deny TCP 135,445 if it is
checked.
9. Click Apply.

Configuring Microsoft Windows* Small Business Server

For Intel(R) IT Director to work correctly with Windows* Small Business Server
(SBS), you must configure SBS on the client computer to enable local program
exceptions in Windows* Firewall.

To configure SBS 2003 on a client computer with Windows Xp* operating system,
and SBS 2008 on both Windows XP* / Windows Vista*/ Windows 7* operating
systems:
1. Go to Start > Administrative Tools > Server Management.
2. On the left of the Server Management window, click the home page icon.
Browse to Advanced Management > Group Policy Management >
Forest:YourDomainName > Domains > YourDomainName > Small
Business Server Windows Firewall YourServerName Policy
3. Click the Settings tab. Under Administrative Templates, go to
Network/Network Connections/Windows Firewall/Domain Profile.
4. Right click on Windows Firewall: Allow local program exception, and
click Edit.
5. In the Group Policy Object Editor window, browse to Small Business
Server Windows Firewall > Computer Configuration >
Administrative Templates > Network > Network Connections >
Windows Firewall > Domain Profile.
6. Under Domain Profile, double click Windows Firewall: Allow local
program exception. In the dialog box, select Enable, click Apply, and
click OK.
7. Force the Group Policy settings to be applied, in one of two ways:
• Restart the client computer.
• From a command prompt with elevated privileges, run gpupdate
/force.

To configure SBS 2003 on a client computer with Windows Vista* / Windows 7*

operating system:
Prerequisites:

Before starting configuration, the patch Update for Windows Small Business
Server 2003: Windows Vista and Outlook 2007 compatibility (KB 926505)
must be applied on Windows SBS 2003* to support client computers with

43
Intel(R) IT Director User's Guide

Windows Vista* / Windows 7* operating system. Click here to download the

update.

1. Go to Start > Administrative Tools > Server Management.

2. On the left of the Server Management window, click the home page icon.
Browse to Advanced Management > Group Policy Management >
Forest:YourDomainName > Domains > YourDomainName > Small
Business Server - Windows Vista policy
3. Right click Small Business Server Windows Vista policy and click Edit.
4. In the Group Policy Object Editor window, go to Small Business
Server - Windows Vista policy YourServerName Policy > Computer
Configuration > Administrative Templates > Network > Network
Connections > Windows Firewall > Domain Profile.
5. Under Domain Profile, double click Windows Firewall: Allow remote
administration exception. In the dialog box, select Enable, click Apply,
and click OK.
6. Force the Group Policy settings to be applied, in one of two ways:
• Restart the client computer.
• From a command prompt with elevated privileges, run gpupdate
/force.

44
Index
A P
Access........................................ 6 Permissions .................................6
Asset monitor ............................ 22 Power management .................... 20
B Power-on Monitor ....................... 20
Block USB device ....................... 15 Privileges ....................................6
C S
Configuration .............................. 3 Security .................................... 10
D Settings ......................................6
Data backup and restore ............. 18 Import ................................ 11
G Tab.......................................6
Getting started ............................ 2 Start up ......................................2
H Subnet........................................9
Hard drive free space ................. 10 System details ........................... 23
I T
Import settings.......................... 11 Troubleshooting ......................... 27
Internet security ........................ 10 U
M USB device ................................ 15
Monitoring ................................ 21 Blocking .............................. 15
Data backup and restore ....... 18 Enabling and Disabling........... 16
Free hard drive space............ 10 Types.................................. 17
Hardware and software asset . 22 User permissions..........................6
Power ................................. 20 User privileges .............................6
Security .............................. 10 V
USB device blocking.............. 15 Violation ................................... 24
N W
Network security........................ 10 Warning messages ..................... 24

45