Initializing Agent Approved Lists Parent topic

Procedure

  1. Open a command prompt window with Windows administrator privileges.
  2. Navigate to the Trend Micro Safe Lock Intelligent Manager Safe Lock Remote Tasks Tool folder inside the installation folder using the cd command.
    For example, type the following command to reach the default location:
    cd /d "c:\Program Files\Trend Micro\Safe Lock Intelligent Manager\CmdTools\RemoteAgentTasksTool\"
  3. Log on the Safe Lock Intelligent Manager server by typing the following command:
    SLtasks.exe --logon
  4. Type your Safe Lock Intelligent Manager credentials.
    The CLI confirms a successful log on to the server.
    Important
    Important
    • The logged on account must have admin or Full Control privilege to send tasks to agents.
    • To reduce network and endpoint impact, Safe Lock Intelligent Manager queries target agents for their configurations and then sends only tasks it determines are needed.
  5. Generate a list of target agents. To limit the query to agents before or after a specific version, append --minversion and --maxversion to the command and type the agent version.
    • SLtasks.exe --query --minversion <agent_version>
    • SLtasks.exe --query --maxversion <agent_version>
    Important
    Important
    The <agent_version> must be in the form of x.x.xxxx. For example, 2.0.5000.
    The results of the query are saved in query_results.csv.
    Tip
    Tip
    Trend Micro recommends querying agent statuses before deploying any tasks. A warning message appears if the query results are out-of-date when attempting to deploy tasks.
  6. Perform the necessary tasks using the following syntax:
    SLtasks.exe <task_parameter>

    SLtasks Task Parameters

    Parameter
    Task
    --init
    Initialize the Approved List.
    --lockdown
    Turn Application Lockdown on.
    Tip
    Tip
    • To send tasks to a specific agent, append --targetPC to the command and type the computer name.
      For example:
      SLtasks.exe <task_parameter> --targetPC <computer_name>
    • To ensure efficiency when updating multiple agents, append --concurrentdownload to limit the number of agents allowed for downloading the patch or hotfix at the same time.
      For example:
      SLtasks.exe --applyupdate <update_files> --concurrentdownload 2
  7. Log off the Safe Lock Intelligent Manager server by typing the following command:
    SLtasks.exe --logoff
    The CLI confirms a successful log off from the server.