Release Notes and What's New

Release Notes can be found here.

Release Notes can be found here.

DSM actions within Ivanti Neurons

There are two DSM actions that you can now use within Ivanti Neurons—Restart DSM Client and Assign DSM Package. Once you link your on-premise DSM installation with your Ivanti Neurons instance, you can directly assign DSM packages within Ivanti Neurons and restart those clients. We plan to implement more DSM actions during upcoming DSM releases.

Two DSM Remote Control enhancements

•New notification for end users when a remote session takes place: During a DSM Remote Control session, the end user will see a dialog in the lower-right corner of the screen indicating an active session, with the option to cancel the session at any point.

•Ability to connect without end-user interaction: You can now connect to an endpoint without confirmation by the end user. This option is particularly helpful when connecting to server computers where a user is logged in, but is not in front of the screen to confirm the connection request. Within the DSMC, the same option as for Heat Remote Control can be used.

PowerShell output written in DSM installer log files

Whenever a PowerShell "write" command is executed, DSM now adds the related output in the DSM installer log. The installer log will also include any possible error outputs. This allows for quicker troubleshooting and makes it easier to use the output during the installation process.

Azure Windows 10/11 Multi-Session support

The DSM client agent can be installed on Azure Windows 10/11 Multi-Session systems. The basic inventory will identify those clients with the correct OS details. For a full list of DSM system requirements, see System Requirements in the Getting Started help.

Enhanced Microsoft Intune actions within the DSMC

We enhanced the Microsoft Intune connector to provide major Microsoft Intune actions directly within the DSMC. This feature allows you to reduce context switching and execute your tasks in the most efficient way. When creating AutoInsert rules, you can also filter on computers that have the DSM client agent installed by Intune. For details, see Microsoft Intune Integration.

Confirmation window when resetting a variable

The Reset variable option now receives the same confirmation window as the Reset all variables option. This reduces any undesired actions and keeps your configuration secure.

eScript "RegSearchFolder" command enhancment

The eScript command RegSearchFolder now supports the usage of an asterisk (*). The command can also be used on a Reg-Multi_SZ value. For details, see RegSearchFolder.

DSM eTray icon context menu opens on left mouse click

To streamline the end-user experience, the context menu of the eTray icon can be opened via a left mouse click. Users can also execute a "default action" by double-clicking the icon (by default, this opens the Software Shop, but the context menu is now configurable). For details, see Starting the Software Shop.

Release Notes can be found here.

Package Installs via the Command Line

Use a new command-line tool, InstallPackage.exe, to install one or more software packages on an end user's computer. Via the command line, you can also retrieve a log file containing the list of packages available for installation.

This feature is useful if you want an easy way for end users to install specific packages on their own computers as well. Simply provide a link or command on a user's desktop that they can directly execute whenever the software is needed or if one of a limited number of licenses becomes available.

As a prerequisite, a Shop Policy for the package must already exist. After executing the command, a Shop Policy Instance will be created and the software will be installed.

For details, see Command-line Package Installation.

DSM Remote Control Enhancement - Recover Agent Status after Network Connectivity Changes

If network connectivity changes (for example, because of a switch from WIFI to a wired network), the changes will automatically apply for the DSM Remote Control Services, which eliminates the need to restart the services manually.

DSM Remote Control Enhancement - Automatically Register New Settings

After modifying settings for DSM Remote Control within the DSM configuration (ICDB), the changes will automatically apply—no need to manually restart the DSM Remote Control Services any longer.

Microsoft Intune Connector

A new Microsoft Intune connector enables you to upload the current DSM agent to Microsoft Intune, where new endpoints will be automatically registered into DSM when end users start using their devices for the first time. Configure the Intune connector directly in the DSMC settings (ICDB).

You can easily identify client agents installed this way, as the following registry key will be set automatically: HKLM\SOFTWARE\netsupport\ netinstall\Intune.

For details, see Microsoft Intune Integration.

Release Notes can be found here.

Official Support of Windows Server 2022 and Windows 11

This version of DSM officially supports the new Microsoft operating systems Windows Server 2022 as a Client and Server OS (including BLS role) and Windows 11 as a Client and Server OS (without BLS role).

Further details can be found in the System Requirements of the Getting Started help.

Ivanti Neurons for Patch Intelligence Connector

Using the DSM Connector for Ivanti Neurons, you can see all patch details directly within Ivanti Neurons. This includes information like open and closed vulnerabilities (based on the DSM data sent to Ivanti Neurons), as well as additional details about all patches. This combines the functionality of Ivanti Neurons for Patch Intelligence with the collected environment data from DSM.

Azure Site Depot Support

DSM fully supports a site depot directly on an Azure storage. The current implementation relies on Azure files and allows the Distribution Service to distribute packages directly to the Azure Depot, as well as the client agent to stage packages directly from an Azure depot. The following KB article provides all the steps on how to set up an Azure Site Depot: How to configure an Azure Site Depot for DSM

New eScript Command "BitLockerSuspend"

This command enables a truly unattended software installation experience. If you request a reboot via the eScript, or if the software being installed requires a reboot, this command allows you to perform that action without requiring the end user to wait in front of their computer to enter a PIN during the reboot process. After adding the command to your script, you can decide on the number of reboots the BitLocker encryption should be suspended to give you maximum flexibility.

Release Notes can be found here.

Release Notes can be found here.

Remote Control

This Service Update introduces our new DSM Remote Control tool. The new DSM Remote Control Tool allows you to control clients inside as well as outside your environment. It provides file transfer capabilities as well as remote execution (elevated permissions). The traffic is always encrypted via an SSL certificate and the remote connection can be established via the DSMC, Browser or command line.

The installation provides a 45-day evaluation license for the new DSM Remote Control tool. Further details can be found in the following KB article: How to Configure DSM Remote Control

Release Notes can be found here.

UserVoice

UserVoice is the Ivanti platform for all your great Feature Requests. UserVoice can now be opened via DSMC > Ivanti on the web > UserVoice.

Here you can vote for existing ideas / feature requests, or create a new one. The more votes an entry has, the more likely it is to see the feature in one of the next DSM release.

PowerShell 7 support

Added the eScript command "RunPS7Script" to directly run existing PowerShell 7 scripts on the endpoints.

To execute the PowerShell7 Script successfully, the endpoint needs to have PowerShell 7 installed before the specific package is executed.

Xtraction Reporting

Provided predefined Xtraction Dashboards which query the DSM database to gather and display DSM related information concerning Patch Management, Policy state, and more.

The Xtraction website can now be opened via the DSMC > Tools > Xtraction Web.

Details on how to configure Xtraction to connect to the DSM DB can be found here:

https://forums.ivanti.com/s/article/How-to-connect-Xtraction-to-the-DSM-database

DSM Remote Control (BETA)

Newly designed Remote Control tool which will be developed to be used in two ways:

• Control only clients which are located in the local network.

• Control also external clients without a connection to the local network. This can be achieved by installing a Tunnel within a DMZ.

Note: This BETA version of DSM Remote might not include all planned functionality. We plan to provide the full functionality with Service Update 1 which will be available in 2021.

You will need to purchase a license to use DSM Remote Control after the BETA status has ended.

Line Numbers In eScript Editor

After enabling the Extended Script Editor in the Packaging Workbench, you are now able to see the line numbers which will improve the troubleshooting capability should a script fail on a specific line.

MSIX Support

Implemented a new MSIX Packaging Wizard to create a software package based on the new MSIX standard.

Details on how to use the MSIX functionality can be found here:

https://forums.ivanti.com/s/article/How-to-use-the-MSIX-packaging-functionality-implemented-in-DSM-2020-2

Improved encryption standard for passwords stored in the ICDB

Moving to RSA 2048 bit asymmetric key pairs and AES 256 bit symmetric key encryption algorithms to further improve the password security in the DSM environment.

Release Notes can be found here.

Windows 7 and Windows Server 2008 (R2) Extended Security Updates

Added the ability to use the Shavlik custom content. This allows you to use additional features in the APM environment, such as Microsoft Windows Extended Security Updates.

Advanced Patch Management Custom Patch Support

Added the ability to modify patch packages. This allows you to manually place installer files in an existing patch package and use the policies automatically created by APM.

Telemetry

You can now opt in to send anonymous diagnostic data to Ivanti in order to help us understand how DSM is being used, so we can shape updates and new features accordingly.

Added support for SQL Server 2019 (including Express)

New system roles for global rights

In the past, the global rights "Manage AutoInsert Rules", "Manage Roles", "Manage schema extensions" and "Manage variables" were only part of the supervisor role which is assigned on ORG.

There are now specific roles for each of those rights. These roles don't grant read permission to any object in the tree (like software library, software, OUs, groups, or computers), nor can they be assigned to a container or custom role. They can only be assigned on ORG .

In addition, for managing software shop categories, user-defined tasks and task groups, and user-defined HTML views, two additional system-wide rights have been added.

DSM now handles the different notations of SMBiosGuids used by hardware vendors properly

Ivanti DSM uses the initial MAC address and the SMBIOS GUID to identify computers. If you change the computer hardware, such as the motherboard or the network card, you can store the changed information automatically in the database.

To change the entries:

1. Change the hardware on your computer.

2. Turn on the computer.

3. Prevent the computer from performing a network boot.

3. When the computer runs a local boot, the installer detects the hardware changes and saves them in the database.

Added the ability to set working directory for RunAsEx or ExecuteEx commands

It's now possible to set the working directory for these commands without having to use batch or PowerShell scripts.

Added support for using SSL when using the SendSmtpMail command

Added support for SSL encryption and authentication when sending emails via SMTP (Infrastructure / SendSmtpMail command).

Added support for Windows Server 2019

The following support was added:

• DSM can now be installed on Windows Server 2019
• DSM can now handle OSD for Windows Server 2019
• DSM can now handle LDAP filters for Windows Server 2019
• DSM Software Library now includes Windows Server 2019 support
• APM now supports patching Windows Server 2019

AD-Import now runs as a long-running task

Added support for TLS 1.2

New "Protected by patents" links in the interface

A new "Protected by patents, see http://www.ivanti.com/patents" link is visible in the startup splash screen and and in the "About" dialog boxes.