291 Posts

August 21st, 2007 10:00

For most of the systems, to clear the Chassis Intrusion, go to BIOS setup (before you boot the OS). In the BIOS, there will be an option to acknowledge or clear the intrusion status and alert for the same as On/Off.
The exact wordings would depend on the BIOS for your system model.
 

August 21st, 2007 12:00

Thanks for the susgestion, but as allready stated this is happenning on clients that have had a RIS image downloaded on to them where I can confirm that the BIOS event log has been cleared, the setting appears to be stored within a file that has been pulled down from the original image.
 
From what I have gleamed from the forum it appears that these events are logged by WMI, but I don't understand where or how to access the log facility to clear these notifications.
 
I have seen a large amount of posts on this forum asking the exact same question without a definative answer, it would be great if someone would clear this up and post the answer as a sticky...

33 Posts

October 26th, 2007 22:00

There are multiple ways to take care of this:
1) Clear the intrusion state in the BIOS by using BIOS Setup (this alert is not based on BIOS logs, it is based onthe Intrusion state, so clearing the BIOS logs will not affect this alert).
2) Clear the intrusion state in the BIOS using OMCI (I can let you know how to do this if you want to know).
3) Turn off OMCI monitoring of Chassis Intrusion (I can let you know how to do this if you want to know).
4) Turn off the pop-up alert for Chassis Intrusion in OMCI (I can let you know how to do this if you want to know).
 
I scenarios 1 & 2, the alert will be cleared until the chassis is opened again.  In 3, OMCI will no longer check for Chassis Intrusions.  And in 4, OMCI will still log the alert to the NT Event log of the local system and will create a CIM_Indication for the alert, but it will not pop-up on the console.

October 30th, 2007 07:00

Hi atxjayhawk,
 
I would be great if you could post a response showing how to complete each of the 4 available options not just for me but for anyother users searching the thread.
 
Cheers

33 Posts

October 30th, 2007 12:00

Here we go:
1. Go into BIOS Setup by pressing 'F2' during POST and "clear" the chassis intrusion status in the BIOS.  It looks like this is in the "Security" section of the BIOS and is labeled "Intrusion Alert" in the workstation BIOSes I looked at.  You would need to "Acknowledge" the intrusion.  The exact setting is probably different depending on your system.  I think in some of the older systems this "clear" was part of the "Chassis Intrusion" setting in BIOS.
 
2. Here is a modified sample script from the OMCI 7.5 UG.  This has been modified to "clear" the chassis intrusion status:
'**********************************************************************
'*** Name: SampleChssisIntrusionClear.vbs
'*** Purpose: To clear the chassis intrusion status on a Dell OMCI client.
'*** Usage: cscript.exe //nologo SampleChassisIntrusionClear.vbs
'***
'*** This sample script is provided as an example only, and has not been
'*** tested, nor is warranted in any way by Dell; Dell disclaims any
'*** liability in connection therewith. Dell provides no technical
'*** support with regard to such scripting. For more information on WMI
'*** scripting, refer to applicable Microsoft documentation.
'**********************************************************************
Option Explicit
'*** Declare variables
Dim strNameSpace
Dim strComputerName
Dim strClassName
Dim strKeyValue
Dim objInstance
Dim strPropName
Dim strPropValue
'*** Check that the right executable was used to run the script
'*** and that all parameters were passed
If (LCase(Right(WScript.FullName, 11)) = "wscript.exe" ) Or _
    (Wscript.Arguments.Count < 1) Then
    Call Usage()
    WScript.Quit
End If
'*** Initialize variables
strNameSpace = "root/Dellomci"
strComputerName = WScript.Arguments(0)
strClassName = "Dell_SMBIOSSettings"
strKeyValue = "0"
strPropName = "ChassisIntrusionStatus"
'*** Retrieve the instance of Dell_SMBIOSSettings class (there should
'*** only be 1 instance).
Set objInstance = GetObject("WinMgmts:{impersonationLevel=impersonate}//" &_
    strComputerName & "/" & strNameSpace & ":" & strClassName & "=" &_
    Chr(34) & strKeyValue & Chr(34))
strPropValue = objInstance.Properties_.Item(strPropName).Value
'*** Set the value of ChassisIntrusionStatus to'5' ("Clear")
'*** Set the new value for the property and save the instance
objInstance.Properties_.Item(strPropName).Value = 5
objInstance.Put_
'*** If any errors occurred, let the user know
If Err.Number <> 0 Then
    WScript.Echo "An error occurred during the operation."
End If
'*** Sub used to display the correct usage of the script
Sub Usage()
Dim strMessage
strMessage = "incorrect syntax. You should run: " & vbCRLF & _
    "cscript.exe /nologo SampleChassisIntrusionClear.vbs "
WScript.Echo strMessage
End Sub
 
3. Change the above script in the following manner (excluding all the fancy naming of the script and comments in the script):
strClassName = "Dell_IndicationConfiguration"
strKeyValue = "Dell.OMCI.Events.ChassisIntrusion"
strPropName = "PollEnabled"
 
objInstance.Properties_.Item(strPropName).Value = "False"
4.  Change the original above script in the following manner (excluding all the fancy naming of the script and comments in the script):
strClassName = "Dell_IndicationStaticValues"
strKeyValue = "Dell.OMCI.Events.ChassisIntrusion"
strPropName = "MaxDisplayNotifications"
 
objInstance.Properties_.Item(strPropName).Value = 0
 
After running the script for 3 & 4, you should reboot the computer for the change to take effect.  You can also perform these actions in a CIM  browser such as wbemtest or CIM Studio.
 
Let me know if there are any questions or if the scripts do not come through well.

October 30th, 2007 13:00

Thanks atxjayhawk,
 
Thats great, I am sure that there will be plenty of people out there who will find this instrustion set useful, I'll give the vb script a run on one of my clients, and post the results, error encountered, etc.
 
Again great post...

33 Posts

November 9th, 2007 13:00

Did you have any results to share?

11 Posts

February 13th, 2012 13:00

is there a way of turning off alerting all together

No Events found!

Top