Quantcast
Channel: Shavlik User Community : Popular Discussions - Ivanti Patch for Windows
Viewing all 2351 articles
Browse latest View live
↧

Any tips for trouble shooting machines with errors?

February 4, 2013, 4:38 pm
$
0
0

Hi,

I am using Protect for the first time and I am completeing some scans- most servers come back ok, but some have errors including; 

Error : 200 Machine not found

Error : 201 Machine not found due to probable network error

Error : 235 System not found or Netbios ports may be firewalled

Error : 808 no disks specified to mount

 

So far I have been working through these errors-  Ensuring machine is on, testing with firewall off, making sure I can telnet to machine from Protect server etc etc

 

but still some machines still cannot be scanned- does someone have a cheet sheet or something to help me with the basic trouble shooting steps?

I am sure I am just over looking something...

 

Also when would I use the agent?

 

Any help would be appreciated.

 

Cheers,

Jamie

↧
Search

Classic Shell 4.0.5

April 8, 2014, 8:12 am
$
0
0

After deploying the update for Classic Shell 4.0.5 (CSHELL-003(QCSHELL405) from April 3rd, the actual version of the installed program is 4.0.6.  The file downloaded is named ClassicShellSetup_4_0_5.exe, but when you check the properties/details, it shows 4.0.6.  After the patch installation, pperforming another patch scan gives the result that Classic Shell 4.0.2 is missing.  An asset scan shows the actual installed version of 4.0.6.

 

I am assuming that the vendor is supplying 4.0.6 while calling it 4.0.5 due to a critical fix, and that is causing your checks in the registry and file version to be invalid.

 

Thanks.

 


↧
↧

How to scan by FQDN or IP (not Machine Name)

April 8, 2014, 12:59 pm
$
0
0

Having problems talking to my client.  Shavlik will be able to tell me what patches are installed and what's missing. But if I attempt to run a Patch Scan it gives me Error 201.

 

Now I've been looking at this for the past hour and I have narrowed down the fact that if I RDP (through the Shavlik console) to the client I can do this by IP address.  But it will error out if I attempt to try this using simple machine name.

 

Unless I can make the machine name show up as the FQDN (machine.sub.domain) this doesn't work with RDP.

 

So... when I run a patch scan it appears my only option is by the simple machine name and it doesn't fully work.

 

Is there a way to change this within Shavlik?  I bet if I can get it to scan using the FQDN or IP...  I bet it'll work just fine.

↧

Waiting for Agent to register...

August 27, 2013, 11:43 am
$
0
0

We have installed the Shavlik Protect Agent on most of the laptops successfully.  We're running version 9.0.  We're running into a problem when a remote laptop connecting via VPN has the agent pushed out.  It appears to install, gets to 67%, with status reflecting "Waiting for Agent to register" and just sits there.

 

I suspect that this is probably a firewall issue on our end at the corporate HQ.  The other laptops were all on the corporate LAN, regardless of location.  This is the first one we've tried to push out to a laptop connected via VPN.  We have a private IP allowance for the subnet assigned to VPN connections, but it's just not able to register...never times out or fails, just sits there at 67%.

 

What is the protocol & process being used by the agent to register with the console on the server?  Need to know what to look for at the firewall.  Looks like something is preventing the communication across VPN links.  If it's not the VPN subnet that's being blocked, then I need to figure out what to look for.

 

Thanks!

 

--Terry

↧

Error 105: unable to get machine's system data

March 5, 2013, 9:48 am
$
0
0

I am trying to scan a remote vm.

The vm is hosted by ESX 4.1 and has been added to the hosts in Protect.

I have supplied admin credentials.

I have confirmed that server and workstation services are running.

I can connect to the registry remotely.

I have previously allowed the needed ports.

File & Print sharing is on.

 

I don' t see any blocks on our firewalls.

 

I'm not sure where to proceed.

↧
↧

Problem with agents.Message:Unable to update.The manifest with platform is older than installed platform

August 26, 2013, 11:20 pm
$
0
0

I recently upgraded to Shavlik Protect 9.0.1182 64-bit version. Agentless patching works fine, but there is a major problem with agents. I upgraded agents through console (Agents/Install / Reinstall with policy) to version 9.01182.0, but only agent check-in request works, for everything else (update patch data, Update binaries) system log on workstations returns error code: ERROR  Update failed.  Unable to update. The manifest with platform version '8.0.3965.1' is older than platform version '9.0.1182.0'.

 

I tried to uninstall and reinstall agents through console, also tried option help/Refresh files to update the manifest files in console, but problem persists.

I already searched for similar problem within this forum and only found outdated link, so any help would be greatly appreciated.

↧

The remote server returned an error: [403] Forbidden.

August 27, 2013, 7:53 am
$
0
0

I am attempting to download the FireFox Setup 23.0.1.exe and receiving "The remote server returned an error: [403] Forbidden,"  Is there any way to identify where the download is actually trying to come from to see if we might be blocking it or is there another reason why this particular update can't be downloaded?  Can I manually download the upgrade?

↧

Extremely long boot time with Shavlik installed...

March 27, 2014, 6:06 am
$
0
0

Recently, we have noticed our main development IIS virtual server is taking 20+ minutes to boot.  The following Events are seen during the boot window:

____________

 

Event ID 1 - STThreatService - The description for Event ID 1 from source STThreatService cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

 

If the event originated on another computer, the display information had to be saved with the event.

 

The following information was included with the event:

 

An error has caused the program to exit

____________

 

Event ID 6006 - Winlogon - The winlogon notification subscriber <GPClient> took 1243 second(s) to handle the notification event (CreateSession).

____________

 

Event ID 6005 - Winlogon - The winlogon notification subscriber <GPClient> is taking long time to handle the notification event (CreateSession).

____________

 

Uninstalling Shavlik results in a one minute boot time and the above errors are no longer recorded.  Any ideas?

↧
Search

Should MS13-008/Q2799329 supersede MS12-A10/Q2794220

January 15, 2013, 8:28 pm
$
0
0

A 2003 server died and a backup was restored onto new, different hardware.  A repair install was then necessary, which backlevels many patches.  The backup which we restored was from before the release of MS12-A10/Q2794220, MicrosoftFixit50971.msi.  A vCenter scan says this fixit is needed, even though MS13-008/Q2799329 has been installed.  Doesn't this week's OOB IE patch fix the vulnerability that the fixit bypasses?  Shouldn't the fixit (and 2794220u "unfixit") be considered superseded by the IE patch?  I can exclude the fixit from my scans, but I'd rather not have to do this indefinitely.

↧
↧

Invalid source file path error.

November 27, 2013, 9:09 am
$
0
0

We updated our patching plicies a few weeks ago and found that many systems are still showing a great deal of missing patches. After inspecting various STPatch.log files it seems that all of the missing patches have ended up on the "retry" list and are therefore being skipped. After clearning this list on a client workstation then running a patch scan I'm seeing an odd error I don't know how to fix. It seems the patch is downloading fine but upon extraction it's failing to find the file. This seems new to us. Any advice?

 

error.PNG

↧

"Failed Signature Check" often..

December 2, 2013, 9:06 am
$
0
0

I'm seeing many patches, primarliy Microsoft that keep failing on the download. They seem to fail with an error of "fialed signature check." If I Google the missing files, download them myself, then put them in the patches folder, then attemp to download missing patches again, the file is no longer downloaded as it sees the file I put there and gives it the virtual thumbs up so to speak.

 

So what's going on here in the console? Why does it keep getting a failed signature check on these files? It seems if I keep trying, eventually they may download but it's hit or miss.

 

12-2-2013 11-22-46 AM.png

↧

commandline scan with hfcli

March 17, 2014, 6:29 am
$
0
0

Hi. We use some automation commandline scripts which use hfcli.exe for scan tasks. Since we've upgraded from VCenter Protect 8.0.2 to Shavlik Protect 9.0.0 hfcli.exe only shows results for a limited number of products (mainly for Microsoft Developper Tools, Runtimes, and Redustributables).

 

The commandline looks like this: %ShavlikProtect%\HFCli.exe -h %HOST% -ifq %input%\HFChkIgnore.txt" -x %input%\hf7b.xml -t 128 -f %HOST%.txt -v -trace. It is the same we were using with Protect 8.0.2 where it showed patches for the OS and for other products installed. Scans in the console application produce correct results. - What can be the reason for this behavior? The Maintenance and Data Subscription does not expire until 18.10.2016 and the licence is duly activated.

Cf. hfcli.log and the scan result in output.txt (attached)

 

Any ideas?

 

Klaus

↧

What does KB2767913 only apply to?

September 26, 2013, 6:13 pm
$
0
0

This is my attempt to determine the difference in two updates included in MS13-072.  In the security bulletin it states :

I have Microsoft Word 2010 installed. Why am I not being offered the 2767913 update?

The 2767913 update only applies to systems running specific configurations of Microsoft Office 2010. Other systems will not be offered the update

 

I have been asked by several people what those specific configurations are.

 

The file contents of 2760769 is

  1. Winword.exe
  2. 14.0.7106.5001

1,423,008

14-Aug-2013

03:04

  1. Wordicon.exe
  2. 14.0.7102.5000

1,859,240

23-May-2013

08:53

  1. Wordcnv.dll
  2. 14.0.7106.5001

5,470,368

14-Aug-2013

03:30

  1. Wwlib.dll
  2. 14.0.7106.5001

19,403,936

14-Aug-2013

03:04


the file contents of 2767913 is

  1. Wwlibcxm.dll
  2. 14.0.7106.5001

19,027,616

13-Aug-2013

03:27

 

 

When I extract the XML file manifest, KB2767913 looks like it only targets <TargetProductCode>{90140000-0126-0409-0000-0000000FF1CE}</TargetProductCode>

What is that product specifically?

↧
↧

Detection error missing KB2934018 for Windows 8.1 Update 1

April 10, 2014, 1:45 am
$
0
0

On systems with Windows 8.1 Update 1 2934018 (KB2919355 release from April 8, 2014), Shavlik Protect (XML data version 2.0.0.7014) reports KB 2934018 as missing, by stating that "the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2934018~31bf3856ad364e35~amd64~~6.3.1.5\CurrentState' does not exist." - This is the case with Windows 8.1 Update 1 as well as with Windows Server 2012 R2 Update 1.

 

As explained in a WindowsITPro article, "apparently, the KB2919355 release (of) April 8, 2014, includes an update not included with the MSDN/TechNet update available early. Today's release (author's note: i.e. the public release of April 8) has a new file included (KB2934018) not available with the MSDN/TechNet version." Therefore, KB KB2934018 is only necessary for the MSDN/TechNet version installed before April 8.

 

Did you realize this error and will there be a revised XML any soon?

 

Thanks

Klaus Uhr

↧

Anyone else like to see Hyper-V guest patching....

August 22, 2013, 2:05 pm
$
0
0

Shavlik is awsome for patching VMware vSphere guest vm's, and now with version 9, ESXi hosts too.

 

With guest vm's you can automate the taking and tidying of snapshots before and after patching. You can even scan and patch templates and offline VM's too!

 

So now Shavlik has been untethered from VMware the question is: who else would like to see some or all of the same functionality for Hyper-V guest VM's?

 

With Hyper-V version 3 now a real alternative to vSphere, especially when you consider the licensing cost benefits, we're seeing more and more large organisations and enterprises putting up with any loss of functionality to save huge numbers of £'s/$'s on OS/virtualisation licensing.

 

It'd be good to know if this is in Shavlik's roadmap for Protect, or indeed already in dev.

 

Many thanks

↧
Search

Classic Shell 4.0.5

April 8, 2014, 8:12 am
$
0
0

After deploying the update for Classic Shell 4.0.5 (CSHELL-003(QCSHELL405) from April 3rd, the actual version of the installed program is 4.0.6.  The file downloaded is named ClassicShellSetup_4_0_5.exe, but when you check the properties/details, it shows 4.0.6.  After the patch installation, pperforming another patch scan gives the result that Classic Shell 4.0.2 is missing.  An asset scan shows the actual installed version of 4.0.6.

 

I am assuming that the vendor is supplying 4.0.6 while calling it 4.0.5 due to a critical fix, and that is causing your checks in the registry and file version to be invalid.

 

Thanks.

 


↧

Custom Action Quesion

April 11, 2014, 10:46 am
$
0
0

Can a custom action be created to remove a folder from a remote computer, for example, C:\BadFolder? If so, how?

↧
↧

Difference between Shavlik Protect workstation and Server

April 11, 2014, 2:01 am
$
0
0

Hi,

 

I am planning to buy one more licese of Shavlik Protect, before that I would like to understand more about

i) differences between Shavlik Protect Standard Workstation and Shavlik Protect Standar server?

ii) the concept of seat licnesing

iii) the maximum number of machines that Shavlik Protect can scan.

 

Can anybody throw some light on the above topics?

 

Thanks

Srikanth Badireddy

↧

Maximum number of machines allowed by license exceeded. How to remove old machine names from database.

March 7, 2014, 12:32 pm
$
0
0

Looks like old machines are filling up our database and taking up valid machine licenses. I see these machines in the agent manager so suspect that they are causing this false error. How can I completely remove the old machines from the database so that my system reports license usage correctly?

↧

Hello, 2 main problems I have with Shavlik Protect

October 9, 2013, 1:39 am
$
0
0

1.

All the features like patch scan and asset scan for a remote computer doesnt work from machine view.

(right click and choose operation), It ######gives me error 201.

However, in non-machine view (when I click on the computer group and then 'run operation' and choose operation) everything is ok.

I dont know what is the problem.

 

2.

In the same remote computer. I installed an agent.

[Have to say that it wasnt easy because I needed to register from the remote machine to the console manually (havn't figured it out yet why) and then needed to check-in (wasn't easy also, clock sync stuff...).]

From the consol's machine I try now to make operations from the agent menu like - 'preform check in' , 'assign policy' etc.. and it gives me an error 'Agent didnt respond'. I am trying again and again do stuff like manual check-in, restart to services related, restart to both computers etc..firewalls off..

The 2 computers are in differrent local networks like 4.4.4.4/24 and 6.6.6.6/24

 

WHEN THE 2 COMPUTERS ARE ON THE SAME NETWORK EVERYTHING WORKS PERFECT. LIKE 4.4.4.4/24 AND 4.4.4.3/24.

 

I dont know why those problems occur. All connections between computers seems to be fine. Kind of desperate.

Help please,

Best regards.

Ron Daniel.

↧
Viewing all 2351 articles
Browse latest View live
Search