Today I was getting the message "Connected to a machine with the wrong hostname or domain name." Turns out the real error was remote registry service not running (it was set to manual). This was 9.1.0 build 4334 scanning a fresh build of Windows 7 pro.
Misleading error message
Shared credentials in Protect 9
My consultant had setup dozens of groups and applied various credentials to all of them. When I look at the groups, the credentials show as "No".
He claims to have setup the credentials as shared and that I should see them in Credentials Manager, but I don't. When I added them as shared on my profile, it warned me that I was overwriting his shared credentials. For him, he can still see them applied to the machines but I still do not.
One of three shared credentials is a domain account and when I edit/change it to shared, I get no prompt as with the other two but then the consultant sees it as not shared.
When other admins login to the console with their AD creds, Credential Manager shows nothing and machine groups show nothing. The plan was to rotate through as many as 19 admins but this appears to not be a workable method.
Client cannot configure agent to listen
I have one laptop running Windows 7 64-bit that the agent says, "cannot configure agent to listen. Listening is disabled." in the logs. I also get an eventid 1000 and 1001 in the event log.
Log Name: Application
Source: Windows Error Reporting
Date: 7/22/2013 2:40:39 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: STJ-DPAUL.pioneerbank.loc
Description:
Fault bucket 3672095051, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: STAgentUpdater.exe
P2: 9.0.634.0
P3: 51ba20ee
P4: MSVCR100.dll
P5: 10.0.40219.325
P6: 4df2be1e
P7: 40000015
P8: 0008d6fd
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bc8ca31
Analysis symbol:
Rechecking for solution: 0
Report Id: 94681175-f306-11e2-82a9-c4850832ff18
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-07-22T19:40:39.000000000Z" />
<EventRecordID>18392</EventRecordID>
<Channel>Application</Channel>
<Computer>STJ-DPAUL.pioneerbank.loc</Computer>
<Security />
</System>
<EventData>
<Data>3672095051</Data>
<Data>1</Data>
<Data>APPCRASH</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>STAgentUpdater.exe</Data>
<Data>9.0.634.0</Data>
<Data>51ba20ee</Data>
<Data>MSVCR100.dll</Data>
<Data>10.0.40219.325</Data>
<Data>4df2be1e</Data>
<Data>40000015</Data>
<Data>0008d6fd</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bc8ca31</Data>
<Data>
</Data>
<Data>0</Data>
<Data>94681175-f306-11e2-82a9-c4850832ff18</Data>
<Data>0</Data>
</EventData>
</Event>
Log Name: Application
Source: Windows Error Reporting
Date: 7/22/2013 2:40:37 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: STJ-DPAUL.pioneerbank.loc
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: STAgentUpdater.exe
P2: 9.0.634.0
P3: 51ba20ee
P4: MSVCR100.dll
P5: 10.0.40219.325
P6: 4df2be1e
P7: 40000015
P8: 0008d6fd
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bf4bebd
Analysis symbol:
Rechecking for solution: 0
Report Id: 94681175-f306-11e2-82a9-c4850832ff18
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-07-22T19:40:37.000000000Z" />
<EventRecordID>18391</EventRecordID>
<Channel>Application</Channel>
<Computer>STJ-DPAUL.pioneerbank.loc</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>APPCRASH</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>STAgentUpdater.exe</Data>
<Data>9.0.634.0</Data>
<Data>51ba20ee</Data>
<Data>MSVCR100.dll</Data>
<Data>10.0.40219.325</Data>
<Data>4df2be1e</Data>
<Data>40000015</Data>
<Data>0008d6fd</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bf4bebd</Data>
<Data>
</Data>
<Data>0</Data>
<Data>94681175-f306-11e2-82a9-c4850832ff18</Data>
<Data>4</Data>
</EventData>
</Event>
Log Name: Application
Source: Application Error
Date: 7/22/2013 2:40:36 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
Faulting application name: STAgentUpdater.exe, version: 9.0.634.0, time stamp: 0x51ba20ee
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x1b88
Faulting application start time: 0x01ce87135586e69f
Faulting application path: C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\STAgentUpdater.exe
Faulting module path: C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\MSVCR100.dll
Report Id: 94681175-f306-11e2-82a9-c4850832ff18
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-07-22T19:40:36.000000000Z" />
<EventRecordID>18390</EventRecordID>
<Channel>Application</Channel>
<Computer>STJ-DPAUL.pioneerbank.loc</Computer>
<Security />
</System>
<EventData>
<Data>STAgentUpdater.exe</Data>
<Data>9.0.634.0</Data>
<Data>51ba20ee</Data>
<Data>MSVCR100.dll</Data>
<Data>10.0.40219.325</Data>
<Data>4df2be1e</Data>
<Data>40000015</Data>
<Data>0008d6fd</Data>
<Data>1b88</Data>
<Data>01ce87135586e69f</Data>
<Data>C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\STAgentUpdater.exe</Data>
<Data>C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\MSVCR100.dll</Data>
<Data>94681175-f306-11e2-82a9-c4850832ff18</Data>
</EventData>
</Event>
PDFCreator by PDFforge - how to exclude
I'm looking to exclude PDFCreator from the Full Scan Template but do not see it listed, am I missing it somwhere?
Thanks,
Jason
Patches being deployed but Deployment Tracker shows as scheduled
Hi. I finally deployed the Shavlik Protect product to production and ran it for the first time last night. I tried to run this against 50 computers, and got 500+ updates. I went ahead and deployed the downloads to the machines requiring the patches without installation. I verified about 10 machines at random to see if their propatches folder had data and it did. I then went into shavlik protect and ran the deployment and said install automagicaly.
While watching the Shavlik Protect Deployment Tracker, I saw several patches complete, several say reboot required, and then tons show up as scheduled. after over an hour, the shceduled number never dropped. After verifying that the ones that were still scheduled werent in succesfully installed or reboot required category, I hopped in the Event Viewer logs of the machines that said they still had patches scheduled.. I was shocked to see that the patches were applied the first 15 minutes after i deployed them, but the deployment tracker didnt catch the update..
How do i get the deployment tracker to update properly? or what mechanism do i use to actually properly monitor the status of patching? We are manually pushing patches until we prove that the system works without a hitch.
Could not read the remote registry: Error 5: Access is denied.
Thanks,
Ron
Problem with agents.Message:Unable to update.The manifest with platform is older than installed platform
I recently upgraded to Shavlik Protect 9.0.1182 64-bit version. Agentless patching works fine, but there is a major problem with agents. I upgraded agents through console (Agents/Install / Reinstall with policy) to version 9.01182.0, but only agent check-in request works, for everything else (update patch data, Update binaries) system log on workstations returns error code: ERROR Update failed. Unable to update. The manifest with platform version '8.0.3965.1' is older than platform version '9.0.1182.0'.
I tried to uninstall and reinstall agents through console, also tried option help/Refresh files to update the manifest files in console, but problem persists.
I already searched for similar problem within this forum and only found outdated link, so any help would be greatly appreciated.
Console Service starts then stops
Shavlik protect console service starts then about 10sec later stops. Errors in the event log show:
Faulting application name: ST.ServiceHost.exe, version: 9.0.616.0, time stamp: 0x5177f1ec
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18229, time stamp: 0x51fb1677
Exception code: 0xe0434352
Fault offset: 0x000000000000940d
Faulting process id: 0xa24
Anybody seen this before? No new windows patches have been installed.
Thanks!
Patch Domain Controller without Domain Admin?
Hello,
Is there any way to patch a windows server 2008 domain controller without requiring domain admin? If so can you please explain how?
Multiple updates for 1 product
Hi..
We're looking to deploy updates to Adobe Reader.
However many of our installs have really old versions..like 10.0.1 and they would ideally be updated to 10.1.9.
Question is, how would that work? Would it install them all at once (10.0.2, 10.0.3, 10.0.4 etc..) right after one another, or do I have to create separate deployments for each version?
Thanks!-
-A
May 2014 second Tuesday Patch scanning
Hi,
I have a Windows 7 machine on which I have installed Microsoft .NET 1.1 and 4.5.1.
I scan this machine for May 2014 patches using Shavlik Protect. Interestingly the scan shows missing patch for .NET 3.5.1 (Q2931356) which I have not installed on my machine at all.
Why Shavlik Protect is showing up this patch as missing eventhough my machine does not have .NET 3.5.1?
Any help would be appreciated.
Thank you
Srikanth Badireddy
Problem Synchronizing distribution servers
Hello everyone
i am having problems with synchronizing my repositories with
- the local console server
- a NAS (FreeNas)
Both times i get an error 1307 (error 1307 this security id may not be assigned as the owner of this object) when i try to synchronize the core datafiles.
Am i missing some kind of permission here? Even "Everyone Full Control" and some more permissions did not help.
It seems the system always tries to modify the OWNER of the "PowerShellModules" directory to different permissions ...
Why is that happening and can i change that?
Thanks in advance
Joerg Hermanns
Bug with Export Visible Patches to CSV in v9.x
Hi there,
I wanted to see if this was fixed in 9.1 before posting but it appears not. So instead would like to report a bug.
Scenario:
- Go under View / Patches
- Under search type in something pretty specific like MS14-02 - this narrows down the list of patches to a small set
- Now from the Patches drop-down, choose Export visible patches to CSV.
Expected result:
- I would expect a CSV file containing only the patches that meet my MS14-02 search criteria
- Help documentation states that patches visible in the top pane will be exported
Actual result?
- All patches are exported
- The resulting CSV file is 38MB
- Compare this with Selecting all of the patches in the top pane, then right-click Export selected patches to CSV. The resulting CSV file is 260kB
So it appears to be a small bug. No worries, I've seen that I can work around it by using Select all, but it seems that the 'Export visible' feature is broken, and I thought I should report what I found.
I'm not looking for a solution, but an acknowledgement would be nice. We'll fix it in a future minor update some day...something like that.
Thanks,
Sandra
Will Protect wake remote pc if it's in hibernation mode?
Will Protect wake remote pc if it's in hibernation mode?
Is there any power settings we need to be aware of?
Thanks,
Dan
windows updates
is it normal that when you run a scan on windows 7 machines , and it picking up 5 updates of the 8 updates of may patch tuesday ?
missing not being detected by shavlik
KB2825635
KB2871997
KB2952664
KB915597 " Windows Defender never gets installed although i had that enabled in the list os scans
KB2880505
rebooted and scanned many times after that it still wont detect them as missing
thanks
error installing agent on some pcs
I have about 600 pcs i've been deploying the vcenter protect agent to. Most existing ones were done through the console, and new pcs being deployed we use the stplatformupdater.exe on to deploy it. On probably 30 machines, I have been unable to get the agent to register itself no matter what I do. I try through the console, and using the exe and always get one of two errors
2013-04-04T15:19:33.9851166Z 07e8 I STAgentManagement.cpp:536 'C:Program Files (x86)VMwarevCenter Protect AgentSTAgentManagement.exe' is starting, version: 8.0.3965.1.
2013-04-04T15:19:35.6855275Z 07e8 E STAgentManagement.cpp:695 class STServiceModel::Wws::CWebServiceException at RegistrationServiceClient.cpp:496: Unable to register the agent with the provided registration cookie.
Error detail:
The body of the received message contained a fault.
The fault reason was: 'Internal error'.
or
2013-05-01T02:54:46.0497283Z 0c14 I STAgentManagement.cpp:536 'C:Program Files (x86)VMwarevCenter Protect AgentSTAgentManagement.exe' is starting, version: 8.0.3965.1. 2013-05-01T02:55:20.4330099Z 0c14 E STAgentManagement.cpp:695 class STWin32::CWin32Exception at PrivateKeyInfo.cpp:164: Error 5: Access is denied.
I use shared passphrase when doing the stplatformudpater.exe and I know it works because it allows me to fetch the policy list. It just never is able to register. Any idea what could be wrong on these machines? It happens on both windows 7 and xp.
Client cannot configure agent to listen
I have one laptop running Windows 7 64-bit that the agent says, "cannot configure agent to listen. Listening is disabled." in the logs. I also get an eventid 1000 and 1001 in the event log.
Log Name: Application
Source: Windows Error Reporting
Date: 7/22/2013 2:40:39 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: STJ-DPAUL.pioneerbank.loc
Description:
Fault bucket 3672095051, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: STAgentUpdater.exe
P2: 9.0.634.0
P3: 51ba20ee
P4: MSVCR100.dll
P5: 10.0.40219.325
P6: 4df2be1e
P7: 40000015
P8: 0008d6fd
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bc8ca31
Analysis symbol:
Rechecking for solution: 0
Report Id: 94681175-f306-11e2-82a9-c4850832ff18
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-07-22T19:40:39.000000000Z" />
<EventRecordID>18392</EventRecordID>
<Channel>Application</Channel>
<Computer>STJ-DPAUL.pioneerbank.loc</Computer>
<Security />
</System>
<EventData>
<Data>3672095051</Data>
<Data>1</Data>
<Data>APPCRASH</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>STAgentUpdater.exe</Data>
<Data>9.0.634.0</Data>
<Data>51ba20ee</Data>
<Data>MSVCR100.dll</Data>
<Data>10.0.40219.325</Data>
<Data>4df2be1e</Data>
<Data>40000015</Data>
<Data>0008d6fd</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bc8ca31</Data>
<Data>
</Data>
<Data>0</Data>
<Data>94681175-f306-11e2-82a9-c4850832ff18</Data>
<Data>0</Data>
</EventData>
</Event>
Log Name: Application
Source: Windows Error Reporting
Date: 7/22/2013 2:40:37 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: STJ-DPAUL.pioneerbank.loc
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: STAgentUpdater.exe
P2: 9.0.634.0
P3: 51ba20ee
P4: MSVCR100.dll
P5: 10.0.40219.325
P6: 4df2be1e
P7: 40000015
P8: 0008d6fd
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bf4bebd
Analysis symbol:
Rechecking for solution: 0
Report Id: 94681175-f306-11e2-82a9-c4850832ff18
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-07-22T19:40:37.000000000Z" />
<EventRecordID>18391</EventRecordID>
<Channel>Application</Channel>
<Computer>STJ-DPAUL.pioneerbank.loc</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>APPCRASH</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>STAgentUpdater.exe</Data>
<Data>9.0.634.0</Data>
<Data>51ba20ee</Data>
<Data>MSVCR100.dll</Data>
<Data>10.0.40219.325</Data>
<Data>4df2be1e</Data>
<Data>40000015</Data>
<Data>0008d6fd</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_STAgentUpdater.e_9938e0c6de9b9265c4413caccbc61ed349c915f7_1bf4bebd</Data>
<Data>
</Data>
<Data>0</Data>
<Data>94681175-f306-11e2-82a9-c4850832ff18</Data>
<Data>4</Data>
</EventData>
</Event>
Log Name: Application
Source: Application Error
Date: 7/22/2013 2:40:36 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
Faulting application name: STAgentUpdater.exe, version: 9.0.634.0, time stamp: 0x51ba20ee
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process id: 0x1b88
Faulting application start time: 0x01ce87135586e69f
Faulting application path: C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\STAgentUpdater.exe
Faulting module path: C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\MSVCR100.dll
Report Id: 94681175-f306-11e2-82a9-c4850832ff18
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-07-22T19:40:36.000000000Z" />
<EventRecordID>18390</EventRecordID>
<Channel>Application</Channel>
<Computer>STJ-DPAUL.pioneerbank.loc</Computer>
<Security />
</System>
<EventData>
<Data>STAgentUpdater.exe</Data>
<Data>9.0.634.0</Data>
<Data>51ba20ee</Data>
<Data>MSVCR100.dll</Data>
<Data>10.0.40219.325</Data>
<Data>4df2be1e</Data>
<Data>40000015</Data>
<Data>0008d6fd</Data>
<Data>1b88</Data>
<Data>01ce87135586e69f</Data>
<Data>C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\STAgentUpdater.exe</Data>
<Data>C:\Program Files (x86)\LANDesk\Shavlik Protect Agent\MSVCR100.dll</Data>
<Data>94681175-f306-11e2-82a9-c4850832ff18</Data>
</EventData>
</Event>
Qxxxxxx?
Short question:
what is the meaning of N after Qnumbers?
Shared credentials in Protect 9
My consultant had setup dozens of groups and applied various credentials to all of them. When I look at the groups, the credentials show as "No".
He claims to have setup the credentials as shared and that I should see them in Credentials Manager, but I don't. When I added them as shared on my profile, it warned me that I was overwriting his shared credentials. For him, he can still see them applied to the machines but I still do not.
One of three shared credentials is a domain account and when I edit/change it to shared, I get no prompt as with the other two but then the consultant sees it as not shared.
When other admins login to the console with their AD creds, Credential Manager shows nothing and machine groups show nothing. The plan was to rotate through as many as 19 admins but this appears to not be a workable method.
Offline activation of new workstation
I have a new workstation and new support license. How do I activate the license offline? Doing a manual request with a temporary license doesn't work. I'm guessing I need to add the new workstation to the license group. Thanks.
Rob