We have two laptop users running WIndows 8.1OS. They are logged into the internet all the time. Somehow, the Shavlik Protect cloud agents for their machines do not run properly. In my console I can see that the last checkin was in the spring.
1. Are there known issues with W8.1 and Shavlik Cloud? Maybe I should uninstall?
2. What do you recommend for fixing this on their machines?
Thanks.
I'm not sure how to classify this question, but I scanned a Win2008 server using the agent scan. It found no patches.
Then I ran a Windows update on the server, it found 9 patches, which I patched and rebooted.
I now run a new agent pacth scan and it now sees 7 of the 9 patches.
I ran Windows update again to verify and no patches are found.
What is causing this delay / discrepancy?
Hello, I am evaluating Shavlik Protect 9.1 for patch management purpose.Can distributed console and distribution server be hosted on one workstation ?
Scenario
I have two sites, Site A and Site B. On Site A Central Console will be hosted and patches will be deployed on10 client machines.
Similarly on Site B Distributed Console and Distribution server will be hosted on one work station and patches will be deployed on 10 client machines.
Is there any document on how to install and configure Distributed Console and Distribution Server ?
Is license seprate for Console and workstations ??
Thanks & Regards
Suhas
I am trying to find out if I can run a scan on a set of computers and Shavlik not automatically patch them. I want to just run the scan, see the results and patch what I want at a later time. I have tried to find info on this and from my testing it seems this is not possible. If it is, could someone let me know how? Thanks..
Greetings.
I've been experiencing what I'm guessing to be timeout issues with Shavlik Protect. I've had this issue for some time now and am finally fed up and looking for advice.
We are using Shavlik Protect Advanced 9.1.0 Build: 4334, Windows Server 2008 R2 SP1 and SQL Server 2008 R2. Agentless patch management.
This is what happens:
Regardless of whether its a scheduled deployment or manual, after a server has patched and rebooted, the console reports back that it is pending rescan but only on servers that do not reside locally. This happens for all servers in Europe and Asia, running English Windows. If I deploy patches to a server in Europe first, and then a US server, the US server will be stuck in that "pending rescan" state like its queued up behind the European one. If I run the US one first, no issue. If I wait 24-48 hours, they will both eventually report back.
Timeout settings are already set to the maximum of 300 and we have WAN Accelerators in place.
If I watch STPatchAssessmentSrv.exe in task manager, after issuing a patch to a non local server, it doesn't move for long lengths of time. I've gone away and come back after an hour and sometimes the information moves, other times it does not.
If I kill STPatchAssessmentSrv.exe and then rescan the local server, I'll get the results fast but that really defeats the purpose of working toward a more automated approach. Then there is the long wait time to scanning the non local servers again.
I am looking for recommendations on how to approach this situation.
Thank you.
HI,
I got deployment issues with the following MS Office 2010 & 2013 patches, Shavlik Protect detects all the following patches as missing but it did not deploy them.
1) KB2878284 - Shavlik Protect says installation failed when I try to deploy through Protect, but Windows says "There is no product affected by this package installed on this system" when I deploy manually.
2) KB2880463 - Protect failed to deploy, but Windows throws up message "There is no product affected by this package installed on this system" when I deploy manually.
3) KB2880991 - Protect failed to deploy, but Windows throws up message "There is no product affected by this package installed on this system" when I deploy manually.
4) KB2881005 - Protect failed to deploy, but Windows throws up message "The Update is already installed on the system" when I deploy manually.
5) KB2881014 - Protect failed to deploy, but Windows throws up message "The Update is already installed on the system" when I deploy manually.
Any help would be appreciated.
Thanks
Srikanth
Hello,
I am new to Protect and can't figure for the life of me how to push out IE 10 to all my desktops. I have tried running a software distribution scan on the machines, but it only finds patches for installed products and doesn't actually offer up IE 10 for install? Any help would be appreciated.
Thanks,
Ryan
I am new to Shavlik and have been doing some testing to get comfortable before trying any major deployments. I performed a scan on a computer and tried to deploy two patches. Both are stuck on "Executing" as their status and have been that way since around 3pm yesterday. The communications should be fine between Shavlik and the computer and I am signed in with administrative credentials. Any idea why the patches are not being completed?
Hi
I get an error every time I try to "refresh files" from Shavlik Protect Server that stands in a secure zone.
I assume that this server will contact my other Shavlik Protect Server, that have access to internet!?
This is the error I get:
Error: File not downloaded: scriptcatalog.zip
Error reason: File 'C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles\scriptcatalog.zip' failed signature check: http://x.x.x.x/shavlikdatafiles/scriptcatalog.zip
I found an fix for this, and it was to update root certificates, and I have done that, but I still got this error?
Anyone have any idea?
/StigS
Hi,
Per Microsoft, KB2959936 applies to the following OS
KB article hyperlink: http://support.microsoft.com/kb/2959936
But Shavlik Protect 9.0 shows it as missing on Windows 7 Ultimate (x64) machines also.
I am wondering whether this patch applies to Win 7 Ultimate (x64) also?
Regards
Srikanth
Most often when I install .Net patches, they show as missing after being patched.
I decide to troubleshoot this on my current server (2012) with protect 9.1 patch 1. It is showing that it is missing MS14-046 (Q2966828) Vulnerability in .NET framework...
I installed the patch with the standard deployment template, rebooted and rescanned. It showed as still missing. I checked the Cl5 log and saw nothing amiss.
I deployed the patch again, except this time with a delay. I checked between deployment and execution and the patch file was there. The bat file runs and there are no errors in the log file.
The post deployment scan shows the patch as missing and the comment is "File version is less than expected..."
The security auditors are not happy to see patches missing.
Thaks,
Joe
I am trying to find out if I can run a scan on a set of computers and Shavlik not automatically patch them. I want to just run the scan, see the results and patch what I want at a later time. I have tried to find info on this and from my testing it seems this is not possible. If it is, could someone let me know how? Thanks..
EventType clr20r3, P1 st.protect.exe, P2 7.8.0.0, P3 4d6d7042, P4 st.protect.forms, P5 7.8.0.0, P6 4d6d703e, P7 225b, P8 0, P9 system.invalidoperationexception, P10 NIL.
And
Application: ST.Protect.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
Stack:
at ST.Protect.Launcher.ApplicationThreadException(System.Object, System.Threading.ThreadExceptionEventArgs)
at System.Windows.Forms.Application+ThreadContext.OnThreadException(System.Exception)
at System.Windows.Forms.Control.WndProcException(System.Exception)
at System.Windows.Forms.Control+ControlNativeWindow.OnThreadException(System.Exception)
at System.Windows.Forms.NativeWindow.Callback(IntPtr, Int32, IntPtr, IntPtr)
at System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG ByRef)
at System.Windows.Forms.Application+ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr, Int32, Int32)
at System.Windows.Forms.Application+ThreadContext.RunMessageLoopInner(Int32, System.Windows.Forms.ApplicationContext)
at System.Windows.Forms.Application+ThreadContext.RunMessageLoop(Int32, System.Windows.Forms.ApplicationContext)
at System.Windows.Forms.Application.Run(System.Windows.Forms.Form)
at ST.Protect.Launcher.ExecuteMain()
at ST.Protect.Launcher.ExecuteInMutex(System.Action, System.String)
at ST.Protect.Launcher.Main()
Please advice how we can edit our templates again.
THx,
Erik Leutscher
I am trying to find out if I can run a scan on a set of computers and Shavlik not automatically patch them. I want to just run the scan, see the results and patch what I want at a later time. I have tried to find info on this and from my testing it seems this is not possible. If it is, could someone let me know how? Thanks..
Hi! I was looking to push PowerShell 4.0 out to some pcs, but did not see it in the list for software distribution. I do see Windows Management Framework Core Package 3.0, but not 4.0. Am I missing something or is it not available?
Thanks,
There are two recent updates from the September 9th set that are not showing up as missing on any of my machines. MS14-052 and MS14-053 are not showing up, and I even ran a default WUScan just to make sure my template was not causing the issue.
What's odd is that the September Patch Tuesday Round Up Blog even highlighted both of them.
My weekly Nessus Scan caught them both.
Any ideas why that would be? How can I view a list of all available current patches and their statuses?
I have Shavlik configured to send me emails after a scan and deployment. After installing Patch 1 for Protect 9, it is no longer able to send emails after a scan or deployment. It can send a test email from within operations but not within the scan or deployment. Here's what pops up:
I'm not finding anything useful on Internet or Shavlik Knowledgebase. Anybody run into this?
Hi
I get an error every time I try to "refresh files" from Shavlik Protect Server that stands in a secure zone.
I assume that this server will contact my other Shavlik Protect Server, that have access to internet!?
This is the error I get:
Error: File not downloaded: scriptcatalog.zip
Error reason: File 'C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles\scriptcatalog.zip' failed signature check: http://x.x.x.x/shavlikdatafiles/scriptcatalog.zip
I found an fix for this, and it was to update root certificates, and I have done that, but I still got this error?
Anyone have any idea?
/StigS
Hello,
I am new to Protect and can't figure for the life of me how to push out IE 10 to all my desktops. I have tried running a software distribution scan on the machines, but it only finds patches for installed products and doesn't actually offer up IE 10 for install? Any help would be appreciated.
Thanks,
Ryan
The past few times when performing a security patch scan I recieve this SQL error.
"A database operation failed. Please verify you can connect to the configured database."
"A SQL Server query operation timed out. Consider increasing the command timeout in the configuration file."
Since I was not the person who installed/setup Shavlik, I'm not to sure where to begin looking to resolve this issue. All scans I have done (about 6-7 since this error popped up) have turned out OK, all machines that are normally scanned are sucessfully scanned, and I have been able to push patches just fine, however I don't want this error to bite me in the long run. If someone could point me in the right direction I would appreciate it. I have linked an attachment of the error message below.
Thanks in advance