Are there any tool / scripts to test remote access to a machine? I have tried to run GetRebootTime on domain assets but failed because of access issues. So, I am looking for a tool or script that could determine the cause of remote access being denied.
We recently started scanning a subdomain of our forest by using OU's.
When scanning the response is Error Code 201 - Network connection error.
I suspect it's only using the hostname rather than the FQDN.
The names are being resolved using the local subdomain's DNS suffix rather than the remote subdomain's DNS suffix.
For example:
Local domain is:
local.domain
Remote domain name is:
remote.domain
When scanning using the server in the local.domain.local domain host names are always resolved to host.local.domain
I'd like them to be resolved using the FQDN of the OU the hostnames are being pulled from - hostname.remote.domain
Is there a way to accomplish this?
Thanks!
Eric
Since upgrading to 9.1 whenever I do an "stscheduleview status" it always returns "no jobs found". (with both builds 4334 & 4446). Does this command still work with this version or is there something new that I'm missing? I have tried uninstalling / reinstalling the scheduler on a couple of pcs but that did not change anything. Any thoughts?
1.
All the features like patch scan and asset scan for a remote computer doesnt work from machine view.
(right click and choose operation), It gives me error 201.
However, in non-machine view (when I click on the computer group and then 'run operation' and choose operation) everything is ok.
I dont know what is the problem.
2.
In the same remote computer. I installed an agent.
[Have to say that it wasnt easy because I needed to register from the remote machine to the console manually (havn't figured it out yet why) and then needed to check-in (wasn't easy also, clock sync stuff...).]
From the consol's machine I try now to make operations from the agent menu like - 'preform check in' , 'assign policy' etc.. and it gives me an error 'Agent didnt respond'. I am trying again and again do stuff like manual check-in, restart to services related, restart to both computers etc..firewalls off..
The 2 computers are in differrent local networks like 4.4.4.4/24 and 6.6.6.6/24
WHEN THE 2 COMPUTERS ARE ON THE SAME NETWORK EVERYTHING WORKS PERFECT. LIKE 4.4.4.4/24 AND 4.4.4.3/24.
I dont know why those problems occur. All connections between computers seems to be fine. Kind of desperate.
Help please,
Best regards.
Ron Daniel.
I have gone through multiple "tutorials" for how to do offline patching but still have some issues that I can't resolve. The "missing" patches are related to an IE8 update and to Win2008 SP1 (SP1 makes up about 20 missing patches). I have tried to manually install the exe files, but the OS comes back and says they are already installed. Shavlik however, says they are missing and I'm unable to get a clean scan. I'm not sure if there is just a way to update the SQL database manually to show the patches exist or what the proper methods should be, but I have 5 "offline" servers right now that I'm unable to put into Production because I can't resolve these issues. Thanks for the help!
Hi
I get an error every time I try to "refresh files" from Shavlik Protect Server that stands in a secure zone.
I assume that this server will contact my other Shavlik Protect Server, that have access to internet!?
This is the error I get:
Error: File not downloaded: scriptcatalog.zip
Error reason: File 'C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles\scriptcatalog.zip' failed signature check: http://x.x.x.x/shavlikdatafiles/scriptcatalog.zip
I found an fix for this, and it was to update root certificates, and I have done that, but I still got this error?
Anyone have any idea?
/StigS
I have Shavlik configured to send me emails after a scan and deployment. After installing Patch 1 for Protect 9, it is no longer able to send emails after a scan or deployment. It can send a test email from within operations but not within the scan or deployment. Here's what pops up:
I'm not finding anything useful on Internet or Shavlik Knowledgebase. Anybody run into this?
I am new to Shavlik and have been doing some testing to get comfortable before trying any major deployments. I performed a scan on a computer and tried to deploy two patches. Both are stuck on "Executing" as their status and have been that way since around 3pm yesterday. The communications should be fine between Shavlik and the computer and I am signed in with administrative credentials. Any idea why the patches are not being completed?
Most often when I install .Net patches, they show as missing after being patched.
I decide to troubleshoot this on my current server (2012) with protect 9.1 patch 1. It is showing that it is missing MS14-046 (Q2966828) Vulnerability in .NET framework...
I installed the patch with the standard deployment template, rebooted and rescanned. It showed as still missing. I checked the Cl5 log and saw nothing amiss.
I deployed the patch again, except this time with a delay. I checked between deployment and execution and the patch file was there. The bat file runs and there are no errors in the log file.
The post deployment scan shows the patch as missing and the comment is "File version is less than expected..."
The security auditors are not happy to see patches missing.
Thaks,
Joe
I have been asked the question above as we currently use Shavlik heavily in our Windows environment and we are going to start doing the same with Unix, Linux and Mac. So I wanted to know if we can continue to use Shavlik for this or do we have to look elsewhere?
Hi,
I am in a strange situation with a customer.
We ship PCs to customers with few components of MS Office (eg. Word, Excel and Outlook), and customer is free to install other components of Office.
As a patching group, we are supplying patches to what we support (Word, Excel and Outlook) and customer is responsible for patching the extra components.
When customer scans his machine by selecting "Office" in the scan template, Protect shows up all the missing patches for all the components. (right now there is no option to select individual Office components).
One of the customers installed all the components of Office and is coming back to us and asking for all the missing patches, since Shavlik Protect shows them as missing.
He says that if we don't support then don't show them in the scan list.
Is there a way to select only required Office components while scanning?
Regards
Srikanth
Hi,
I'm trying to update the files on my Shavlik server in Argentina but I appear to be unable to contact the download server. The following messages appear;
Downloading the latest manifest...
Error: File not downloaded: protect.manifest.xml
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.xml
Downloading latest engines and definitions...
Error: File not downloaded: PatchInstaller.msi
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi
Error: File not downloaded: AssetInstaller.msi
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi
Error: File not downloaded: ThreatInstaller.msi
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi
Error: File not downloaded: STPlatformUpdater.exe
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe
Error: File not downloaded: cl5.exe
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/protect/v9/91/Protect/1048/cl5.exe
Error: File not downloaded: safereboot64.exe
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe
Error: File not downloaded: safereboot.exe
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe
Error: File not downloaded: scriptcatalog.zip
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/scriptcatalog.zip
Error: File not downloaded: ST.Licensing.Data.dll
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll
Error: File not downloaded: pd5.xml
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/pd5.xml
Error: File not downloaded: 7z.dll
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll
Error: File not downloaded: STRemoteCommand.exe
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe
Error: File not downloaded: DplyEvts.dll
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll
Error: File not downloaded: StSchedEx.exe
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe
Error: File not downloaded: ai_dpd.xml
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/ai_dpd.xml
Error: File not downloaded: assetinventory.xml
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/assetinventory.xml
Error: File not downloaded: hypervisors.xml
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/hypervisors.xml
Error: File not downloaded: hf7b.xml
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/hf7b.xml
Error: File not downloaded: stScheduleView.exe
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe
Error: File not downloaded: iadata.xml
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/iadata.xml
All engines and definitions are up to date.
Updating database with new definitions...
Checking for definition changes...
Updating the database with the latest definitions...
Downloading latest IT scripts...
Error: File not downloaded: scriptcatalog.zip
Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/scriptcatalog.zip
All engines and definitions are up to date.
Downloading PowerShell modules...
Importing ITScripts...
Process complete.
I've rebooted the server (Windows Server 2003), tried with the AV disabled also.
I checked on a different server (Windows 7) that I have in the UK and everything downloads OK there. I can access the web from the server and I also tried re-activating the license key - but that failed as it couldn't connect to the shavlik.com server.
Thanks,
Steve
Hello All, I have a mixed environment of both online and offline 9.1 console servers experiencing the same issue. When I scan a group of servers, the results are a mix of mostly error 452 and some successfully scanned devices. The mix of successfully scanned devices and 452 varies on each attempt but generally is more 452 than success. I tried all the suggestions from multiple posts about the 452 error, but the issue persists. I recently did a test and had the following results:
1. Opened the custom patch scan template and changed the simultaneous machines scanned value from its default of 64 to 2. The results changed to mostly successful device scans and only a couple 452's.
2. Changed the # machines scanned from 2 to 1 and it had successful device scans for all items in the group.
Is there an option in the GUI or an item in one of the config files that will allow me to change the timeout value for these scans such that I can still scan multiple devices at the same time?
Thanks!
Rob
We just had a security audit.
Auditing company told us we were at risk because we were missing a bunch of "patches."
Upon inspection of the patches we are missing and they all seem to be considered Non-Security Patches or Security Tools. This makes sense because we only apply Security Patches (as categorized by Shalivk) right now.
So, what do you guys do right now? Are you patching just for Security Patches or doing Non-Security Patches and Security Tools as well? Did you pass an audit like that?
Shavlik protect console service starts then about 10sec later stops. Errors in the event log show:
Faulting application name: ST.ServiceHost.exe, version: 9.0.616.0, time stamp: 0x5177f1ec
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18229, time stamp: 0x51fb1677
Exception code: 0xe0434352
Fault offset: 0x000000000000940d
Faulting process id: 0xa24
Anybody seen this before? No new windows patches have been installed.
Thanks!
We have systems that have been patched up to Apache Tomcat 6.0.39. When we scan these systems the Apache Tomcat 6.0.37 patch is showing up as applicable and missing which is a bug.
Please resolve.
I tried to open a case via the web portal but it gave some error on the attach files portion every time. Says something about not being associated with an account. Sorry.
I just installed Protect version 9 (build 1182) onto a Win2012 server. I was able to successfully scan a machine, and deployed all needed patches. When I pulled up the deployment tracker, however, all I see is that the patches are scheduled. It never moves beyond that point, and it has been 40 minutes. When I look at the machine, the hard drive light is flashing like crazy, so it's definitely working on something. I have the remote registry service started on that machine (Win7x64). The deployment parameters indicate that patches should install immediately. What should I be looking for that might provide a clue as to what might be happening and how to correct? Should I just reboot the machine or rescan to see if anything looks different?
Hi. I finally deployed the Shavlik Protect product to production and ran it for the first time last night. I tried to run this against 50 computers, and got 500+ updates. I went ahead and deployed the downloads to the machines requiring the patches without installation. I verified about 10 machines at random to see if their propatches folder had data and it did. I then went into shavlik protect and ran the deployment and said install automagicaly.
While watching the Shavlik Protect Deployment Tracker, I saw several patches complete, several say reboot required, and then tons show up as scheduled. after over an hour, the shceduled number never dropped. After verifying that the ones that were still scheduled werent in succesfully installed or reboot required category, I hopped in the Event Viewer logs of the machines that said they still had patches scheduled.. I was shocked to see that the patches were applied the first 15 minutes after i deployed them, but the deployment tracker didnt catch the update..
How do i get the deployment tracker to update properly? or what mechanism do i use to actually properly monitor the status of patching? We are manually pushing patches until we prove that the system works without a hitch.
Recently upgraded to Protect 9.1.0 v4446 and have lost email service. Any fix other than reinstalling????