Apologies if this has been asked before, I did search but didn't come up with an answer.  We're using Shavlik Protect 9 in our environment for patching and I am just taking over the project.  I identified a number of computers that are missing the agent and while most of the installs went off without a hitch, a substantial percentage of them failed. 

What I would like to do is use GPO to deploy and run the installer silently at login, and then rather than registering the agent manually , I was wondering if I would be able to do that by "waking up" the agent from the server end using Agents > Install/Reinstall with Policy > xxxx?  Barring that is there any other way to do this without interrupting the affected users that I am overlooking?

An example of the failure messages (all on pingable machines):

     _The deployment has failed

     _Run Remote Task failed to create the remote command service. Error code - 0x[431]

Thanks,

Matt.

Hi,

I'm trying to update the files on my Shavlik server in Argentina but I appear to be unable to contact the download server. The following messages appear;

Downloading the latest manifest...

Error: File not downloaded: protect.manifest.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.xml

Downloading latest engines and definitions...

Error: File not downloaded: PatchInstaller.msi

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi

Error: File not downloaded: AssetInstaller.msi

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi

Error: File not downloaded: ThreatInstaller.msi

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi

Error: File not downloaded: STPlatformUpdater.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe

Error: File not downloaded: cl5.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/protect/v9/91/Protect/1048/cl5.exe

Error: File not downloaded: safereboot64.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe

Error: File not downloaded: safereboot.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe

Error: File not downloaded: scriptcatalog.zip

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/scriptcatalog.zip

Error: File not downloaded: ST.Licensing.Data.dll

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll

Error: File not downloaded: pd5.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/pd5.xml

Error: File not downloaded: 7z.dll

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll

Error: File not downloaded: STRemoteCommand.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe

Error: File not downloaded: DplyEvts.dll

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll

Error: File not downloaded: StSchedEx.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe

Error: File not downloaded: ai_dpd.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/ai_dpd.xml

Error: File not downloaded: assetinventory.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/assetinventory.xml

Error: File not downloaded: hypervisors.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/hypervisors.xml

Error: File not downloaded: hf7b.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/hf7b.xml

Error: File not downloaded: stScheduleView.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe

Error: File not downloaded: iadata.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/iadata.xml

All engines and definitions are up to date.

Updating database with new definitions...

Checking for definition changes...

Updating the database with the latest definitions...

Downloading latest IT scripts...

Error: File not downloaded: scriptcatalog.zip

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/scriptcatalog.zip

All engines and definitions are up to date.

Downloading PowerShell modules...

Importing ITScripts...

Process complete.

I've rebooted the server (Windows Server 2003), tried with the AV disabled also.

I checked on a different server (Windows 7)  that I have in the UK and everything downloads OK there. I can access the web from the server and I also tried re-activating the license key - but that failed as it couldn't connect to the shavlik.com server.

Thanks,

Steve

A 2003 server died and a backup was restored onto new, different hardware.  A repair install was then necessary, which backlevels many patches.  The backup which we restored was from before the release of MS12-A10/Q2794220, MicrosoftFixit50971.msi.  A vCenter scan says this fixit is needed, even though MS13-008/Q2799329 has been installed.  Doesn't this week's OOB IE patch fix the vulnerability that the fixit bypasses?  Shouldn't the fixit (and 2794220u "unfixit") be considered superseded by the IE patch?  I can exclude the fixit from my scans, but I'd rather not have to do this indefinitely.

Hi guys,

I'm new to this forum so please be patient in case I'm asking a question that has already been asked.

i'm using Shavlik Protect in the version 9.0.0 and I'm wondering if the tool is simply extremely slow or if it's a misconfiguration on my side?

I need to patch around 300 Windows Servers in a timely fashion every second month and I'm not keen on waiting for 10 hours+ until they're completed.

e.g.: Patching one server (around 120 Patches) longs now for more than 2 hours. Patching a similar system with Windows Updates takes around 45 Minutes.

Can somebody please advice me where to tune the Shavlik-System?

Thx,

Philipp

Hi,

I have two Protect Standard servers running in two countries.

Both are running 9.0.0 Build 1182 on MS Server 2003 R2

One server takes a few minutes to scan a bunch of machines, the other can take over an hour to scan just one!!

This is greatly frustrating to both myself and the end user waiting for their machine to have patches installed and rebooted.

Before upgrading to v9 scan times were similar on both systems.

Steve

I recently upgraded to Shavlik Protect 9.0.1182 64-bit version. Agentless patching works fine, but there is a major problem with agents. I upgraded agents through console (Agents/Install / Reinstall with policy) to version 9.01182.0, but only agent check-in request works, for everything else (update patch data, Update binaries) system log on workstations returns error code: ERROR  Update failed.  Unable to update. The manifest with platform version '8.0.3965.1' is older than platform version '9.0.1182.0'.

I tried to uninstall and reinstall agents through console, also tried option help/Refresh files to update the manifest files in console, but problem persists.

I already searched for similar problem within this forum and only found outdated link, so any help would be greatly appreciated.

Since upgrading to 9.1 whenever I do an "stscheduleview status" it always returns "no jobs found".  (with both builds 4334 & 4446).  Does this command still work with this version or is there something new that I'm missing?  I have tried uninstalling / reinstalling the scheduler on a couple of pcs but that did not change anything.  Any thoughts?

I am new to Shavlik and have been doing some testing to get comfortable before trying any major deployments.  I performed a scan on a computer and tried to deploy two patches.  Both are stuck on "Executing" as their status and have been that way since around 3pm yesterday.  The communications should be fine between Shavlik and the computer and I am signed in with administrative credentials.  Any idea why the patches are not being completed?

Hi everyone,

A guy in my team needs to deploy a Microsoft KB (KB2520487) on all our Windows 2008 servers.

I visualized the "How to create a custom Patch" page, but i'm not sure if this is the right way.

The patch is a .MSU file.  I read the documetn http://community.shavlik.com/docs/DOC-1902.

Does someone has already addressed a similar request ?

Thank you.

Benoit

I am trying to find out if I can run a scan on a set of computers and Shavlik not automatically patch them.  I want to just run the scan, see the results and patch what I want at a later time.  I have tried to find info on this and from my testing it seems this is not possible.  If it is, could someone let me know how?  Thanks..

Hi,

I'm trying to update the files on my Shavlik server in Argentina but I appear to be unable to contact the download server. The following messages appear;

Downloading the latest manifest...

Error: File not downloaded: protect.manifest.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.xml

Downloading latest engines and definitions...

Error: File not downloaded: PatchInstaller.msi

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi

Error: File not downloaded: AssetInstaller.msi

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi

Error: File not downloaded: ThreatInstaller.msi

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi

Error: File not downloaded: STPlatformUpdater.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe

Error: File not downloaded: cl5.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/protect/v9/91/Protect/1048/cl5.exe

Error: File not downloaded: safereboot64.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe

Error: File not downloaded: safereboot.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe

Error: File not downloaded: scriptcatalog.zip

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/scriptcatalog.zip

Error: File not downloaded: ST.Licensing.Data.dll

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll

Error: File not downloaded: pd5.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/pd5.xml

Error: File not downloaded: 7z.dll

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll

Error: File not downloaded: STRemoteCommand.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe

Error: File not downloaded: DplyEvts.dll

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll

Error: File not downloaded: StSchedEx.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe

Error: File not downloaded: ai_dpd.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/ai_dpd.xml

Error: File not downloaded: assetinventory.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/assetinventory.xml

Error: File not downloaded: hypervisors.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/hypervisors.xml

Error: File not downloaded: hf7b.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/hf7b.xml

Error: File not downloaded: stScheduleView.exe

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe

Error: File not downloaded: iadata.xml

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/iadata.xml

All engines and definitions are up to date.

Updating database with new definitions...

Checking for definition changes...

Updating the database with the latest definitions...

Downloading latest IT scripts...

Error: File not downloaded: scriptcatalog.zip

Error reason: Unable to connect to the remote server: http://xml.shavlik.com/data/scriptcatalog.zip

All engines and definitions are up to date.

Downloading PowerShell modules...

Importing ITScripts...

Process complete.

I've rebooted the server (Windows Server 2003), tried with the AV disabled also.

I checked on a different server (Windows 7)  that I have in the UK and everything downloads OK there. I can access the web from the server and I also tried re-activating the license key - but that failed as it couldn't connect to the shavlik.com server.

Thanks,

Steve

Hello All, I have a mixed environment of both online and offline 9.1 console servers experiencing the same issue. When I scan a group of servers, the results are a mix of mostly error 452 and some successfully scanned devices. The mix of successfully scanned devices and 452 varies on each attempt but generally is more 452 than success. I tried all the suggestions from multiple posts about the 452 error, but the issue persists. I recently did a test and had the following results:

1. Opened the custom patch scan template and changed the simultaneous machines scanned value from its default of 64 to 2. The results changed to mostly successful device scans and only a couple 452's.

2. Changed the # machines scanned from 2 to 1 and it had successful device scans for all items in the group.

Is there an option in the GUI or an item in one of the config files that will allow me to change the timeout value for these scans such that I can still scan multiple devices at the same time?

Thanks!

Rob

On systems with Windows 8.1 Update 1 2934018 (KB2919355 release from April 8, 2014), Shavlik Protect (XML data version 2.0.0.7014) reports KB 2934018 as missing, by stating that "the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2934018~31bf3856ad364e35~amd64~~6.3.1.5\CurrentState' does not exist." - This is the case with Windows 8.1 Update 1 as well as with Windows Server 2012 R2 Update 1.

As explained in a WindowsITPro article, "apparently, the KB2919355 release (of) April 8, 2014, includes an update not included with the MSDN/TechNet update available early. Today's release (author's note: i.e. the public release of April 8) has a new file included (KB2934018) not available with the MSDN/TechNet version." Therefore, KB KB2934018 is only necessary for the MSDN/TechNet version installed before April 8.

Did you realize this error and will there be a revised XML any soon?

Thanks

Klaus Uhr

I have noticed on some systems where I have to deploy alot of patches using Protect, the CPU spikes to 100% for a long time on TrustedInstaller.exe.  Installing 30+ patches takes almost 5 hours.  If I do the same thing using Windows Update from the Internet, there is no long spike in he CPU and the deployment finishes under an hour.  These are VM's running Windows 2008 R2 SP1 servers with no patches installed.  I have rebooted before installing any patches but it doesn't seem to help and I also tried a freshly built system.  I am running Protect Advanced 8.0.2 build 4027 on Windows 2008 R2 SP1 with 4 GB Ram and 2 CPU's.  Any ideas?

We have installed the Shavlik Protect Agent on most of the laptops successfully.  We're running version 9.0.  We're running into a problem when a remote laptop connecting via VPN has the agent pushed out.  It appears to install, gets to 67%, with status reflecting "Waiting for Agent to register" and just sits there.

I suspect that this is probably a firewall issue on our end at the corporate HQ.  The other laptops were all on the corporate LAN, regardless of location.  This is the first one we've tried to push out to a laptop connected via VPN.  We have a private IP allowance for the subnet assigned to VPN connections, but it's just not able to register...never times out or fails, just sits there at 67%.

What is the protocol & process being used by the agent to register with the console on the server?  Need to know what to look for at the firewall.  Looks like something is preventing the communication across VPN links.  If it's not the VPN subnet that's being blocked, then I need to figure out what to look for.

Thanks!

--Terry

I have Shavlik configured to send me emails after a scan and deployment. After installing Patch 1 for Protect 9, it is no longer able to send emails after a scan or deployment.  It can send a test email from within operations but not within the scan or deployment.  Here's what pops up:

I'm not finding anything useful on Internet or Shavlik Knowledgebase.  Anybody run into this?

The past few times  when performing a security patch scan I recieve this SQL error.

"A database operation failed.  Please verify you can connect to the configured database."

"A SQL Server query operation timed out.  Consider increasing the command timeout in the configuration file."

Since I was not the person who installed/setup Shavlik, I'm not to sure where to begin looking to resolve this issue.  All scans I have done (about 6-7 since this error popped up) have turned out OK, all machines that are normally scanned are sucessfully scanned, and I have been able to push patches just fine, however I don't want this error to bite me in the long run.  If someone could point me in the right direction I would appreciate it.  I have linked an attachment of the error message below.

Thanks in advance

Hi!  I was looking to push PowerShell 4.0 out to some pcs, but did not see it in the list for software distribution.  I do see Windows Management Framework Core Package 3.0, but not 4.0.  Am I missing something or is it not available?

Thanks,

Hi.  I finally deployed the Shavlik Protect product to production and ran it for the first time last night. I tried to run this against 50 computers, and got 500+ updates.  I went ahead and deployed the downloads to the machines requiring the patches without installation. I verified about 10 machines at random to see if their propatches folder had data and it did. I then went into shavlik protect and ran the deployment and said install automagicaly. 

While watching the Shavlik Protect Deployment Tracker, I saw several patches complete, several say reboot required, and then tons show up as scheduled.  after over an hour, the shceduled number never dropped.  After verifying that the ones that were still scheduled werent in succesfully installed or reboot required category, I hopped in the Event Viewer logs of the machines that said they still had patches scheduled.. I was shocked to see that the patches were applied the first 15 minutes after i deployed them, but the deployment tracker didnt catch the update..

How do i get the deployment tracker to update properly? or what mechanism do i use to actually properly monitor the status of patching?  We are manually pushing patches until we prove that the system works without a hitch.