Good morning all,
I was wondering if anyone has had any sucess scripting/packaging the VMware View Agent as a custom patch.
We just went from 5.0 to 5.2 and need to now upgrade 100+ manual VM's. I was wondering if there was a way to use a custom patch to accomplish this.
It's just a pain since you have to always go in the order of VM Tools then agent. Luckily you can upgrade tools without having to uninstall the agent using Shavlik.
Please provide some suggestions!
Thanks,
Troy
This is my attempt to determine the difference in two updates included in MS13-072. In the security bulletin it states :
I have Microsoft Word 2010 installed. Why am I not being offered the 2767913 update?
The 2767913 update only applies to systems running specific configurations of Microsoft Office 2010. Other systems will not be offered the update
I have been asked by several people what those specific configurations are.
The file contents of 2760769 is
| 1,423,008 | 14-Aug-2013 | 03:04 |
| 1,859,240 | 23-May-2013 | 08:53 |
| 5,470,368 | 14-Aug-2013 | 03:30 |
| 19,403,936 | 14-Aug-2013 | 03:04 |
the file contents of 2767913 is
| 19,027,616 | 13-Aug-2013 | 03:27 |
When I extract the XML file manifest, KB2767913 looks like it only targets <TargetProductCode>{90140000-0126-0409-0000-0000000FF1CE}</TargetProductCode>
What is that product specifically?
I recently had an issue which got resolved, but that has cause a new problem.
Original problem: Scanning by OU without including child OUs doesn't work
Second problem: E-mail service is currently not available after installing Patch 1
The fix for the new problem is to uninstall Shavlik Protect and reinstall.
I'm getting the following error when attempting to uninstall Shavlik Protect.
If I chose to add OUs to my scan range and unclick the checkbox "Include child OUs" it still includes all child objects in all child OUs.
I just want to scan the computers at the root of that OU and none of the child OUs. Is this possible without statically adding each machine to a machine group?
We recently started scanning a subdomain of our forest by using OU's.
When scanning the response is Error Code 201 - Network connection error.
I suspect it's only using the hostname rather than the FQDN.
The names are being resolved using the local subdomain's DNS suffix rather than the remote subdomain's DNS suffix.
For example:
Local domain is:
local.domain
Remote domain name is:
remote.domain
When scanning using the server in the local.domain.local domain host names are always resolved to host.local.domain
I'd like them to be resolved using the FQDN of the OU the hostnames are being pulled from - hostname.remote.domain
Is there a way to accomplish this?
Thanks!
Eric
I have one workstation which will not allow the Agent to install. The install goes to 50% and stops. I have tried everything I can think of. I have tried all the suggestions on this site. I have gone into the registry and removed every trace of Landesk and Shavlik. I have turned the firewall off. I have tried a manual install on the W/S and it registers successful. Nothing has worked. It is still "installed, waiting for registration". Telnet works. I have installed Shavlik agent on hundreds of machines and have never been defeated, but that has come to an end.
I need some new ideas on how to get this agent installed. We use the Threat engine or I would forget it and go on. But I can't place the W/S in production without virus protection.
Help
Fred
Greetings,
I am trying to understand the patching process a little more. When I do a WUScan of my machine (Windows 8.1 Enterprise) it returns with zero patches missing. When I go out to Windows Updates, I have 21 important updates listed, 14 of which are office products, and 7 are listed under windows 8.1. When I look at each individual update and compare the KB number with the Qnumber within Protect, most of them are not listed. The ones that are listed are showing they are over a year old. All of the updates listed on the Windows Update page are showing as published Yesterday. Does this mean that the Shavlik team has not released these as of this moment? I have confirmed I have the latest definitions 2.0.0.8978 and I am on Protect Standard version 9.1.0 Build 4446.
Here is a screenshot of the updates in question, along with a screenshot showing no patches listed for KB2977292. Is it possible these updates are not included in either the WUScan or my custom scans?
Thanks,
Mike
Hello,
Does anyone have an idea why the 'Use DRS For Migration' option is grayed out when initiating a hypervisor bulletin?
Thanks,
Paul
We are using BMC Bladelogic tool for Patching, which uses Shavlik to download Patches. I checked in our Patch Catalog and repositories, the KB2977292 is still missing.
Please assist.
Thanks,
Nikhil
On systems with Windows 8.1 Update 1 2934018 (KB2919355 release from April 8, 2014), Shavlik Protect (XML data version 2.0.0.7014) reports KB 2934018 as missing, by stating that "the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_for_KB2934018~31bf3856ad364e35~amd64~~6.3.1.5\CurrentState' does not exist." - This is the case with Windows 8.1 Update 1 as well as with Windows Server 2012 R2 Update 1.
As explained in a WindowsITPro article, "apparently, the KB2919355 release (of) April 8, 2014, includes an update not included with the MSDN/TechNet update available early. Today's release (author's note: i.e. the public release of April 8) has a new file included (KB2934018) not available with the MSDN/TechNet version." Therefore, KB KB2934018 is only necessary for the MSDN/TechNet version installed before April 8.
Did you realize this error and will there be a revised XML any soon?
Thanks
Klaus Uhr
Windows patches applied to a physical 2003 server running SQL 2008 Enterprise at around 7.00am
We used VMware Protect Essentials to deploy the patch using the shutdown SQL an IIS service options.
Patch 'SQLServer2008-KB2716433-x86.exe' was insatlled and SQL Server shutdown and we are in a left in a position where we cannot restart any of the services
Windows Event Log displayed error: Script level upgrade for database 'master' failed because upgrade step 'sqlagent100_msdb_upgrade.sql' encountered error 2714, state 6, severity 25. This is a serious error condition which might interfere with regular operation and the database will be taken offline, If the error happened during the upgrade of the 'master' database, it will prevent the entire SQL Server instance from starting. Examine the previous errorlog entries for errors, take the appropriate corrective actions and re-start the database so that the script upgrade steps run to completion.
The above sql patch changed our version of SQL Server 2008 From ‘1033 196609 4311’ to ‘1033 196609 4371’
We tried to start up sql server in single user mode from command prompt using the /f or /m options but were unable to restore the master database to a backup from yesterday. It errored. We got an error saying the master db needed restoring (I think that was misleading, as it works with /t902) but when we tried to, following the KB articles to restore the Master db, we got a new error saying the versions where different.
We were unable to get the sql server started so we uninstalled the update SQL Patch from windows add/remove hoping it would solve the issue once we rebooted but this did not work.
Finally we decided to use the /T902 trace flag on startup for all our sql services (we ran this from the command line and did not update the start up parameters through the SQL Server Configuration Manager – unable to get this to work).
Current version of SQL: Microsoft SQL Server 2008 (SP2) - 10.0.4311.0 (Intel X86) May 11 2011 14:52:29 Copyright (c) 1988-2008 Microsoft Corporation Enterprise Edition on Windows NT 5.2 <X86> (Build 3790: Service Pack 2)
We are now up and running by manually starting the SQL services using the command 'net start <service> /T902', but if we remove the /T902 flag we are back to the script level upgrade error message and unable to restart sql server services.
Protect console service error says its stopped but it is running. I've stopped and restarted the service several times but Shavlik still doesn't connect.
How do I fix this problem? I appreciate any help provided.
Hi. I finally deployed the Shavlik Protect product to production and ran it for the first time last night. I tried to run this against 50 computers, and got 500+ updates. I went ahead and deployed the downloads to the machines requiring the patches without installation. I verified about 10 machines at random to see if their propatches folder had data and it did. I then went into shavlik protect and ran the deployment and said install automagicaly.
While watching the Shavlik Protect Deployment Tracker, I saw several patches complete, several say reboot required, and then tons show up as scheduled. after over an hour, the shceduled number never dropped. After verifying that the ones that were still scheduled werent in succesfully installed or reboot required category, I hopped in the Event Viewer logs of the machines that said they still had patches scheduled.. I was shocked to see that the patches were applied the first 15 minutes after i deployed them, but the deployment tracker didnt catch the update..
How do i get the deployment tracker to update properly? or what mechanism do i use to actually properly monitor the status of patching? We are manually pushing patches until we prove that the system works without a hitch.
When I build our Windows 7 SP1 workstation images I will use Windows Update to install any missing security patches before running sysprep and sealing the image. During the OS deployment through MDT the deployment will slipstream OS patches on the fly with DISM. Once the system goes out on the floor to the users, we have Shavlik scan and deploy new patches as needed. Pretty straightforward.
The "problem" I am having is that the Shavlik scans do not detect any patches that I sealed into the image or that get deployed during the Image staging process with DISM as missing or installed.
For example, if I sealed up an image with KB2667402 and during the OS install had KB2978742 install with DISM via MDT deployment, then went and scanned the systems with my production Shavlik scan template neither of those patches will show up as installed or as missing in the scan results.
Now I know the correct patches are installed, and I can do into Installed Updates in Control Panel and see that they are installed. My problem is that if we have a security audit our patch scanning and deployment system (Shavlik) does not list installed patches as being installed.
So when I run a security patch scan from my Shavlik console the results for installed patches does not account for 150+ patches that are indeed installed. That means the patch status numbers in any reports are not going to be accurate for those patches on those machines and if I get audited and have to provide a detailed report on patches from my console the numbers are going to be off compared to what is actually out in my environment.
I'm wondering if this is a known behavior or something that can be corrected?
Thanks
I have been asked the question above as we currently use Shavlik heavily in our Windows environment and we are going to start doing the same with Unix, Linux and Mac. So I wanted to know if we can continue to use Shavlik for this or do we have to look elsewhere?
So I'm trying to not deploy IE 10 and .net 4.5. From what I can see I can change the Criticality of the patch to "Ignore" and then set my Patch Scan Template to not scan for patches set to "Ignore"...
I was assuming this was correct, but apparently I was wrong.
I need to not deploy these patches but I'm sure its in the documentation somewhere on how not to deploy a specific patch but I'm not seeing it.
Do any of you have any recommendations on how to handle this?
Maybe even a recommendation on how to uninstall these items if they've been deployed?
Thanks.