Symptoms
- Patch Installed is disappear from Patch status.
- Patch Missing is disappear from Patch status.
Cause
This is related with the scan template you configured. If the patch group does not have any patch defected then the "patch installed" and "patch missing" will not show up in the Patch status view.
Resolution
Use the standard template such as "Security Patch Scan" or "WUscan" template to scan the target machine.
Affected Product
Shavlik Protect 9.x
| Purpose |
|---|
This document showing you how to enable C$ share on the target machine.
| Symptoms |
|---|
Symptoms:
Unable to connect to the remote machine's system share. Administrator may have unshared the system root (typically C$). (1)
| Cause |
|---|
C$ share not enabled cause the Shavlik unable to scan the target machine.
| Resolution |
|---|
1. Open dos command -> Run "net share"
2. Check the result if the C$ share showing in the list or not. If not please type "net share c$=c:"
3. Then try to scan again.
| Affected Product(s) |
|---|
Shavlik Protect 9.x
I am having an issue running the database maintenance task to delete assets. I have ran a backup and shrink of the database and the transaction log, rebooted the SQL server, stopped and started the console services.
The ScanMachines table currently shows about 55,711 records. Most of them are in the table about 4 times. Any assistance or advice anyone can provide will be appreciated.
| Symptoms |
|---|
Upon deploying a custom patch the appropriate executable file and batch (.bat) file are created and accessible within the C:\Windows\ProPatches\Patches folder and the C:\Windows\ProPatches\Install folder on the target machine, however the deployment never completes and the .bat file is not changed to a .his file as intended. This issue can be caused by an alternate data stream. An alternate data stream (ADS) is a feature of Windows New Technology File System that contains metadata for locating a specific file by author or title.
| Solution |
|---|
1. On the Console machine, navigate to your patches directory. The default location of this folder for the appropriate version of Protect can be found below:
Protect 9.x: C:\ProgramData\LANDesk\Shavlik Protect\Console\Patches\
Protect 8.x: C:\ProgramData\Shavlik Technologies\NetChk\Patches\
2. Within this folder right-click on the custom patch executable file, and select properties.
3. Within the 'Properties' screen, select the 'Unblock' option towards the bottom of the screen.
4. Once this has been completed, delete the executable file from the C:\Windows\ProPatches\Patches folder on the target machine and deploy again.
| Affected Products |
|---|
Shavlik Protect 9.x
vCenter Protect 8.x
| Symptoms |
|---|
System.Transactions.TransactionAbortedException: The transaction has aborted. ---> System.TimeoutException: Transaction Timeout
OR
2012-07-17T21:10:46.8328850Z 0001 W ScanSummaryPresenter.IsRecoverable|A SQL Server query operation timed out. Consider increasing the command timeout in the configuration file
| Purpose |
|---|
This article provides steps to increase the database timeout value in Shavlik Protect and vCenter Protect.
| Resolution |
|---|
To increase the database timeout period:
Note: Ensure to close the Protect application before proceeding.
Step 1:
Step 2:
Step 3:
Step 4:
| Affected Products |
|---|
Shavlik Protect 9.x
vCenter Protect 8.x
| Purpose |
|---|
This document is meant to provide information about how to obtain information about Shavlik's XML updates (patch definitions).
| Description |
|---|
Generally the Shavlik content team will provide patch definition updates every Tuesday and Thursday. However, there are three easy sources that can be used to see when new XML updates (patch definitions) are released.
1) XML Announcements Sign up: http://www.shavlik.com/support/xmlsubscribe/
You can sign up to receive Shavlik Protect content (patch definition) email notifications here.
2) Patch Data Information Web Page: http://protectessentials.shavlik.com/
This web page displays all patch definitions released by the Shavlik content team for the Protect application.
3) Patch Data Information Twitter: https://twitter.com/ShavlikXML
This Twitter account is updated every time an XML release is put out. This is a good alternative to recieving email notifications, depending upon your preferences.
| Affected Products |
|---|
Shavlik Protect 9.x
vCenter Protect 8.x
Shavlik Protect SDK
Shavlik Rebrands
| Purpose |
|---|
This article provides steps to perform a manual uninstall and reinstallation of the Shavlik (ST) Remote Scheduler service on a single machine.
| Description |
|---|
2. Open Windows Explorer and delete the C:\Windows\ProPatches folder and its contents.
3. Open Windows Registry Editor and verify that the following registry keys have been deleted:
Further steps to ensure successfull reinstallation of the scheduler service:
Alternatively, to uninstall the Scheduler from a target machine on the Protect console:
Installation of the scheduler service:
During next deployment to the target system, the scheduler is automatically reinstalled. If you prefer to force the install of the scheduler service prior to the next deployment you can do so in the Protect console by going to Manage > Scheduled Tasks, then right click on a target system name in the list on the left and choose Scheduler Service > Install.
If this issue exists on multiple systems:
If you are experiencing this problem on multiple systems and would like a way to resolve the issue for all machines affected, please refer to this document on how to set up a custom action to delete the scheduler service from target systems:
http://community.shavlik.com/docs/DOC-23009
| Affected Products |
|---|
Shavlik Protect 9.x
vCenter Protect 8.x
| Purpose |
|---|
This article provides steps to purge a large database in Shavlik Protect when there is limited drive space or for maintenance purposes.
| Resolution |
|---|
To purge the database of old data (clean up):
| Affected Products |
|---|
Shavlik Protect 9.x
vCenter Protect 8.x
| Symptoms |
|---|
Note: Logs can be found in these directories:
Protect 8.x
o Vista & Later: C:\ProgramData\Shavlik Technologies\Logs
o Windows 2003 or XP: C:\Documents and Settings\All Users\Application Data\Shavlik Technologies\Logs
Protect 9.x
o Vista & Later: C:\ProgramData\LANDesk\Shavlik Protect\Logs
o Windows 2003 or XP: C:\Documents and Settings\All Users\Application Data\LANDesk\Shavlik Protect\Logs
| Cause |
|---|
In cases where the console is installed in location that employs an HTTP proxy to access the Internet, the console services (which include data file download and sync) do not read or reference any per-user proxy address information. There is no feature to set proxy address information in the Protect user interface. You can, however, set proxy credentials.The reason is that there may be multiple users, and their configuration may or may not be correct for running services. At this time, the correct way to configure proxy addresses for console services is to add the following Xml under the base <configuration> element to either the STServiceHost.exe.config (console services) or the machine.config (machine wide) configuration file.
For more information, see:http://msdn.microsoft.com/en-us/library/kd3cf2ex.aspx.
| Resolution |
|---|
If your proxy server requires authentication, go to Tools> Options and select the Proxy tab and check Use proxy and set your Console credentials . When you click Save, these credentials are encrypted and supplied to the console services for automatic file download and sync. Every time a console user performs this step, the service's proxy credentials are so updated.To configure machines with Protect Agents to use a proxy, complete the appropriate set of steps:
Note: ProxyCfg is replaced by netsh winhttp.
| Affected Product(s) |
|---|
Shavlik Protect 9.x
vCenter Prtoect 8.x
| Symptoms |
|---|
| Purpose |
|---|
This article provides a list of required web addresses for the Protect application.
| Cause |
|---|
This issue occurs if one or more web addresses required by the Protect console server are blocked.
| Resolution |
|---|
To resolve this issue, ensure that these Web addresses required by Protect are accessible and allowed through firewalls, proxies, or web filters:
If you require the IP addresses to create exceptions you can find the IP addresses used for XML.shavlik.com here. To obtain the IP for vendor sites you can ping the site for the current IP address or contact the vendor to obtain this information.
| Affected Products |
|---|
Shavlik Protect, All versions
vCenter Protect 8.x
Shavlik Rebrands
| Purpose |
|---|
You may managing the machine from different country which having different different time zone. This document explains how the schedule time works when you are using it on the deployment task. You may confusing about the time either it is running on the local time or the target machine's time.
| Resolution |
|---|
There are 2 kinds of situation:
1. The time you scheduled is more than 24 hours.
The deployment task will be run at the local time zone. So you needs to calculate the target machine's time before you start this task.
Eg:
Local time zone is: GMT +8
Target machien time zone is: GMT+0
There will be 8 hours gap and you needs to calculated before you start the task. Otherwise the machine may need restart while the end user are actrually doing their work.
2. The time you scheduled is within 24 hours.
As the below screen shoot shows, the task will be run depending on the time zone of the target machine.
| Affected Product(s) |
|---|
Shavlik Protect 9.x
| Symptoms |
|---|
When attempting to add machines to a machine group in Protect via the Organizational Unit tab when clicking 'Browse Active Directory' you experience any of the followng:
-You see the message "The list of servers for this workgroup are currently unavailable".
-The OU list is missing machines that you expect to show up.
| Cause |
|---|
For any number of reasons the Protect application is unable to either connect to or browse active directory.
| Resolution |
|---|
Here are troubleshooting steps that should help:
1) Check that the "Browse Credentials" are set correctly and have access to active directory.
2) Make sure NetBIOS is enabled.
- Go into Computer Management > Device Manager.
- Click View > Show hidden devices.
- Under Non-Plug and Play Drivers locate NETBT.
- Right click on NETBT and go to Properties.
- Ensure the General tab lists this device as working properly.
- Ensure the Driver tab lists this device with a current status of Started.
3) On your Protect console system, open command prompt, and run NBTSTAT -R
This command purges the contents of the NetBIOS name cache and then reloads the #PRE-tagged entries from the Lmhosts file. The #Pre section is where domain controllers may be listed. For more information on nbtstat commands see this Microsoft Technet article: http://technet.microsoft.com/en-us/library/bb490938.aspx
4) If you are having problems enumerating Organizational Units across domains, ensure that the Protect console has access to a DNS server that provides lookups to all involved domains.
You can edit the host file (C:\WINDOWS\system32\drivers\etc)
Add an entry for:
[Net Bios Name of Domain Controller] [IP Address]
or
[DomainName] [IP Address of primary DC]
5) Enable the Computer Browser service. The computer browser service is disabled by default on Server 2008 R2, but it should start without error.
See this document: http://community.shavlik.com/docs/DOC-22966
-Is there an error in the event log? This can help narrow down what is going wrong.
-The computer browser service will automatically stop if your registry settings are not configured to maintain the browse list. To verify your settings do the following:
-Go to Start> Run
-Type regedit
-Press enter
-Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters
-The MaintainServerList value should be set to Yes or Auto. If this Value is No then the computer browser service will not start.
6) Check to make sure netbios ports are open. (139 & 445)
7) A couple other things that may help troubleshoot:
-Check if the "Browse Network" button in the Machine Group configuration dialog on the Machine Name tab functions as expected.
-Make sure you can browse your network (Network Places) using Windows Explorer.
| Affected Products |
|---|
Shavlik Protect 9.x
vCenter Protect 8.x
Symptoms
This issue occurs if there is a network or configuration issue which prevents Protect from connecting remotely to the target machine's registry.
To resolve this issue:
If the preceding steps do not resolve the issue, it is possible that the policy setting is limiting access to the remote registry of the target machine(s). To resolve this issue, contact your network administrator.
For more information on managing remote access to the registry, see the Microsoft Knowledge Base article 314837.
Shavlik Protect 9.x
vCenter Protect 8.x
I'm getting a RED X across my entire shavlik windows after about 10 minutes of use now. Crazy. Anyone else ever seen this? See attached.
We presently have two consoles, one local and one remote. They are both VMs. Are there any special considerations when patching them?
Also, any special considerations patching the vCenter servers that manage the console VMs?
Is there an easy to read or notification that tells me that a mchaine has been patched and is waiting for a reboot?
My question stems from a scheduled task ofr servers to patch but not reboot automatically.
Without looking at the server itself, is there a way to know that the server needs a reboot?
Any special considerations? Servers are W2K3.
Might Shavlik fall over when DCs with specific FSMO roles reboot? Should we transfer FSMO roles to already patched DCs?
Hello,
lot of Patches are not installed with following eventlog: File is not signed: C:\Windows\ProPatches\Patches\Windows6.1-KB2833946-x64_GER.msu what to do?
Overview(sorry if i blabbing): We currently use agent based patch deployment to install patches during patch week.
We use the once a month schedule option with the day occurence setting
Note: patch Tuesday is always the 2nd Tuesday of every month however the wednesday following
patch Tuesday is not always the 2nd Wednesday of the month
a good example is for the month of May 2013 patch Tuesday was May 14 which is the 2nd Tuesday of the month
however May 15 (the wednesday after patch Tuesday) is actually the 3rd Wednesday of the month.
Problem: We have to adjust the deployment date every month for each policy on each of our consoles
this is prone to user errors. I am looking to automate this using a script before patching begins.
Ideally it would be nice if Shavlik could update their calendar selection to include an option that keys off of patch tuesday
Does anyone have any ideas as to how to automate this ?
Can i use shavlik to run a executable or script to do this.