Using Shavlik Protect, how can I generate a report listing what version of Internet Explorer is installed for each machine?

Hi,

I unable to download the definitions. I tested three different corporate proxies, but all of them failed.

I tried to check About Shavlik, but never finished. This is strange, becuase I checked for program updates, and I got immediately "No updates available".

The Options/Proxy/Test finished successfully.

Anyone else faced this issue?

Regards,

SagiK

Is it possible to add a company logo to the custom reports?

If you see any of the following errors and/or symptoms during installation or upgrade of Shavlik Protect you may need to use the following steps to perform a manual uninstall of the application:

Errors /Symptoms

Error 1603: A fatal error occurred during installation

Error 1605: This action is only valid for products that are currently installed.

Error: Shavlik Protect Advanced. Sorry, an unexpected error has occurred and Shavlik Protect Advanced must close to recover. Depending on the configuration of your operating system, a second dialog may be displayed that gives you the option to report this error and check online for a solution. We really want to fix this problem (to help you and other customers) and hope you will select the "Check online" or "Send Error Report" option. Thanks!

Impacted Products

Shavlik NetChk Protect 7.x
VMware vCenter Protect 8.x

Shavlik Protect 9.x

Cause

The Shavlik Protect application may not have been removed in full due to a possible corruption of the Windows Installer, Installer folder or the automated uninstall process.

Resolution

Microsoft provides assistance with the manual uninstall process by providing a Fix it tool.  The download link for the the tool can be found at the following url: http://support.microsoft.com/mats/Program_Install_and_Uninstall

(Impact/Risks:  The Fixit utility is provided by Microsoft. Make sure you read any known issues or guidelines for this tool on Microsoft's site prior to use.)

Here are instructions on how to use the Fix it tool

1. Use the link above to navigate to the Fix it main page.
2. Click on the ‘Run Now’ button and save the file to the desired location on the problem machine.
3. Run the MicrosoftFixit.ProgramInstallUninstall.RNP.5230312412494560.2.1.Run.exe from the download location and select ‘Accept’ on the first page.
4. Select ‘Detect problems and let me select the fixes to apply’ from the pop-up window.
5. Select the ‘Uninstalling’ option.
6. A list of installed products will be displayed.  If the Protect product (i.e. Netchk Protect, Shavlik Protect or VMware vCenter Protect) is in the list select it, if you do not see the product in the list then select ‘Not listed’.

 
If a Protect product is listed:

1. Select the applicable product and click ‘Next’.
2. Select ‘Yes, try uninstall’
3. Ensure that both the 'Cannot install or uninstall a program' and 'Uninstall and cleanup?' boxes are check-marked and select ‘Next’.
4. A screen should then be displayed indicating whether the selected product was uninstalled or not.
5. Select ‘Next’ and the close out of the screen.

If a Protect product is not listed:

(Notes: It is best practice, and highly advised, that a backup of the registry before making any changes to or performing any modifications to the registry.  Please review the 'How to Backup Windows Registry' article found at the following link if you have questions about this process: http://windows.microsoft.com/en-US/windows-vista/Back-up-the-registry)

  1.  Choose ‘Not Listed’ and click ‘Next’.

  2.  Enter the associated product code from the list below for the version of Protect installed, being sure to include the { and } brackets, and select ‘Next’.

     Product GUID codes:

     Protect 7.0.832.0: {C6D1AE7C-DE93-4E93-A916-C4144525C82C}

     Protect 7.0.841.0: {C6D1AE7C-DE93-4E93-A916-C4144525C82C}

     Protect 7.1.410.0: {90047C28-0B1B-4B30-8177-50729907EBF2}

     Protect 7.2.155.0: {9B7F1E45-4C47-4E25-9EAB-098923E4171C}

     Protect 7.5.2716.0: {CEA2D643-08C0-422E-9B27-B58ED9D38D07}

     Protect 7.6.1482.0: {661A3308-5BE2-4E0F-A752-BDDB247DD2DB}

     Protect 7.8.1340.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}

     Protect 7.8.1388.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}

     Protect 7.8.1392.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}

     Protect 8.0.3756.0: {F77AFB04-D13F-48DA-BB99-A5B31B6AAE0B}

     Protect 8.0.3965.1: {5A696B05-9F06-4B3D-83A0-69E848EFAC4A}

     Protect 8.0.4027.2: {5A696B05-9F06-4B3D-83A0-69E848EFAC4A}

     Protect 9.0.1106.0: {8045AD29-C6A4-43F5-9F1F-9560EB09F99A}

     Protect 9.0.1182.0: {B7F5FF6F382B8834B85B6390F7F4DA1}

     ScriptLogic Patch Authority Ultimate 8.0.3756: {A8210996-CD25-4C8C-A2D7-207635DEDC28}

     ScriptLogic Patch Authority Ultimate 8.0.4027: {86DE6110-3F1C-40EE-98D9-05CD7A4B212F}

     ScriptLogic Patch Authority Ultimate 9.0.1182: {0EAD1B8A-6F58-2304-A817-34C1724CE04C}

  3.  Ensure that both the 'Cannot install or uninstall a program' and 'Uninstall and cleanup?' boxes are check-marked and select ‘Next’.

  4.  A screen should then be displayed indicating whether the selected product was uninstalled or not.

  5.  Select ‘Next’ and the close out of the screen.

       * It is recommended that you check that the associated product GUID has been deleted from the following registry location:

            HKEY_CLASSES_ROOT\Installer\UpgradeCodes

  6.  A reboot of the problem machine is also recommended at this point.

You should now be able to move forward with a clean installation of Protect (preferably the latest version which can be found at http://www.shavlik.com/downloads/). 

If you continue to have issues please contact Shavlik support by using one of the following methods:

Phone:

US Support: 800-690-6911

EMEA Support: +44-1344-442190

Support Portal:

Register at http://support.shavlik.com to create, update, and manage your Shavlik support cases

Hi. We use some automation commandline scripts which use hfcli.exe for scan tasks. Since we've upgraded from VCenter Protect 8.0.2 to Shavlik Protect 9.0.0 hfcli.exe only shows results for a limited number of products (mainly for Microsoft Developper Tools, Runtimes, and Redustributables).

The commandline looks like this: %ShavlikProtect%\HFCli.exe -h %HOST% -ifq %input%\HFChkIgnore.txt" -x %input%\hf7b.xml -t 128 -f %HOST%.txt -v -trace. It is the same we were using with Protect 8.0.2 where it showed patches for the OS and for other products installed. Scans in the console application produce correct results. - What can be the reason for this behavior? The Maintenance and Data Subscription does not expire until 18.10.2016 and the licence is duly activated.

Cf. hfcli.log and the scan result in output.txt (attached)

Any ideas?

Klaus

Hello everyone, We were previously using Shavlik Condole 8.5 and were installing the Agents on our laptops that were not connected to our network 24/7.  The individual Agent results would show up on the Results on the Shavlik Console which we wanted.  We then upgraded to Shavlik version 9 and I reimaged the original shavlik console with the same computer name and passwords and passphrase.  Now nether the existing laptops (agent version 8.5) or the newly imaged laptops with the new version of shavlik (agent 9.0) is showing up on the Results on the console.  I ran the STAgentManagement.exe -diag agentdiag.txt command and got the following: PASSED - Able to communicate with console.  Any Ideas why the agent results will not show up on the shavlik console results? Here is the results of the STAgentManagement.exe -diag agentdiag.txt command

All error lines in agent log files sorted by date/timestamp. Total number of error lines mined from logs [6] Log file key 2 C:\ProgramData\LANDesk\Shavlik Protect\Logs\STAgent.log 3 C:\ProgramData\LANDesk\Shavlik Protect\Logs\STAgentManagement.log 4 C:\ProgramData\LANDesk\Shavlik Protect\Logs\STAgentUI.log 5 C:\ProgramData\LANDesk\Shavlik Protect\Logs\STAgentUpdater.log 6 C:\ProgramData\LANDesk\Shavlik Protect\Logs\STDispatch.log Errors Found [4] 3/18/2014 4:35:39 PM 134c STAgentUI.cpp:258  Cannot determine user interaction setting: class Opc::CContainerException at Opc.cpp:163: Unable to open container 'C:\ProgramData\LANDesk\Shavlik Protect\Agent\Policy.zip': [4] 3/18/2014 4:35:40 PM 12e4 ActiveProtection.cpp:133  Error retrieving AP state [2] 3/18/2014 4:36:08 PM 16f0 ServiceBase.cpp:81  Could not log event type 4: class STWin32::CWin32Exception at EventLog.cpp:32: Error 1717: The interface is unknown.. [6] 3/18/2014 4:36:08 PM 1204 ServiceBase.cpp:81  Could not log event type 4: class STWin32::CWin32Exception at EventLog.cpp:32: Error 1717: The interface is unknown.. [3] 3/18/2014 4:53:04 PM 08b0 Diagnostics.cpp:388  Converter.cpp [3] 3/18/2014 4:53:04 PM 08b0 Diagnostics.cpp:388  DateTime.cpp ----------------------------------------------- Scheduled Jobs Taskname  Enabled/Disabled Run Once  (if the task is not run once then this line will not be there) Last time run      Next time to run Checkin_agent.xml Enabled Last Time: 12/31/2009 7:00:00 PM  Next Time: 3/18/2014 12:00:43 PM (Includes 43 seconds delay) Patch Staff Windows 7 Laptops_patch.xml Enabled Last Time: 1/1/2010 6:00:00 AM  Next Time: 3/19/2014 11:25:23 AM (Includes 1523 seconds delay) PostReboot_a773a3e7-2d34-4714-bea6-e0e7d8ebeb0d_Patch Staff Windows 7 Laptops.xml Disabled Run Once Last Time: 3/18/2014 11:36:46 AM  Next Time: 12/31/9999 6:59:59 PM ScanAfterReboot_a773a3e7-2d34-4714-bea6-e0e7d8ebeb0d_Patch Staff Windows 7 Laptops.xml Disabled Run Once Last Time: 3/18/2014 11:35:42 AM  Next Time: 12/31/9999 6:59:59 PM (Includes 589 seconds delay) ScanNow_a773a3e7-2d34-4714-bea6-e0e7d8ebeb0d_Patch Staff Windows 7 Laptops.xml Disabled Run Once Last Time: 3/18/2014 11:36:46 AM  Next Time: 12/31/9999 6:59:59 PM -----------------------------------------------

Certificate Tests PASSED

- Has an agent certificate PASSED

- Has a console certificate PASSED - Console certificate is in the intermediate store PASSED

- Root certificate is in the root store -----------------------------------------------

Communications tests PASSED - Agent certificate hash does match SSL hash -----------------------------------------------

Agent To Console CommunicationTest test PASSED - Able to communicate with console.

All-

I went from less than 200 patches needed on our network to over 1000 in one day. I use Protect 9. Nothing has drastically changed on our network so I don't understand the sudden jump. And it's not patch Tuesday so I am kind of dumfounded. And it leads me to suspect something isn't right with the product or definitions. Anyone else see this? Anyone have an idea?

...AR

Hi

Windows update timestamp is not updated when Shalik install updates. However the update history is updated. See attached image; Windows update to the left, and the update history to the right.

Is there a way to get Shavlik update the timestamp for updates, or should we just ignore this?

I recently upgraded to Shavlik 9.0.0 Build: 1182.  I am running an offline environment.  I have refreshed my license and tried a file refresh.  Once I scan my servers, patches that have already been applied show up in Shavlik as missing.  Comparing it to one of the other Shavlik servers I have not updated yet, I am missing several folders in c:\ProgramData\Shavlik Technologies\ NetChk to include the data files folder.  How do I recover those files?  Have they moved?  Do I need to point the scans to check for new definitions somewhere else?

This document provide a resolution when Active Protection alerts are not send out.

Alerts are configured to send emails to a number of recipients when a virus/infection is found on a machine. A virus/infection is found by the Antivirus but no alerts are send out.

The alerting function is configurable from Tools> Operations> Alerts.

In order to trigger an alert, the threat count must meet or exceed one of the two alert thresholds, and it must do so within the specified period of time. This means that when the threats are received is just as important as the number of threats that are received.

The Infection time window (hours) must be less than 24 hours, we would recommend to let 4 hours as configured by default.

• vCenter Protect 8.x
• Shavlik Protect 9.x

I currently have two Shavlik Protect servers, one in Domain A and one in Domain B.  I want the server in Domain B to pull the patches down from the Distrubtion Server in Domain A.  Domain A and B do not trust each other and I have not set up a Distribution Server before so am wondering if this is possible in my environment?

This document outlines how to export a list of machines that have been scanned, or failed to be scanned from a specific scan result. This can be useful for identifying machines that may be experiencing issues scanning. It may also be useful for identifying why a particular machine has not been receiving patches (i.e. if it cannot be scanned, it will not receive patches from Protect).

After performing a scan against multiple machines, it may be desirable to have a list of machines that were successful vs. those that were unsuccessful.

Export Machines Scanned

1. Select Results from the navigation panel drop down list (or Choose View> Results).
2. Select the scan to report on from the navigation panel on the left.
3. Select the Machines Scanned tab.
4. Select All Machines in the list.
5. Right click, choose Export Selected Machines to CSV.

In the Save window that appears, choose a location to save, give the file a name, and choose Save.

Export Machines Not Scanned

1. Select Results from the navigation panel drop down list (or Choose View> Results).
2. Select the scan to report on from the navigation panel on the left.
3. Select the Machines Not Scanned tab.
4. Select All Machines in the list.
5. Right click, choose Export Selected Machines to CSV.

In the Save window that appears, choose a location to save, give the file a name, and choose Save.

Shavlik Protect 9.x

This document outlines how to use a Custom Action to remove the Propatches folder.

A Custom Actionmay include executing a specific command or invoking a custom batch file at specified time(s) during the deployment process. You can specify custom files and actions that occur during every deployment that uses the template, or only for those deployments that install a specific patch or service pack.

Note: A Custom Action will only run if a deployment occurs. If there are no missing patches selected to deploy to a target machine, the Custom Action will NOT occur.

1. Create a New Scan Template; enter a Name for the Template, and Save it.
   1. Alternatively - open an existing Scan Template you wish to modify.
   2. Select CustomActions under the Patch Properties tab.
   3. Save and close.

2.  Create a new Deployment Template.

     -     Give it a Name

     -     Uncheck Send Tacker Status

3.     Go to the Post-Deploy Reboot tab and choose "Never Reboot After Deployment".

4.     Go to the Custom Action tab and click New.

        -    Step 1 - Leave default

        -    Step 3 - Change to 'After all Patches"

        -    Step 4 - Enter the following: rmdir /s /q %pathtofixes

        -    Click Ok

5.     Save and close the Deployment Template.

6.     Use the new Scan Template to scan all your machines

7.     Use the new Deployment Template to deploy the QSK2745 MSST-001 patch. This patch is used for Custom Actions.

• NullPatch.exe/Noop.exe Information
• Null.exe or Noop.exe False-Positive
• Custom Action - Remove the Remote Scheduler for Protect version 9
• Custom Action - Delete Specific File
• Custom Action - Uninstall a Program
• Delete Patches from Target After Deployment

Protect Version: All

This document explains how to locate the default or user-defined patch download location in Protect.

When Shavlik Protect deploys patches to other machines on its environment, prior to deploying it must first download the patch to the console machine from the software vendor. These patches are routed to a default location on the local machine or if set to so, to a user-customized location. These patches will remain on the local machine following deployment so that the patch does not have to be redownloaded every time it is detected as missing and deployed. Sometimes if space is limited administrators may wish to clear out some of the older patches on the machine. This document explains how to locate the default location on the local console machine, or to determine where the user-defined patch download location is set in Protect.

In Shavlik Protect version 9: the default patch download location can be found by navigating to this directory on the local disk:

C:\ProgramData\LANDesk\Shavlik Protect\Console\Patches

The patch download location can be viewed or modified by going to Tools > Operations:

In the Operations menu, the Download tab which will be displayed by default contains this location in the top section.

To change this path to which patches will be downloaded prior to deployment, simply change the path in this field, and click save at the bottom. (Note: After changing all patches that are not in the new location will be downloaded- so it may be wise if you are changing this download location to transfer or delete the patch files in the default repository.)

Shavlik Protect 9.x
vCenter Protect 8.x

Importing a Custom ITScript presents an error. The error, cause, and solution will vary; this doucment will cover each individually.

Note - The following errors list a specific file and/or Script name. These may vary in your environment.

Script metadata is missing or incorrect.

A script '...' already exists, but was signed by a different authority

Error

 

[Window Title]
Script Importer

 

[Main Instruction]
The script 'C:\test.ps1' failed to import.

 

[Content]
A script 'Set Target Machine Verbose Logging' already exists, but was signed by a different authority

Cause

The UID value within the ps1 files Metadata matches the value of a script that is already imported into Protect. This specific error is typically seen when the UID matches one of the Shavlik default ITScript UID values.

 

Example:
<stScript uid="333a27e3-a651-4a30-9150-63757e689a19" schemaVersion="1.0.0.0">
uid value has already been used for a ITScript called 'Set Target Machine Verbose Logging'.

Solution

Change the uid to a unique value.

The contents of file '...' may have been tampered because the hash of the file does not match the hash stored in the digital signature. The script will not execute on the system. Please see "get-help about_signing" for more details.

Error

Cause

Solution

A script '...' by author '...' already exists

Error

Cause

Solution

• Change the Name value
• Change the Author value
• Delete the Script that is already imported into Protect.

The '...' start tag on line # position # does not match the end tag of '...'. Line #, position #.

Error

Cause

Solution

The script '...' failed to import. Scripts cannot have the same ID or Name as another imported script. Please check your script to ensure it has unique metadata entries for those fields.

Error

Cause

Solution

A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file

Error

Cause

• The system Date/Time is incorrect.
• The Root Certificates on the Protect Console computer are out of date.

Solution

• Correct the system Date/Time.
• Update the root certificates.
  • Related Document: Correcting Agent issues caused by out of date root certificates

Could not find any recognizable digits.

Error

[Window Title]

Script Importer

[Main Instruction]

The script 'C:\test.ps1' failed to import.

[Content]

Could not find any recognizable digits.

[OK]

Cause

• The GUID in the ps1 file has a non-hexadecimal value.

Solution

• Verify the GUID in the ps1 file contains only hexadecimal values (A-F, 0-9).

The following required fields are empty:...

[Window Title]

Script Importer

[Main Instruction]

The script 'C:\test.ps1' failed to import.

[Content]

The following required fields are empty: purpose

[OK]

Cause

• The listed element/node is does not contain any information.

Solution

• Enter information into the listed element/node

Example: In the listed example, the node 'Purpose' did not contain content. Adding something between the opening and closing tags fixes this issue.

The required element '...' is missing.

[Window Title]

Script Importer

[Main Instruction]

The script 'C:\test.ps1' failed to import.

[Content]

The required element 'purpose' is missing.

[OK]

Cause

• The listed element is missing from the ps1 file. Certain elements are required, and if they are missing they cause this issue. See this document on required elements.

Solution

• Add the listed/missing element.

Example: In the listed example, the element 'Purpose' was not in the ps1 file. Adding the element back into the ps1 file within the Description tags fixes the issue.

Guidelines for Creating Custom ITScripts

Shavlik Protect 9.x

When running a batch file as part of a custom action, the deployment never completes/the deployment hangs.

When Protect is running a deployment, it creates a batch file that is copied to the target machine. This batch file contains all the information related to that deployment, including what patches should run, and with what switches. It also includes any Custom Actions that the user defined. This batch file will be refered to as the Protect Generated Batch. When the Protect Generated Batch file is running, it initiates each task sequentially going through the list (one task must finish before the next can begin). When the Protect Generated Batch file calls the users custom batch file, the Protect Generated Batch file waits for the users custom batch file to return an exit code to indicate it is done. If the users' custom batch file is not accessed with an appropriate command, it will not return the necessary exit code for the Protect Generated Batch File to continue through its pending actions.

If the Custom Action batch file is going to run an action that following actions are dependent on (example: batch file stops a service so a custom action can run a .exe), then utilize the CALL command.
The call command will allow the custom batch file to return an exit code to the Protect Generated Batch file so it can continue on its jobs, once the custom batch file finishes.

Example: Call%PATHTOFIXES%Install\stop_services.bat


If the Custom Action batch file is going to present the end user with information that should stay open (example: a custom message that the batch file shows), then utilise the STARTcommand.
The Startcommand will begin the custom batch file, and once it has started, the Protect Generated Batch file will continue without waiting for the custom batch file to close.

Example: Start%PATHTOFIXES%Install\show_warning.bat

These are CMD commands, not Shavlik custom variables. More info on CMD commands here: http://ss64.com/nt/

Custom Action - Using the Null Patch

Shavlik Protect 9.x
vCenter Prtoect 8.x

This document outlines how to scan for the Null Patch, then use custom actions to stop a Windows Service with a batch file, and install a 3rd party program.

Custom Actions only run during a deployment. Deployments can only occur if a scan has found a missing patch it can deploy. In some situations it may not be desirable to apply missing patches to a computer, or there may be no missing patches to deploy. In either case you can scan for Custom Action patches/The Null patch. The Null patch is a file created by Shavlik, that will alwaysshow as missing, and when ran does absolutely nothing. It provides a way to run a deployment and only modify the target computer based on the custom action.

Related Document: NullPatch.exe/Noop.exe Information

This video goes over how to setup a scan to find the custom action/null patch.

A Custom Action is associated with a Deployment Template, which means it can only be used during a deployment. Now that there is a missing patch available to deploy (re: Scanning for Null Patch), this video will cover how to setup a custom action for use.

In this video, we setup a custom action to stop a service using a batch file, and then install a 3rd party program.

Shavlik Protect 9.x
vCenter Prtoect 8.x

Recently upgraded from version 8 to version 9, all went very smoothly, except I can no longer scan or patch my VMWare Offline Templates.

I get error code 802, Unable to open virtual disk

The credentials have not changed, and I've tested that all three templates successfully convert to VM's and boot up.

Anyone else come across this problem or got any ideas ?

Hi

Here in Norway we will change to summer time next Sunday and this will change all our scheduled tasks on the Shavlik Server. How can we prevent this from happening? How can we maintain the scheduled time that we want, and not get an hour later.

Hi

I scanned my system using vCenter Protect 8.0, the scan lists only 80 as installed patches.

But when I browse for installed patches via widows control panel, I see about 265 as installed patches, attached screenshots for vCenter scan and Windows Updates.

Can anybody explain why I see a difference?

Thanks

Srikanth Badireddy