Quantcast
Channel: Shavlik User Community : All Content - Ivanti Patch for Windows
Viewing all 2126 articles
Browse latest View live
↧

Bug with Export Visible Patches to CSV in v9.x

May 15, 2014, 12:20 pm
$
0
0

Hi there,

 

I wanted to see if this was fixed in 9.1 before posting but it appears not.  So instead would like to report a bug.

 

Scenario:

  • Go under View / Patches
  • Under search type in something pretty specific like MS14-02 - this narrows down the list of patches to a small set
  • Now from the Patches drop-down, choose Export visible patches to CSV. 

 

Expected result:

  • I would expect a CSV file containing only the patches that meet my MS14-02 search criteria
  • Help documentation states that patches visible in the top pane will be exported

 

Actual result?

  • All patches are exported
  • The resulting CSV file is 38MB
  • Compare this with Selecting all of the patches in the top pane, then right-click Export selected patches to CSV.  The resulting CSV file is 260kB

 

So it appears to be a small bug.  No worries, I've seen that I can work around it by using Select all, but it seems that the 'Export visible' feature is broken, and I thought I should report what I found.

 

I'm not looking for a solution, but an acknowledgement would be nice.  We'll fix it in a future minor update some day...something like that.

 

Thanks,

Sandra

↧
Search

windows updates

May 15, 2014, 12:09 pm
$
0
0

is it normal that when you run a scan on windows 7 machines , and it picking up 5 updates of the 8 updates of may patch tuesday ?

missing not being detected by shavlik

KB2825635

KB2871997

KB2952664

KB915597 " Windows Defender never gets installed although i had that enabled in the list os scans

KB2880505

 

 

rebooted and scanned many times after that it still wont detect them as missing

thanks

↧
↧

May 2014 second Tuesday Patch scanning

May 15, 2014, 2:58 am
$
0
0

Hi,

 

I have a Windows 7 machine on which I have installed Microsoft .NET 1.1 and 4.5.1.

 

I scan this machine for May 2014 patches using Shavlik Protect. Interestingly the scan shows missing patch for .NET 3.5.1 (Q2931356) which I have not installed on my machine at all.

 

Why Shavlik Protect is showing up this patch as missing eventhough my machine does not have .NET 3.5.1?

 

Any help would be appreciated.

 

Thank you

Srikanth Badireddy

↧

Will Protect wake remote pc if it's in hibernation mode?

May 15, 2014, 1:02 pm
$
0
0

Will Protect wake remote pc if it's in hibernation mode?

 

Is there any power settings we need to be aware of?

 

Thanks,

Dan

↧

Problem Synchronizing distribution servers

May 16, 2014, 8:54 am
$
0
0

Hello everyone

 

i am having problems with synchronizing my repositories with

- the local console server

- a NAS (FreeNas)

 

Both times i get an error 1307 (error 1307 this security id may not be assigned as the owner of this object) when i try to synchronize the core datafiles.

Am i missing some kind of permission here? Even "Everyone Full Control" and some more permissions did not help.

It seems the system always tries to modify the OWNER of the "PowerShellModules" directory to different permissions ...

Why is that happening and can i change that?

 

Thanks in advance

Joerg Hermanns

↧
↧

How to Schedule Scans for a Specific Occurance/Date

April 21, 2014, 10:08 am
$
0
0

1604_157_49_cache.png

 

Purpose


This document outlines how to schedule scans to occur on specific occurances of a specific day or a specific date.
Example: The First Sunday of the Month.
Example: The 20th of the Month.

 

Steps


Scans for specific occurances of a day are handled in similar manners, but different locations depending on if they are used Agentlessly or with Agents.

Agentless

On the Home Screen, select the machine group(s) to be scanned.
Under Step 3. Select schedule choose Recurring:
Select Monthly


Specific Date

Select Day, and designate what day to have it run.
Example: Day 20 will run the scan on the next occurrence of the 20th day of the month. (If creating the scheduled scan on the 21st, it will wait to run on the next occurrence which would be in a month).

 

1- scan on 20th.png

Specific Day Occurrence


Select The and set the occurrence value (First, Second, Third, Fourth, Last) and the day of the week to run.
Example: The First Sundaywill run the scan on the first Sunday of the month. If scheduling the scan after the First Sunday has occurred for the current month, it will run at the next occurrence.

 

scan on first sunday.png

 

 

Note: Scans can only be scheduled with a single occurrence. Create additional scans if multiple occurance's are desired.

 

Example: To have a scan occur on The First and Third Sunday, create the first scan using the First Sunday parameters, then create a second scan for the Third Sunday.

Agent Based

Open the Agent Policyto edit.
Select the Patchtab.
Create a new Patch Task, or expand an existing Patch Task to Edit.
Under the Schedule, select Once per month:

Specific Date

Select Day, and designate what day to have it run.
Example: Day 20 will run the scan on the next occurrence of the 20th day of the month. (If creating the scheduled scan on the 21st, it will wait to run on the next occurrence which would be in a month).

 

agent - scan date.png

Specific Day Occurrence

Select The and set the occurrence value(First, Second, Third, Fourth, Last) and the day of the week to run.
Example: The First Sundaywill run the scan on the first Sunday of the month. If scheduling the scan after the First Sunday has occurred for the current month, it will run at the next occurrence.

 

agent - first sunday.png


Note: Scans can only be scheduled with a single occurrence. Create additional Patch Tasks if multiple occurance's are desired.

 

Example: To have a scan occur on The First and Third Sunday, create the first Patch task using the First Sunday parameters, then create a second Patch Task for the Third Sunday.

 

Affected Product(s)


Shavlik Protect 9.x

↧

Manual installation of agent fails on registration.

January 20, 2014, 12:34 pm
$
0
0
Symptoms

 

Manually installing an agent fails during the registration process.

  Error found in registration.log

  • 'Error during registration. Error: Error 1300: Not all privileges or groups referenced are assigned to the caller'

  Error found  in the STAgentUI.log

  • 'Error 1314: A required privilege is not held by the client'
  • 'class STWin32::CWin32Exception at X509Certificate.cpp:65: Error 5: Access is denied'

 

Cause

 

This error is seen if the user account used to install the agent does not have the correct permissions.

 

Resolution

 

Ensure the SYSTEM account, as well as the user installing the agent has full control over C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder as well as the files in the directory.

 

Add required rights in User Rights Assignments.

 

     Known rights needed to install and register agents.

    • "Act as Operating System"
    • "Take Ownership"

 

1. Open Local Security Settings.
2. In the console tree, click User Rights Assignment.
   - Security Settings/Local Policies/User Rights Assignments
3. In the details pane, double-click the user right you want to change.
4. In UserRight Properties, click Add User or Group.
5. Add the user or group and click OK.

*Note: To open Local Security Policy, click Start, point to Settings, click Control Panel, double-click Administrative Tools, and then double-click Local Security Policy.

You can also check what rights the current user has by running the following command from a Windows Command Prompt.

>whoami /priv

 

Additional Information

 

Settings are applied in the following order through a Group Policy Object (GPO), which will overwrite settings on the local computer at the next Group Policy update:

Local policy settings
Site policy settings
Domain policy settings
OU policy settings

*Note: When a local setting is greyed out, it indicates that a GPO currently controls that setting.

 

Affected Product(s)


Shavlik Protect 9.x


↧

Exclude Machines During Scans

May 22, 2014, 8:44 am
$
0
0

1604_157_49_cache.png

 

                 

Purpose


When scanning a non-discriminat group of machines, such as by ip range, or OU, Protect will try all machines that exist as part of the group. In some situations it may be desirable to exclude certain machines.
Example: Scanning an IP range that contains many machines that should be patched, and one machine that cannot be patched on the same schedule as the others.

 

This document outlines how to exclude one or more machines from during a scan.

                 

Solution


Open the machine group that you will be using to scan against.
The machine group will show your machines that are going to be scanned.

 

Example: In this machine group, Protect will scann an ip range of 5.5.5.1-5.5.5.255

 

1-iprange.png

 

Add the machine(s) that should be skipped. This can be done by IP, Netbios, FQDN. These will by default be added and Included in the scan.

 

Example: Added a machine called 'SkipThisMachine' and a machine with IP 5.5.5.100

 

2-machines added.png

 

After the machines to be excluded have been added into the machine group, right click each and choose 'Exclude'.

Note: Holding CTRL while selecting allows you to highlight multiple entries at once, at which point you can right click any and it applies the changes to all that are highlighted.
Note: Alternative to right clicking, you can click the 'When Scanning' box at in the machine group and choose 'Exclude'.

 

3- exclude.png

 

 

 


The machines should now show Exclude under the When Scanning column. This will prevent the machine from being scanned and showing up in the scan results.
Note: In version 9.0 the operations monitor during a scan will list machines that have been excluded (only for informational purposes - no scan results occur for that machine). In verisn 9.1 it will not list excluded machines in the operation monitor during a scan.

 

4-excluded.png

 

 

                 

Affected Product(s)


Shavlik Protect All

↧
Search

Protect 9.1 Install Guide

May 23, 2014, 9:42 am
↧
↧

Protect Installation File Hash Values

December 17, 2013, 11:37 am
$
0
0

Template

1604_157_49_cache.png

 

 

Purpose     


This document outlines the hash values of the Shavlik Protect Installation Files. These can be used to verify a download file.

 

 

 

Hash Values  

Protect 9.1.4334 Full Installer

 

Filename
ShavlikProtect_9.1.4334.exe
File Size
84,995,352
File Version
9.1.4334.0
Product Version
9.1.0.0
MD5
786a4401fe772469acb42d59bb1484a4
SHA1
d907390bfd418fdb1de24bb062791360b09a5d04
CRC32
527b4a05
SHA-256
486dca9333607dfc7267db8bb2162826c76199387e4e151f03e6e54cf351cf36
SHA-512
807cbe3f40fdc98ca4513d615375504be747217853578691652597ff5984852fcf6b780284266f8c90fca8292913b4fb66e68ab96ec0e3bde8c126507710bab2
SHA-384
2311b3ed71f7e3e0e4736188dc7525b42e8609653cd9a87f689439f242be2a8d1dcc52e895281bb71618664ba16beaff

 

 

Protect 9.0.1182 Full Installer

Filename
ShavlikProtect_9.0.1182.exe
File Size
162,007,000
File Version
9.0.1182.0
Product Version
9.0.0.0
MD5
fb160b644146581db5ae9746156a3d91
SHA1
1669eeba501c63029bf8e3deb45ab1467169771c
CRC32
1a84322a
SHA-256
b1e3882490f4243f14d3d255b9b29307e6a521ac7a53f80fd1a0580df3f0fac7
SHA-512
38f2c841a742f664d545ab0ac232c83275a42e8badd94434f59ef96d3961688a156b681ff199f02f984dcdb4f3641a2506bdfcb157a4e6ff776c999deedf67ca
SHA-384
dd2038e00d95e711793b9f62419f306feda934622f1eb31fe62455b309bba61b7b7a60502324fd67e0dfeded975953e1

 

 

 

Protect 9.0.1182 Update Only

 

Filename
ShavlikProtectPatch_9.0.1182.exe
File Size
71,556,056
File Version
9.0.1182.0
Product Version
9.0.0.0
MD5
da858904cf8b3dabedede27e43d43546
SHA1
76b054cb23de0f0cfe453b4a1a8e0dc11373ad6b
CRC32
3ec9cf6b
SHA-256
2de88334ea08a2d24f7a0384079f5154abdc6925d04a3025938aecdba7daeb41
SHA-512
0dccb3beab842a9c6e12ef47db0fb2285a9586b3568a0fbee7e1e2465bb3bcff31b02614dad5ce3710b1b15c993198eb27ed37d8509bb9d84e171f3286a220d1
SHA-384
9645f72c6376258611bdd5a67ae4ce5444aafc34a3366edd831d9d79ea6bae38695d2312d2c3fd58002fdfcaae300ecc

Protect 9.0.1106 Web Installer

 

Filename
ShavlikProtectWeb_9.0.1106.exe
File Size
1,214,424
File Version
9.0.1106.0
Product Version
9.0.0.0
MD5
e28446e314541d91ed7c65e94649ce83
SHA1
ac0a0228ec857f37047e5d391f0633c3bfec11b1
CRC32
fb105a41
SHA-256
cbeb841e8e5bf860947640d84482013f935bea5e39b5109c1221239919bbf998
SHA-512
f70db110123214bd17337b15799164fef02019889be0aa9cc4fab804fe4f0aefea4b4be705bac96eac54421e94d5ca6f4c9c4eda2e512f148f65a7058cd49380
SHA-384
6582f84f9074c7bae587bd13107ec27ba400f79e98eec1afe86ba067e24bfc2702539b1c0392105d174b3960b041dc23

 

 

 

Protect 9.0.1106 Full Installer

 

Filename
ShavlikProtect_9.0.1106.exe
File Size
161,466,328
File Version
9.0.1106.0
Product Version
9.0.0.0
MD5
fadaa2b124649cd564b253964e74bbb4
SHA1
fa1871c7c4ffea58c53869780d691c18166b9864
CRC32
1e8ee18d
SHA-256
6cf3e73de8c522909e1cf2cae296af05bbdbb682558676a9ca432ed9b52527b2
SHA-512
cd8e611e1a48d170fe3b615b5c1382570e685e18887fd3267399167539d9c3aec35f5bb31279dff7ffb28d453e402d6b5207c516579271991c92f6a256ffb4bb
SHA-384
073161bbe4c41282950bf057ae3f15f1075275343a01be54ef128e4e2f0b86b1b0770deaeb0dc57276ee55bef671deb9




Protect 8.0.2 Full Installer

 

Filename
VmwareProtect_8.0.2_4027.exe
File Size
61,346,328
File Version
8.0.4027.2
Product Version
8.0.0.0
MD5
714eaea1b2efdd6af1349f4a192554ea
SHA1
d2e594b5a5e22c868662c3ffbc636389309c42d2
CRC32
8c47ff91
SHA-256
3522f4cd83ed1b12b855339be3ddb1a4f5d8fe2ad051009d0314a121f919156b
SHA-512
be054bde744389545536ced64dc7d1d6fd7495ca9838aa8b1848f16ca4afe4fdfc904007e0b65e8ce40901c0c2b66b59e3ffa3603243d5ca0e3940ac730b74b1
SHA-384
6854727824fe07dac804de169b20c843142db56fe0990e16537d460c5850f4d0e55c1d83cd968af6bb127404e11ba203





 

Affected Product(s)


Protect Version: All

↧

Scans Show Few/No Missing Patches and No Installed Patches.

May 23, 2014, 12:27 pm
$
0
0

1604_157_49_cache.png

 

Symptoms


Any of the following symptoms may apply:

 

  • When scanning any machines there are 0 patches missing, 0 patches installed.
  • When scanning any machine the only results are Informational patch type.
  • When scanning any machine it shows a small number of patches missing, and none installed.

 

results of wuscan.png

 

Cause


This is often caused by Protect's licensing becoming corrupted causing it to not find active licensing for specific patch types.

 

Solution

 

  1. Verify the issue is being caused by a licensing issue.
  2. Enable verbose logging, and clear existing console logs.
  3. Run a patch scan against a single test machine, using the WUScan template.
    • It is important to use the default WUScan template as it will rule out any custom filtering as the cause of the issue.
  4. Verify the results return with same symptoms.
  5. Open the newly created HF log:
    • "C:\ProgramData\LANDesk\Shavlik Protect\Logs\hf.username@username-pc.log"

  It is important to have deleted any previously existing logs before running this test. This will cause Protect to create a new single HF log file for review.

  1. Search in the HF.log file for the phrase   Not licensed to scan Patch type


2-search.png

 

  1. If an entry is found indicating Not licensed to scan Patch type [###], Protect needs to have its license re-activated.

 

  The value of the Patch Type may vary.
  This will not affect your subscription. This will only validate that the program is still licensed for operation.


3-search results.png

  1. After successfully re-activating the Protect Console, scans should yield correct results.

 

Affected Product(s)


Shavlik Protect All

↧

HF_Periodic_Job shows in Scheduled Task Manager

May 29, 2014, 7:54 am
$
0
0

1604_157_49_cache.png

 

 

Purpose

 

The purpose of this document is to provide information on why the 'HF_Periodic_Job' can show up in the Scheduled Task Manager within Protect.

 

Symptoms

 

Upon accessing the Scheduled Task Manager within the Console, an unscheduled job entitled 'HF_Periodic_Job' is shown as depicted in the image below:

 

hf.jpg

 

 

 

 

 

 

 

 

 

 

 

 

Cause

 

The 'HF_Periodic_Job' is an internal job that is used mainly for the deployment tracker. This job will run every two hours until the target machine can send tracker information to the Console machine. If the job is successful, it is removed. If the job is unsuccessful, it will continue to run for fifteen days and then be removed from the Scheduled Task Manager. This internal job will not deploy any patches nor invoke a reboot of the target machine or server.

 

Affected Product(s)

 

Shavlik Protect 9.x

↧

Error loading patch definitions Bulletin '-1' could not be found.

May 23, 2014, 7:36 am
$
0
0

Template

1604_157_49_cache.png

 

 

Symptoms


When performing certain tasks within Protect, the console crashes and gives an error: Error loading patch definitions Bulletin '-1' could not be found.

 

Tasks that may cause this include:

  • Help - Refresh Files
  • Tools - Custom Patch Editor
  • Manage - Custom Patches
  • View - Patches
  • Opening Patch Groups
  • Opening Scan Templates


  The Bulletin value may vary.

 


Logs will indicate this error:

2014-05-23T14:44:05.1417481Z 0003 C Launcher.cs:73|ST.UI.UserViewableException: Error loading patch definitions: Bulletin '-1' could not be found. ---> System.InvalidOperationException: Bulletin '-1' could not be found.
   at ST.CustomPatch.Data.CustomPatchFileReader.FindBulletin(AssessmentData assessmentData, IReadOnlyDictionary`2 bulletins, UserGeneratedPatch customPatch)
   at ST.CustomPatch.Data.CustomPatchFileReader.CreateBulletins(AssessmentData assessmentData, IEnumerable`1 customPatchFiles)
   at ST.CustomPatch.Data.CustomPatchFileReader.AddCustomPatchesToCatalogData(AssessmentData assessmentData, PackagingData packagingData, IReadOnlyCollection`1 customPatchFiles)
   at ST.UI.Controllers.CatalogData.CatalogDataModelBuilder.<BuildAsync>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccess


 

Solution


The error is caused when trying to read in the ST.CustomPatch.config file: "C:\ProgramData\LANDesk\Shavlik Protect\Console\ST.CustomPatch.config"

To correct this, rename the file to ST.CustomPatch.config.old.

 

Affected Product(s)


Shavlik Protect All

↧
↧

On-demand Patching

May 29, 2014, 9:45 am
$
0
0

is there a way to have on-demand scanning and patching? I'd like to have any DR computers that are brought into the building be scanned and patched once they are plugged into the network.

↧

Bug with Export Visible Patches to CSV in v9.x

May 15, 2014, 12:20 pm
$
0
0

Hi there,

 

I wanted to see if this was fixed in 9.1 before posting but it appears not.  So instead would like to report a bug.

 

Scenario:

  • Go under View / Patches
  • Under search type in something pretty specific like MS14-02 - this narrows down the list of patches to a small set
  • Now from the Patches drop-down, choose Export visible patches to CSV. 

 

Expected result:

  • I would expect a CSV file containing only the patches that meet my MS14-02 search criteria
  • Help documentation states that patches visible in the top pane will be exported

 

Actual result?

  • All patches are exported
  • The resulting CSV file is 38MB
  • Compare this with Selecting all of the patches in the top pane, then right-click Export selected patches to CSV.  The resulting CSV file is 260kB

 

So it appears to be a small bug.  No worries, I've seen that I can work around it by using Select all, but it seems that the 'Export visible' feature is broken, and I thought I should report what I found.

 

I'm not looking for a solution, but an acknowledgement would be nice.  We'll fix it in a future minor update some day...something like that.

 

Thanks,

Sandra

↧
Search

Training Videos

September 18, 2013, 5:44 am
$
0
0
↧

Shavlik Protect Landing Page

October 14, 2013, 10:12 am
$
0
0

Shav_logo_no_glow_061213.png

 

This is a list of highly recommended documents for improving general knowledge of the Shavlik Protect product. This article is not a comprehensive list of documents.

 

For the Shavik Protect 9.1 specific landing page, please see document DOC-23514.

 

Initial Installation & Configuration

 

 

 

Licensing Information

 

 

 

Best Practices & How To's

 

 

 

Troubleshooting & Common Issues

 

Installation & Upgrade

Obtaining Trace Logs

Scanning & Detection

Patch Deployment & Shavlik Scheduler

Database Related

Agents

Other

 

 

Other Useful Information

 

↧
↧

Export Visible Patches to CSV does not create expected result

May 29, 2014, 12:51 pm
$
0
0

Symptoms

 

Scenario:

  • Go under View / Patches
  • Under search type in something pretty specific like MS14-02 - this narrows down the list of patches to a small set
  • Now from the Patches drop-down, choose Export visible patches to CSV.

Expected result:

  • I would expect a CSV file containing only the patches that meet my MS14-02 search criteria
  • Help documentation states that patches visible in the top pane will be exported

Actual result:

  • All patches are exported
  • The resulting CSV file is very large in size.
  • Compare this with Selecting all of the patches in the top pane, then right-click Export selected patches to CSV.  The resulting CSV file is much smaller.

Resolution

Shavlik support has a defect entered for this issue, and it should be fixed in a future release of Protect (unknown ETA).

 

Workaround: For the time being the best workaround is to select all in the grid and right click, then choose export visible patches to CSV.

 

Affected Product(s)

Shavlik Protect 9.1.0.4334

Shavlik Protect 9.0.x

 

 

This document was generated from the following discussion: Bug with Export Visible Patches to CSV in v9.x

↧

How to check Protect Definition Versions

June 2, 2014, 3:52 pm
$
0
0

1604_157_49_cache.png

 

Purpose

 

This document outlines how to verify that the Protect Console is using up to date Content/XML/Definitions.

 

Symptoms

 

Out of date content can typically cause:

  • Incorrect patch scanning
  • Incorrect patch deployment commands
  • No new patches available


Cause

 

Protect utilizes what is known as Content/XML/Definitions to determine what patches are applicable for target machines, as well as how to install patches. As new patches are released by vendors, or modifications are needed for specific patch files, the Content/XML/Definitions are updated by Shavlik and released to users. These releases occur Tuesdays and Thursdays (and typically the Monday before Patch Tuesday). Using out dated content can result in patches incorrectly being offered, failing to install, or if its a new patch, it might not be offered because the information contained within the Content/XML/Definitions is not current.

 

Resolution

 

There are several ways to verify Protects content versions.

 

Help > About

 

Within the Protect console, click Help > About


The window that opens will show the definition versions on the right hand side with corresponding icons.

Green Check-marks are used to indicate up-to-date.

Red X's are used to indicate out-of-date.

 

Note: In offline environments where the console does not have internet connectivity, the icon displayed can be incorrect as it is unable to correctly determine the latest information from Shavlik servers.

 

1-help about.png

 

Online

 

New definition summaries are posted at this website with each release: http://protect7.shavlik.com/

 

Visit the website to view the latest release version and compare against the version found in Protect under Help > About

 

Note: This only applies for Patch Assessment and Patch Deployment, both of which should have matching values.

 

2-online.png

 

Updating Content

 

If after reviewing the latest definition versions it is found that Protect needs to update its versions, this can be completed by clicking Help> Refresh Files.

 

3-refresh files.png

 

Affected Product(s)

Shavlik Protect All

↧

Last 5% of scans take forever

May 2, 2014, 9:27 am
$
0
0

This seems to happen with every scan I run. The first 95% of machines scanned during any scan go by very quickly, however the last 5% take a rediculous amount of time. Right now I'm scanning 229 computers for one MS patch. The first 221 finished in about 15 minutes. The remaining 8 have been ticking by 1 every 10-15 minutes.

 

First, how can I see exactly which computers are taking so long?

 

Second, how can I alleviate this issue?

 

Thanks!

↧
Viewing all 2126 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>