Quantcast
Channel: Shavlik User Community : All Content - Ivanti Patch for Windows
Viewing all 2126 articles
Browse latest View live

Java 7-71

$
0
0

Hello everyone,

 

I have tried to deploy the latest Shavlik patch for Java (Java 7-71 CPU) and it has failed repeatedly - returned: 3010.

 

Windows 7, 32 bit OS. Any ideas?

 

Thanks,

 

Paul


Scripting shavlik protect-

$
0
0

Is anyone programatically accessing shavlik to kick off scans or otherwise manipulate the scheduler?  We are working on automating our patching process to interface with our CMDB and ticketing system and are having trouble finding any reference material about manipulating the scheduler or extracting schedule information from the protect db.  Is anyone doing this?

 

We have the scan part down pretty well - we export from our cmdb to txt files which shavlik uses to scan, but we would like more control of the actual depoloyment process.  Our CMDB is the source for truth on which maintenance window each server is patched in (many hundreds of servers).  We are basically looking for a way to control the deployment phase of the process externally.  The only command line, powershell, api, etc i've found documented is just the scheduler service command line utility, which i take to primarily be intended to be run from the client side.

 

 

Any help would be appreciated.

Why Protect scan is different from Windows Update

$
0
0

Hello all,

 

We are using a custom scan template to Scan the servers.

 

Last week(25/10/2014) we patched the servers and from Shavlik after we deploy all the patches we did scan and we found zero patches missing.

 

At the same day we searched for the windows update and we found that some of updates are still missing!!??

 

Kindly may I know why this difference happening?

 

Awaiting your valuable response.

 

Thanks,

Deployment machine name match failed, expected 'Machine Name', actual ''

$
0
0

Symptoms

 

Deployment fails with the following error:  "Deployment machine name match failed, expected 'Machine Name', actual ''

 

You can also see this error you the ST.Protect.Native.log located at

C:\ProgramData\LANDesk\Shavlik Protect\Logs

 

Deploy.cpp:1837 DeployMachine exception - class STCore::CInvalidOperationException at Deploy.cpp:1305: Deployment machine name match failed, expected 'MachineName', actual ''.

Deploy.cpp:1869 Error Deployment machine name match failed, expected 'MachineName', actual ''

 

Cause

 

The credentials in the Machine Properties are incorrect for this machine.

 

Solution

 

In Machine view highlight the machine, right click and navigate to Machine Properties. Then assign the correct credentials.

MP1.PNG

MP2.PNG

 

Affected Products

 

Protect 9.1

Install/Uninstall - How to clean up broken installs of Shavlik Protect with the Microsoft Fixit Tool

$
0
0

Symptoms

You may see a pop-up error:

Protect Setup:


Error 1603: A fatal error occurred during installation

Error 1605: This action is only valid for products that are currently installed.

Error 1612: The installation source for this product is not available. Verify that the source exists and that you can access it.

 

You may see a message that says "protectinstaller.msi was not found".

 

Purpose

This article provides information on manually un-installing Shavlik Protect. This document is generally meant for the purpose of cleaning up a bad or broken installation of the Protect application.

 

Cause

Occasionally, the application may not be removed completely due corruption to the Windows Installer, Installer folder or other corruption to the automated uninstall process. When this occurs a manual un-install of the application is necessary.

 

Resolution

You may need to use the steps below to perform a manual uninstall of the application, and then re-install as necessary.

 

Microsoft provides assistance with the manual uninstall process by providing a Fix it tool.  The link to the tool is:  http://support.microsoft.com/mats/Program_Install_and_Uninstall

 

Here are instructions on how to use the Fix it tool

  1. Use the link above to navigate to the Fix it main page.
  2. Click on ‘Run Now’ and choose ‘Save File’.
  3. Run the EXE that is downloaded and choose ‘Accept’ on the first page.
  4. Choose the second option ‘Detect problems and let me select the fixes to apply’.
  5. Choose the ‘Uninstalling’ option
  6. You will see a list of the installed products on the server.  Choose the product if you see it on the list for instance. ‘Shavlik Protect’.  If you do not see the product on the list then select ‘Not listed’.

If Shavlik Protect, vCenter Protect, or Netchk Protect is listed:

  1. Choose the corresponding name and click ‘Next’.
  2. Choose ‘Yes, try uninstall’
  3. Verify both options are check-marked and click ‘Next’.
  4. You should see a screen that indicates whether Protect was uninstalled or not.
  5. Click ‘Next’ and the close out of the screen.

If Shavlik Protect, vCenter Protect, or Netchk Protect is Not Listed:

  1. Choose ‘Not Listed’ and click ‘Next’.
  2. Enter the product code for the version of the Product installed and click ‘Next’. (Include the brackets)

     Product codes for Protect are listed below.

  1. Verify both options are check-marked and click ‘Next’.
  2. You should see a screen where it indicates whether the product was uninstalled or not.
  3. Click ‘Next’ and the close out of the screen.

 

Product GUID codes:

Make sure to use the corresponding GUID for the version of Protect you are attempting to uninstall.

Protect 7.0.832.0: {C6D1AE7C-DE93-4E93-A916-C4144525C82C}

Protect 7.0.841.0: {C6D1AE7C-DE93-4E93-A916-C4144525C82C}

Protect 7.1.410.0: {90047C28-0B1B-4B30-8177-50729907EBF2}

Protect 7.2.155.0: {9B7F1E45-4C47-4E25-9EAB-098923E4171C}

Protect 7.5.2716.0: {CEA2D643-08C0-422E-9B27-B58ED9D38D07}

Protect 7.6.1482.0: {661A3308-5BE2-4E0F-A752-BDDB247DD2DB}

Protect 7.8.1340.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}

Protect 7.8.1388.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}

Protect 7.8.1392.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}

Protect 8.0.3756.0: {F77AFB04-D13F-48DA-BB99-A5B31B6AAE0B}

Protect 8.0.3965.1: {5A696B05-9F06-4B3D-83A0-69E848EFAC4A}

Protect 8.0.4027.2: {5A696B05-9F06-4B3D-83A0-69E848EFAC4A}

Protect 9.0.1106.0: {8045AD29-C6A4-43F5-9F1F-9560EB09F99A}

Protect 9.0.1182.0: {070964CB-00B0-4E36-A3F6-A09F76FBD197}

Protect 9.0.1182.0  {B7F5FF6F-382B-8834-3B85-B6390F7F4DA1}

Protect 9.1.4334.0: {83593D3F-ADD7-491B-82EC-1A2E6D08C385}

ScriptLogic Patch Authority Ultimate 8.0.3756: {A8210996-CD25-4C8C-A2D7-207635DEDC28}

ScriptLogic Patch Authority Ultimate 8.0.4027: {86DE6110-3F1C-40EE-98D9-05CD7A4B212F}

ScriptLogic Patch Authority Ultimate 9.0.1182: {0EAD1B8A-6F58-2304-A817-34C1724CE04C}

 

At this point, install the latest version of Protect.

 

If you continue to encounter any install errors, contact Shavlik support. (http://www.shavlik.com/support/contact/)

 

If the Fixit tool fails to correct the error, you may need to manually delete an upgrade key located under HKEY_CLASSES_ROOT\Installer\UpgradeCodes in the registry. Then try reinstalling Protect with the latest installer.

 

Latest versions of Protect can be downloaded from: http://www.shavlik.com/downloads/

It is highly recommended to perform a backup of the registry before performing any modifications.

How to backup Windows Registry:  http://windows.microsoft.com/en-US/windows-vista/Back-up-the-registry

 

Impact / Risks

The Fixit utility is provided by Microsoft. Make sure you read any known issues or guidelines for this tool on Microsoft's site prior to use.


Affected Product(s)

Shavlik Protect 9.x

Issue with MS13-096 and MS14-036 detection - Shavlik protect 9.0 1182

$
0
0

Hello,

My console reports patch MS13-096 as missing on a server for product Sharepoint Designer 2007.

MS13-096 is replaced by MS14-036 that is well installed on this server. I don't understand why Shavlik detects a superseeded patch when the superseeding one is well installed on the server. It seems superseeding doen't work correctly in this case. Please help

Thank you

Get_Protect_Info batch file that can be used to obtain information for support

$
0
0

Purpose

 

The attached .bat file is designed to collect information that may assist the support team in diagnosing and resolving issues with the Protect application.

 

This batch file will collect trace log files, event logs, registry entries, config files, and other information that can provide great information to support for diagnosing problems.

 

This .bat can prove useful on any system where you are currently having issues with the Protect console or a Protect agent.

 

This file is intended only to obtain information for support purposes. It is not an officially supported tool and has not gone through QA/Testing. The user assumes any risks of running the attached file(s).

 

Instructions

 

1) Download the attached Get_Protect_Info.bat.zip.

 

2) Extract the Get_Protect_Info.bat to the desktop of the Protect console system or agent system where you wish to obtain files for support.

 

3) Right click the Get_Protect_Info.bat, choose 'Run as Administrator'. For older operating systems such as XP or 2003 this will not be necessary - just run the file.

 

Note: If you do not run as administrator the batch file may not be able to obtain all information.

 

4) Allow the .bat to run through everything. It may take some time.

When the operation is complete you will see the text of commandline turn green and the following text displayed:
Complete
Press any key to continue...

 

Note: If you do not see this you need to either run as administrator or wait until the operations are complete.

 

5) A folder titled 'ProtectLogs' will be created at the root of C:\, containing all the files collected by the .bat.

 

6) Please create a compressed file of this folder. It is suggested to use 7zip for compression. 7zip will compress to a smaller file size than the built in Windows compression, and it allows for creation of an encrypted 7z or zip file. You can download 7zip here: http://7-zip.org/download.html

 

7) Send the 7z or zip file of the ProtectLogs folder to support.

 

8) The folder C:\ProtectLogs can be deleted after this.

 

Risks

 

This .bat file may retrieve some files containing sensitive system or network information. Make sure you review the files that are collected prior to sending if you believe this poses any security risk for you. This is why it is also highly recommended to place the files within an encrypted or password protected zip or 7z file before sending.

Trying to deploy shav tools to a physical box

$
0
0


Hi Guys

I have just recently noticed that Shav is trying to update VMTools on a PHysical box, not sure why.

How can I stop it thinking it needs this update.

 

Thanks

steve


How To: Manually updating patch data files for Shavlik Protect

$
0
0

Purpose


When running the Shavlik Protect in a secure environment without Internet access, it is necessary to download the latest data files on a system that has internet access and then transfer them to the console machine.

 

This article applies only to patch data.

 

Description

 

This article discusses both methods:

 

  • PowerShell (Highly Recommended)
  • Individual file download (All Files Are Required)


PowerShell

To use the PowerShell script:

  • Download and install PowerShell 1.0 from Microsoft, if it is not already installed. For more information, see Microsoft KB article 926140.
  • Shavlik NetChk Protect and VMware vCenter Protect patch files are released twice per week. To download the patch files, you can use a PowerShell script to automate the process or you can download each file individually.
  • If you need a compression utility, download and install the 7-Zip extraction utility from http://www.7-zip.org/download.html.

          Shavlik does not endorse or recommend any particular third_party utility.

 

  • Create an output directory.
  • Download and extract the PowerShell script attached to this article: DownloadProtectData90.zip

 

  This script works for all versions of these products.

 

  • Open a command prompt.
  • Enter PowerShell by typing powershell.
  • Navigate to the location where you extracted the PowerShell script.
  • At the PowerShell command prompt, launch the script with this command:

    .\DownloadProtectData90.ps1 "<outputdirectory>" <major or minor version> "<7-zip directory>"

      The command begins with the characters . before the script name. These characters are required if the script is in the current working directory. If you are in a different directory, enter the full path to the script.

    The major/minor version argument has a two-digit value. Use the value corresponding to your version:

 

  • Protect 9.0: 90
  • Protect 9.1: 91


Example:


The command you run looks like this: .DownloadProtectData90.ps1 "C:\Data" 90 "C\:program Files\7-Zip"

The command has these elements:

    • .\DownloadProtectData.ps1: This is the script itself.
    • c:\Data: This is the folder to which you are downloading the data files.
    • 90: This is the version of vCenter Protect or Shavlik Protect files you are downloading.
  1. Type exit to leave PowerShell.
  2. Navigate to the folder containing the data files and move or copy them to the DataFiles folder on the Shavlik Protect or vCenter Protect server in the DMZ. This is the default location:

      If the files already exist in the output directory, they are overwritten.
    • 8.x on Vista, 2008, & Windows 7: C:ProgramData\Shavlik Technologies\NetChk\DataFiles
    • 8.x on Windows XP or 2003: C:Documents and Settings\All Users\Application Data\Shavlik Technologies\NetChk\DataFiles
    • 9.x on Vista, 2008, & Windows 7: C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles
    • 9.x on Windows XP or 2003: C:Documents and SettingsAll UsersApplication Data\LANDesk\Shavlik Protect\Console\DataFiles
    1. You may see this error:

      execution of scripts is disabled on this system

      If this occurs, enable the execution of scripts by entering this command:

      set-executionpolicy RemoteSigned

        This command is case-sensitive.


      Alternatively, you can sign the script instead of changing the execution policy. For more information, see http://www.hanselman.com/blog/SigningPowerShellScripts.aspx  The preceding link was correct and last checked as of June 11, 2013.

    Individual file download


    You can manually download the necessary data files. To download the files:

    1. Right-click each link and select Save Link As.
    2. Save the files to the console, in the DataFiles folder. This is the default location:
      • 8.x on Vista, 2008, & Windows 7: C:ProgramData\Shavlik Technologies\NetChk\DataFiles
      • 8.x on Windows XP or 2003: C:\Documents and Settings\All Users\Application Data\Shavlik Technologies\NetChk\DataFiles
      • 9.x on Vista, 2008, & Windows 7: C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles
      • 9.x on Windows XP or 2003: C:Documents and SettingsAll UsersApplication Data\LANDesk\Shavlik Protect\Console\DataFiles

     

      The Protect console requires both the .CAB and the files archived within the .CAB files for Protect to function correctly. The PowerShell script downloads the .CAB files, places the files in the output directory, and extract the files to the output directory. You need to manually extract the .CAB files using an archiving tool like 7-Zip if you choose to manually download the .CAB files.

     

    Update files for Shavlik Protect 9.0:

     

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.exe

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe

    http://xml.shavlik.com/data/hf7b.xml

    http://xml.shavlik.com/data/pd5.xml

    http://xml.shavlik.com/data/iadata.xml

    http://xml.shavlik.com/data/ai_dpd.xml

    http://xml.shavlik.com/data/scriptcatalog.zip

    http://xml.shavlik.com/data/assetinventory.xml

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.cab

    http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.cab

    http://xml.shavlik.com/data/hf7b.cab

    http://xml.shavlik.com/data/pd5.cab

    http://xml.shavlik.com/data/iadata.cab

    http://xml.shavlik.com/data/ai_dpd.cab

    http://xml.shavlik.com/data/hypervisors.cab

    http://xml.shavlik.com/data/assetinventory.cab

    http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.cab

     

    Update files for Shavlik Protect 9.1:

     

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.dll

    http://xml.shavlik.com/data/hf7b.xml

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.exe

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.exe

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.exe

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.exe

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.exe

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.exe

    http://xml.shavlik.com/data/pd5.xml

    http://xml.shavlik.com/data/ai_dpd.xml

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/assetinstaller.msi

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/patchinstaller.msi

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/threatinstaller.msi

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.dll

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.dll

    http://xml.shavlik.com/data/iadata.xml

    http://xml.shavlik.com/data/scriptcatalog.zip

    http://xml.shavlik.com/data/supportedHypervisors.obf

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.exe

    http://xml.shavlik.com/data/assetCatalog2.obf

    http://xml.shavlik.com/data/assetCatalogMetadata2.obf

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.cab

    http://xml.shavlik.com/data/hf7b.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.cab

    http://xml.shavlik.com/data/pd5.cab

    http://xml.shavlik.com/data/ai_dpd.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.cab

    http://xml.shavlik.com/data/iadata.cab

    http://xml.shavlik.com/data/supportedHypervisors.cab

    http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.cab

    http://xml.shavlik.com/data/assetCatalog2.cab

    http://xml.shavlik.com/data/assetCatalogMetadata2.cab

    http://xml.shavlik.com/data/Protect/v9/91/manifest/protect.manifest.cab

     

    Additional Information

     

    Shavlik Protect and VMware vCenter Protect consoles that have no internet connectivity, but that still try to download updates automatically can experience other issues. Shavlik recommends setting consoles with no internet connectivity to Disconnected Mode. To enable Disconnected Mode from the console application:

     

    Version 8.x: Go to Tools and select Run Disconnected.

    Version 9.x: Go to Tools and deselect Auto-Update Definitions.

    Document Content Update History

    11/1/2011 - Updated article for VMware vCenter Protect 8.0.x 

    07/16/2013 - Updated article for Shavlik Protect 9.0.x

    05/21/2014 - Updated article for Shavlik Protect 9.1.x

     

    Products

     

    Shavlik Protect 9.x

    Shavlik Protect 9.1 LOOKS like it's patching but nothing get's installed

    $
    0
    0

    Hi,

     

    In running patches out to test machines when I look in the operations monitor it looks like the patches are going through the install process

    one by one. The machine even reboots. But when I do a rescan the machine has not been patched at all. I don't see much activity on the

    client machine in the way of processes and CPU usage.

     

    There is an issue with the license (our purchasing dept. screwed up) so maintenance is past due. But it DID seem like it was working regardless.

    What should I do to troubleshoot this? We also are gearing up for a network accreditation and there might have been some GPO changes also.

     

     

    ...Alan

    Q2880516/MSWU-972 shows as Missing, but when run it's Already installed

    $
    0
    0

    Hi there,

     

    Just noticing that on a number of our SharePoint servers, Q2880516 shows as missing.  But when I run the patch on the server manually, the installer says it's already installed.  Shavlik does not indicate that it's been superseded.

     

    I see that Shavlik is checking for presence of registry key 'SOFTWARE\Classes\Installer\Patches\CBDDAFC89662E564EADC56787E54A6B6\SourceList\PackageName', and indeed this key doesn't exist.

     

    However, the Microsoft KB article for this patch doesn't specify that key for determining if the patch is installed.  Instead, it lists a number of files and their versions for detecting whether it's installed or not.  I checked a few of them, and in fact I have the required versions or newer. 

     

    In googling this issue, I see that there have been other SharePoint patches in the past that contained files that were also included in different patches.  So perhaps this is the case here too - the files are present on the system because they are part of other SharePoint patches that have been installed.  Perhaps Q2880516 needs to check file versions in order to determine if it's missing or not.

     

    Same is happening with SharePoint patches Q2553298/MS13-100 and Q2553408/MS13-067, but I thought I'd focus on just one of the three to raise the issue.

     

    Could we adjust the patch detection so they stop showing as missing?  Please let me know if you need more info like a list of patches already installed on this server, etc., and I can provide.

     

    Thanks,

    Sandra

    Migration tool pulling form old database name - not new

    $
    0
    0

    Hi, I renamed my old Shavlik server and now when I try to use the migration tool to pull over old user profiles, it's trying to connect to the Original database name "originalname\sqlexpress" where as I need it to connect to "originalname-o\sqlexpress". I renamed the sql server name using sp_dropserver 'oldname' and then sp_addserver 'newname', local. I restarted services and that still did not work.

     

    Any suggestions?

     

    EDIT:  Ok I solved this. I had to open the shavlik console and when I did it told me the database was out of sync (or whatever it said). I ran the database config utility, put in the new/correct name and that worked!

    Change in CVE syntax will break Protect without Patch 2 installed for Protect 9.0 and 9.1

    $
    0
    0

    Overview


    There have been an incredibly large number of vulnerabilities this year, which unfortunately is going to cause asyntax change in MITRE CVE-ID.   The current syntax will max out at 9,999 vulnerabilities, so the change is to start adding additional digits.  When the CVE count breaks 10,000, MITRE will be adding an extra digit onto the end of their CVE-IDs.  The resulting CVE change will drive a change in how we import content for Shavlik Protect 9.1 and 9.0.

     

    The deadline for the change is January 15, 2015, but due to the high volume of vulnerabilities releasing this year the change in format may be forced upon us early.  We have released an update for Protect 9.1 and are working on the Protect 9.0 update to prevent the format change from causing issues.  The patch will prevent import of new content from failing, avoiding an inconvenience to our customers.  Protect 9.1 Patch 2 is available now and the Protect 9.0 Patch 2 will be coming in the next couple of weeks. Although the updates do not include a security fix, this is a critical bug fix to avoid a customer outage. 

     

    To upgrade you can follow the instructions below based on version of Protect. 

     

    Upgrade Protect 9.1 to Patch 2:

     

    Upgrade Protect 9.0 to 9.1 Patch 2 or 9.0 Patch 2:

    • (Recommended) For 9.0 customers you will now see that auto update to 9.1 Patch 2 is enabled in product.  You can click the auto update link in the bottom right corner of Protect when you open it and it will download the full installer upgrading you to Protect 9.1 Patch 2.

      You must be on a Windows 7 or 2008 r2 x64 or later OS to upgrade to Protect 9.1. 

     

    • If you are unable to upgrade to Protect 9.1 Patch 2 at this time we are in the process of releasing a similar fix for Protect 9.0.  This update will be coming in a couple of weeks and can be applied very easily to Protect 9.0.  The change is entirely database schema related so no binaries are updated on Protect 9.0 console. 

     

      If you have not applied Patch 2 for either version, there will be a point in the not too distant future where you may not be able to import new content.  We would like to avoid this as much as you would, so plan for this patch update as soon as possible. 

     

    Additional Information

     

    Release notes for Patch 2 for Protect 9.1: Shavlik Protect Standard/Advanced 9.1 Patch 2 Release Notes

    Release notes for Patch 2 for Protect 9.0: Coming soon.

     

    Products

     

    Protect 9.x


    What's my patch level?

    $
    0
    0

    How do I tell the patch level of Protect?  Help about says I have 9.1 build 4472, which from the download page seems to be patch 2.  There should be an easier way to get the patch level, or you could mention the build number along with the patch level when you announce updates.

    Why Protect scan is different from Windows Update

    $
    0
    0

    Hello all,

     

    We are using a custom scan template to Scan the servers.

     

    Last week(25/10/2014) we patched the servers and from Shavlik after we deploy all the patches we did scan and we found zero patches missing.

     

    At the same day we searched for the windows update and we found that some of updates are still missing!!??

     

    Kindly may I know why this difference happening?

     

    Awaiting your valuable response.

     

    Thanks,


    Protect Upgrade Fails With: "There is a problem with this Windows Installer package."

    $
    0
    0


    Symptoms

     

    The Protect patch installer fails with the error  "There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor."

    Or

    "Another version of this product is already installed. Installation of this version cannot continue"

    ErrorUpgrade.PNG

    In the ST.DatabaseConfiguration.log you can see the following errors

     

    2014-10-28T20:43:25.5457040Z 0004 E DatabaseState.cs:77|System.Data.SqlClient.SqlException (0x80131904): Database state cannot be changed while other users are using the database 'ShavlikScans'
    ALTER DATABASE statement failed.


    2014-10-28T20:43:25.5525745Z 0004 E UnattendedInstaller.cs:95|Database installation failed: Unable to lock the database because there are existing connections.
    2014-10-28T20:43:25.5535560Z 0004 E DatabaseInstallerController.cs:378|Database 'Update' error: Unable to lock the database because there are existing connections..
    2014-10-28T20:43:25.5535560Z 0004 S DatabaseInstallerController.cs:238|ExecuteInstall|Leaving.
    2014-10-28T20:43:25.5918345Z 0004 E UnattendedInstaller.cs:149|ST.Data.SchemaInstaller.DbLockFailedException: Unable to lock the database because there are existing connections. ---> System.Data.SqlClient.SqlException: Database state cannot be changed while other users are using the database 'ShavlikScans'
    ALTER DATABASE statement failed.

     

    Cause

     

    The database is locked and cannot be altered.

     

    Solution


    Using Studio Management express you can detach and reattach the Protect Database.

    Run the patch again to attempt the upgrade.

     

    Related Article

     

    Database Connection Error Caused by Missing SQL Server

    Database Connection Error Caused by Missing SQL Server

    EOL Products

    $
    0
    0

    Is there a report I can run which tells me what EOL products have been found? I have run a recent scan after upgrading to Shavlik Protect 9 and found some of my servers have EOL Products.

    Pending Reboot PC Reports

    $
    0
    0

    After deploying patches to a machine group is there any way to scan that group and find out which ones have received the patches and are just pending reboot? It seems that i scan/deploy/repeat a lot of times before seeing 0 missing patches on all PC's. Figuring this out would help me a great deal when reporting back to my supervisor.

    Thanks

    Finding old Patches

    $
    0
    0

    Hello

     

    Last week I carried out some patching of our server estate and at the beginning of the week everything was installing correctly and on a rescan showing no more patches to install. However, towards the of the week I did a rescan of all the servers to check for any patches that I had missed. I noticed that servers that were previously showing no patches to install were now reporting as needing multiple patches some of which were 2 years ago. After further investigation, it appears that all these patches were for .NET Framework 4 client. I have not changed my scan template and I only scan for Security Patches and Security tools.

     

    Does anyone have any idea how or why this has happened?

     

    Thanks

    Roy

    Update failed: Engine updates were required but none could be applied

    $
    0
    0

    Symptoms


    The agent returns the following error when attempting to Update agent binaries:

    Update failed: Engine updates were required but none could be applied

     

    Cause

     

    The agent detects that it needs an updated engine and cannot reach the binaries through the method configured in the policy.  This typically happens if the agent can't connect directly through to the console machine or the distribution server.

     

    The agent is pointed to a Distribution server but it does not have the updated content data.  Synchronize core data files are missing from Distribution Server Scheduled automatic synchronization list.

     

     

    Resolution

    If agent is using a distribution server this error make sure the agent can connect with the distribution server and that the distribution server has been synced with the console.

     

    If agent is accessing the binaries from Protectcloud.shavlik.com this error occurs because of a failure in web access, usually from a problem with a proxy configuration or malfunction.

     

    If Synchronize core data files are missing from Distribution Server Scheduled automatic synchronization list, add "Synchronize core data files" to the Distribution Server Scheduled automatic synchronization list using "Tools>Operations>Distribution Servers> Add scheduled sync Core engines/definitions"

    dist.JPG

    Affected Product(s)

     

    Shavlik Protect 9.x

    Viewing all 2126 articles
    Browse latest View live


    <script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>