Hello everyone,
I have tried to deploy the latest Shavlik patch for Java (Java 7-71 CPU) and it has failed repeatedly - returned: 3010.
Windows 7, 32 bit OS. Any ideas?
Thanks,
Paul
Hello everyone,
I have tried to deploy the latest Shavlik patch for Java (Java 7-71 CPU) and it has failed repeatedly - returned: 3010.
Windows 7, 32 bit OS. Any ideas?
Thanks,
Paul
Is anyone programatically accessing shavlik to kick off scans or otherwise manipulate the scheduler? We are working on automating our patching process to interface with our CMDB and ticketing system and are having trouble finding any reference material about manipulating the scheduler or extracting schedule information from the protect db. Is anyone doing this?
We have the scan part down pretty well - we export from our cmdb to txt files which shavlik uses to scan, but we would like more control of the actual depoloyment process. Our CMDB is the source for truth on which maintenance window each server is patched in (many hundreds of servers). We are basically looking for a way to control the deployment phase of the process externally. The only command line, powershell, api, etc i've found documented is just the scheduler service command line utility, which i take to primarily be intended to be run from the client side.
Any help would be appreciated.
Hello all,
We are using a custom scan template to Scan the servers.
Last week(25/10/2014) we patched the servers and from Shavlik after we deploy all the patches we did scan and we found zero patches missing.
At the same day we searched for the windows update and we found that some of updates are still missing!!??
Kindly may I know why this difference happening?
Awaiting your valuable response.
Thanks,
Symptoms
Deployment fails with the following error: "Deployment machine name match failed, expected 'Machine Name', actual ''
You can also see this error you the ST.Protect.Native.log located at
C:\ProgramData\LANDesk\Shavlik Protect\Logs
Deploy.cpp:1837 DeployMachine exception - class STCore::CInvalidOperationException at Deploy.cpp:1305: Deployment machine name match failed, expected 'MachineName', actual ''.
Deploy.cpp:1869 Error Deployment machine name match failed, expected 'MachineName', actual ''
Cause
The credentials in the Machine Properties are incorrect for this machine.
Solution
In Machine view highlight the machine, right click and navigate to Machine Properties. Then assign the correct credentials.
Affected Products
Protect 9.1
You may see a pop-up error:
Protect Setup:
Error 1603: A fatal error occurred during installation
Error 1605: This action is only valid for products that are currently installed.
Error 1612: The installation source for this product is not available. Verify that the source exists and that you can access it.
You may see a message that says "protectinstaller.msi was not found".
This article provides information on manually un-installing Shavlik Protect. This document is generally meant for the purpose of cleaning up a bad or broken installation of the Protect application.
Occasionally, the application may not be removed completely due corruption to the Windows Installer, Installer folder or other corruption to the automated uninstall process. When this occurs a manual un-install of the application is necessary.
You may need to use the steps below to perform a manual uninstall of the application, and then re-install as necessary.
Microsoft provides assistance with the manual uninstall process by providing a Fix it tool. The link to the tool is: http://support.microsoft.com/mats/Program_Install_and_Uninstall
Here are instructions on how to use the Fix it tool
If Shavlik Protect, vCenter Protect, or Netchk Protect is listed:
If Shavlik Protect, vCenter Protect, or Netchk Protect is Not Listed:
Product codes for Protect are listed below.
Product GUID codes:
Make sure to use the corresponding GUID for the version of Protect you are attempting to uninstall.
Protect 7.0.832.0: {C6D1AE7C-DE93-4E93-A916-C4144525C82C}
Protect 7.0.841.0: {C6D1AE7C-DE93-4E93-A916-C4144525C82C}
Protect 7.1.410.0: {90047C28-0B1B-4B30-8177-50729907EBF2}
Protect 7.2.155.0: {9B7F1E45-4C47-4E25-9EAB-098923E4171C}
Protect 7.5.2716.0: {CEA2D643-08C0-422E-9B27-B58ED9D38D07}
Protect 7.6.1482.0: {661A3308-5BE2-4E0F-A752-BDDB247DD2DB}
Protect 7.8.1340.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}
Protect 7.8.1388.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}
Protect 7.8.1392.0: {0A4D8D5E-7177-4A45-8A7F-0A5757403F97}
Protect 8.0.3756.0: {F77AFB04-D13F-48DA-BB99-A5B31B6AAE0B}
Protect 8.0.3965.1: {5A696B05-9F06-4B3D-83A0-69E848EFAC4A}
Protect 8.0.4027.2: {5A696B05-9F06-4B3D-83A0-69E848EFAC4A}
Protect 9.0.1106.0: {8045AD29-C6A4-43F5-9F1F-9560EB09F99A}
Protect 9.0.1182.0: {070964CB-00B0-4E36-A3F6-A09F76FBD197}
Protect 9.0.1182.0 {B7F5FF6F-382B-8834-3B85-B6390F7F4DA1}
Protect 9.1.4334.0: {83593D3F-ADD7-491B-82EC-1A2E6D08C385}
ScriptLogic Patch Authority Ultimate 8.0.3756: {A8210996-CD25-4C8C-A2D7-207635DEDC28}
ScriptLogic Patch Authority Ultimate 8.0.4027: {86DE6110-3F1C-40EE-98D9-05CD7A4B212F}
ScriptLogic Patch Authority Ultimate 9.0.1182: {0EAD1B8A-6F58-2304-A817-34C1724CE04C}
At this point, install the latest version of Protect.
If you continue to encounter any install errors, contact Shavlik support. (http://www.shavlik.com/support/contact/)
If the Fixit tool fails to correct the error, you may need to manually delete an upgrade key located under HKEY_CLASSES_ROOT\Installer\UpgradeCodes in the registry. Then try reinstalling Protect with the latest installer.
Latest versions of Protect can be downloaded from: http://www.shavlik.com/downloads/
It is highly recommended to perform a backup of the registry before performing any modifications.
How to backup Windows Registry: http://windows.microsoft.com/en-US/windows-vista/Back-up-the-registry
The Fixit utility is provided by Microsoft. Make sure you read any known issues or guidelines for this tool on Microsoft's site prior to use.
Shavlik Protect 9.x
Hello,
My console reports patch MS13-096 as missing on a server for product Sharepoint Designer 2007.
MS13-096 is replaced by MS14-036 that is well installed on this server. I don't understand why Shavlik detects a superseeded patch when the superseeding one is well installed on the server. It seems superseeding doen't work correctly in this case. Please help
Thank you
The attached .bat file is designed to collect information that may assist the support team in diagnosing and resolving issues with the Protect application.
This batch file will collect trace log files, event logs, registry entries, config files, and other information that can provide great information to support for diagnosing problems.
This .bat can prove useful on any system where you are currently having issues with the Protect console or a Protect agent.
This file is intended only to obtain information for support purposes. It is not an officially supported tool and has not gone through QA/Testing. The user assumes any risks of running the attached file(s).
1) Download the attached Get_Protect_Info.bat.zip.
2) Extract the Get_Protect_Info.bat to the desktop of the Protect console system or agent system where you wish to obtain files for support.
3) Right click the Get_Protect_Info.bat, choose 'Run as Administrator'. For older operating systems such as XP or 2003 this will not be necessary - just run the file.
Note: If you do not run as administrator the batch file may not be able to obtain all information.
4) Allow the .bat to run through everything. It may take some time.
When the operation is complete you will see the text of commandline turn green and the following text displayed:
Complete
Press any key to continue...
Note: If you do not see this you need to either run as administrator or wait until the operations are complete.
5) A folder titled 'ProtectLogs' will be created at the root of C:\, containing all the files collected by the .bat.
6) Please create a compressed file of this folder. It is suggested to use 7zip for compression. 7zip will compress to a smaller file size than the built in Windows compression, and it allows for creation of an encrypted 7z or zip file. You can download 7zip here: http://7-zip.org/download.html
7) Send the 7z or zip file of the ProtectLogs folder to support.
8) The folder C:\ProtectLogs can be deleted after this.
This .bat file may retrieve some files containing sensitive system or network information. Make sure you review the files that are collected prior to sending if you believe this poses any security risk for you. This is why it is also highly recommended to place the files within an encrypted or password protected zip or 7z file before sending.
Hi Guys
I have just recently noticed that Shav is trying to update VMTools on a PHysical box, not sure why.
How can I stop it thinking it needs this update.
Thanks
steve
When running the Shavlik Protect in a secure environment without Internet access, it is necessary to download the latest data files on a system that has internet access and then transfer them to the console machine.
This article applies only to patch data.
This article discusses both methods:
To use the PowerShell script:
Shavlik does not endorse or recommend any particular third_party utility.
This script works for all versions of these products.
.\DownloadProtectData90.ps1 "<outputdirectory>" <major or minor version> "<7-zip directory>"
.
before the script name. These characters are required if the script is in the current working directory. If you are in a different directory, enter the full path to the script.
Example:
The command you run looks like this: .DownloadProtectData90.ps1 "C:\Data" 90 "C\:program Files\7-Zip"
The command has these elements:
.\DownloadProtectData.ps1
: This is the script itself. c:\Data
: This is the folder to which you are downloading the data files. 90
: This is the version of vCenter Protect or Shavlik Protect files you are downloading.DataFiles
folder on the Shavlik Protect or vCenter Protect server in the DMZ. This is the default location:C:ProgramData\Shavlik Technologies\NetChk\DataFiles
C:Documents and Settings\All Users\Application Data\Shavlik Technologies\NetChk\DataFiles
execution of scripts is disabled on this system
set-executionpolicy RemoteSigned
This command is case-sensitive.You can manually download the necessary data files. To download the files:
C:ProgramData\Shavlik Technologies\NetChk\DataFiles
C:\Documents and Settings\All Users\Application Data\Shavlik Technologies\NetChk\DataFiles
The Protect console requires both the .CAB and the files archived within the .CAB files for Protect to function correctly. The PowerShell script downloads the .CAB files, places the files in the output directory, and extract the files to the output directory. You need to manually extract the .CAB files using an archiving tool like 7-Zip if you choose to manually download the .CAB files.
Update files for Shavlik Protect 9.0:
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.exe
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe
http://xml.shavlik.com/data/hf7b.xml
http://xml.shavlik.com/data/pd5.xml
http://xml.shavlik.com/data/iadata.xml
http://xml.shavlik.com/data/ai_dpd.xml
http://xml.shavlik.com/data/scriptcatalog.zip
http://xml.shavlik.com/data/assetinventory.xml
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.cab
http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.cab
http://xml.shavlik.com/data/hf7b.cab
http://xml.shavlik.com/data/pd5.cab
http://xml.shavlik.com/data/iadata.cab
http://xml.shavlik.com/data/ai_dpd.cab
http://xml.shavlik.com/data/hypervisors.cab
http://xml.shavlik.com/data/assetinventory.cab
http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.cab
Update files for Shavlik Protect 9.1:
http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.dll
http://xml.shavlik.com/data/hf7b.xml
http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.exe
http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.exe
http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.exe
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.exe
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.exe
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.exe
http://xml.shavlik.com/data/pd5.xml
http://xml.shavlik.com/data/ai_dpd.xml
http://xml.shavlik.com/data/protect/v9/91/protect/4334/assetinstaller.msi
http://xml.shavlik.com/data/protect/v9/91/protect/4334/patchinstaller.msi
http://xml.shavlik.com/data/protect/v9/91/protect/4334/threatinstaller.msi
http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.dll
http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.dll
http://xml.shavlik.com/data/iadata.xml
http://xml.shavlik.com/data/scriptcatalog.zip
http://xml.shavlik.com/data/supportedHypervisors.obf
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.exe
http://xml.shavlik.com/data/assetCatalog2.obf
http://xml.shavlik.com/data/assetCatalogMetadata2.obf
http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.cab
http://xml.shavlik.com/data/hf7b.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.cab
http://xml.shavlik.com/data/pd5.cab
http://xml.shavlik.com/data/ai_dpd.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.cab
http://xml.shavlik.com/data/iadata.cab
http://xml.shavlik.com/data/supportedHypervisors.cab
http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.cab
http://xml.shavlik.com/data/assetCatalog2.cab
http://xml.shavlik.com/data/assetCatalogMetadata2.cab
http://xml.shavlik.com/data/Protect/v9/91/manifest/protect.manifest.cab
Shavlik Protect and VMware vCenter Protect consoles that have no internet connectivity, but that still try to download updates automatically can experience other issues. Shavlik recommends setting consoles with no internet connectivity to Disconnected Mode. To enable Disconnected Mode from the console application:
Version 8.x: Go to Tools and select Run Disconnected.
Version 9.x: Go to Tools and deselect Auto-Update Definitions.
11/1/2011 - Updated article for VMware vCenter Protect 8.0.x
07/16/2013 - Updated article for Shavlik Protect 9.0.x
05/21/2014 - Updated article for Shavlik Protect 9.1.x
Shavlik Protect 9.x
Hi,
In running patches out to test machines when I look in the operations monitor it looks like the patches are going through the install process
one by one. The machine even reboots. But when I do a rescan the machine has not been patched at all. I don't see much activity on the
client machine in the way of processes and CPU usage.
There is an issue with the license (our purchasing dept. screwed up) so maintenance is past due. But it DID seem like it was working regardless.
What should I do to troubleshoot this? We also are gearing up for a network accreditation and there might have been some GPO changes also.
...Alan
Hi there,
Just noticing that on a number of our SharePoint servers, Q2880516 shows as missing. But when I run the patch on the server manually, the installer says it's already installed. Shavlik does not indicate that it's been superseded.
I see that Shavlik is checking for presence of registry key 'SOFTWARE\Classes\Installer\Patches\CBDDAFC89662E564EADC56787E54A6B6\SourceList\PackageName', and indeed this key doesn't exist.
However, the Microsoft KB article for this patch doesn't specify that key for determining if the patch is installed. Instead, it lists a number of files and their versions for detecting whether it's installed or not. I checked a few of them, and in fact I have the required versions or newer.
In googling this issue, I see that there have been other SharePoint patches in the past that contained files that were also included in different patches. So perhaps this is the case here too - the files are present on the system because they are part of other SharePoint patches that have been installed. Perhaps Q2880516 needs to check file versions in order to determine if it's missing or not.
Same is happening with SharePoint patches Q2553298/MS13-100 and Q2553408/MS13-067, but I thought I'd focus on just one of the three to raise the issue.
Could we adjust the patch detection so they stop showing as missing? Please let me know if you need more info like a list of patches already installed on this server, etc., and I can provide.
Thanks,
Sandra
Hi, I renamed my old Shavlik server and now when I try to use the migration tool to pull over old user profiles, it's trying to connect to the Original database name "originalname\sqlexpress" where as I need it to connect to "originalname-o\sqlexpress". I renamed the sql server name using sp_dropserver 'oldname' and then sp_addserver 'newname', local. I restarted services and that still did not work.
Any suggestions?
EDIT: Ok I solved this. I had to open the shavlik console and when I did it told me the database was out of sync (or whatever it said). I ran the database config utility, put in the new/correct name and that worked!
There have been an incredibly large number of vulnerabilities this year, which unfortunately is going to cause asyntax change in MITRE CVE-ID. The current syntax will max out at 9,999 vulnerabilities, so the change is to start adding additional digits. When the CVE count breaks 10,000, MITRE will be adding an extra digit onto the end of their CVE-IDs. The resulting CVE change will drive a change in how we import content for Shavlik Protect 9.1 and 9.0.
The deadline for the change is January 15, 2015, but due to the high volume of vulnerabilities releasing this year the change in format may be forced upon us early. We have released an update for Protect 9.1 and are working on the Protect 9.0 update to prevent the format change from causing issues. The patch will prevent import of new content from failing, avoiding an inconvenience to our customers. Protect 9.1 Patch 2 is available now and the Protect 9.0 Patch 2 will be coming in the next couple of weeks. Although the updates do not include a security fix, this is a critical bug fix to avoid a customer outage.
To upgrade you can follow the instructions below based on version of Protect.
Upgrade Protect 9.1 to Patch 2:
Upgrade Protect 9.0 to 9.1 Patch 2 or 9.0 Patch 2:
You must be on a Windows 7 or 2008 r2 x64 or later OS to upgrade to Protect 9.1.
If you have not applied Patch 2 for either version, there will be a point in the not too distant future where you may not be able to import new content. We would like to avoid this as much as you would, so plan for this patch update as soon as possible.
Release notes for Patch 2 for Protect 9.1: Shavlik Protect Standard/Advanced 9.1 Patch 2 Release Notes
Release notes for Patch 2 for Protect 9.0: Coming soon.
Protect 9.x
How do I tell the patch level of Protect? Help about says I have 9.1 build 4472, which from the download page seems to be patch 2. There should be an easier way to get the patch level, or you could mention the build number along with the patch level when you announce updates.
Hello all,
We are using a custom scan template to Scan the servers.
Last week(25/10/2014) we patched the servers and from Shavlik after we deploy all the patches we did scan and we found zero patches missing.
At the same day we searched for the windows update and we found that some of updates are still missing!!??
Kindly may I know why this difference happening?
Awaiting your valuable response.
Thanks,
Symptoms
The Protect patch installer fails with the error "There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor."
Or
"Another version of this product is already installed. Installation of this version cannot continue"
In the ST.DatabaseConfiguration.log you can see the following errors
2014-10-28T20:43:25.5457040Z 0004 E DatabaseState.cs:77|System.Data.SqlClient.SqlException (0x80131904): Database state cannot be changed while other users are using the database 'ShavlikScans'
ALTER DATABASE statement failed.
2014-10-28T20:43:25.5525745Z 0004 E UnattendedInstaller.cs:95|Database installation failed: Unable to lock the database because there are existing connections.
2014-10-28T20:43:25.5535560Z 0004 E DatabaseInstallerController.cs:378|Database 'Update' error: Unable to lock the database because there are existing connections..
2014-10-28T20:43:25.5535560Z 0004 S DatabaseInstallerController.cs:238|ExecuteInstall|Leaving.
2014-10-28T20:43:25.5918345Z 0004 E UnattendedInstaller.cs:149|ST.Data.SchemaInstaller.DbLockFailedException: Unable to lock the database because there are existing connections. ---> System.Data.SqlClient.SqlException: Database state cannot be changed while other users are using the database 'ShavlikScans'
ALTER DATABASE statement failed.
Cause
The database is locked and cannot be altered.
Solution
Using Studio Management express you can detach and reattach the Protect Database.
Run the patch again to attempt the upgrade.
Related Article
Database Connection Error Caused by Missing SQL Server
Is there a report I can run which tells me what EOL products have been found? I have run a recent scan after upgrading to Shavlik Protect 9 and found some of my servers have EOL Products.
After deploying patches to a machine group is there any way to scan that group and find out which ones have received the patches and are just pending reboot? It seems that i scan/deploy/repeat a lot of times before seeing 0 missing patches on all PC's. Figuring this out would help me a great deal when reporting back to my supervisor.
Thanks
Hello
Last week I carried out some patching of our server estate and at the beginning of the week everything was installing correctly and on a rescan showing no more patches to install. However, towards the of the week I did a rescan of all the servers to check for any patches that I had missed. I noticed that servers that were previously showing no patches to install were now reporting as needing multiple patches some of which were 2 years ago. After further investigation, it appears that all these patches were for .NET Framework 4 client. I have not changed my scan template and I only scan for Security Patches and Security tools.
Does anyone have any idea how or why this has happened?
Thanks
Roy
The agent returns the following error when attempting to Update agent binaries:
Update failed: Engine updates were required but none could be applied
The agent detects that it needs an updated engine and cannot reach the binaries through the method configured in the policy. This typically happens if the agent can't connect directly through to the console machine or the distribution server.
The agent is pointed to a Distribution server but it does not have the updated content data. Synchronize core data files are missing from Distribution Server Scheduled automatic synchronization list.
If agent is using a distribution server this error make sure the agent can connect with the distribution server and that the distribution server has been synced with the console.
If agent is accessing the binaries from Protectcloud.shavlik.com this error occurs because of a failure in web access, usually from a problem with a proxy configuration or malfunction.
If Synchronize core data files are missing from Distribution Server Scheduled automatic synchronization list, add "Synchronize core data files" to the Distribution Server Scheduled automatic synchronization list using "Tools>Operations>Distribution Servers> Add scheduled sync Core engines/definitions"
Shavlik Protect 9.x