Purpose

The purpose of this document is to troubleshoot why you may not see a machine's IP address that was added into a Machine Group by IP Range in a scan.

Symptoms

A machine's IP address will not show results for patch breakdown nor will it error out in a scan.

Cause

The affected machines have multiple NICs associated with multiple IP addresses that fall in your IP Range set in the Machine Group. The IP address that resolves first is the one that will show in the scan results and the other IP address will not be shown or error out.

Resolution

Verify that you are seeing an IP address associated with the affected machines if they use multiple NICs.

Additional Information

You will not see the other IP address error out because the machine is still resolvable by the first IP address that resolved.

Affected Product(s)

Shavlik Protect 9.x

When I do a scan Microsoft Security Advisory 3057154 does not show up in the scans to be able to patch Win 7 machines.   Will this be added soon?

I am looking to have a report sent via email to me indicating the status of deployments of patches. Can this be done?

Has anyone seen the same problem that I have?

After scanning a server the patch ms15-065 was missing. I then deployed that patch and after a rescan

the patch was still missing. i had to do another deployment. After that the missing patch was gone.

I tried it on several servers (W2K8 R2 and W2K12 R2). It was the same.

I am running ShavlikProtect Standard 9.1.0

Any ideas?

Thanks

dundee

Purpose

This document explains how Shavlik handles the detection and deployment of MS15-065 3065822 and 3074886.  This will help explain why when you you perform a Security Patch scan and it only shows 3065822 missing when you expect 3074886 to also be detected as missing.

Overview

The following is from the Microsoft Security Bulletin MS15-065 - Critical

Note For Download Center customers: If you download and install updates manually, you must first install update 3065822 before installing update 3074886. Failure to follow the install order or failure to install 3074886 after installing 3065822 can lead to degraded functionality.

Due to this, Shavlik Protect will detect the prerequisite patch 3065822 missing and allow you to deploy it.  After the install and reboot occurs you will need to scan the machine a second time. The remaining MS15-065 patch 3074886 will show as missing and can be deployed.  This is  the expected behavior from Protect.

Affected Product

Shavlik Protect: 9.X

Purpose

This document will help explain why some Agentless scan results differ from an Agent scan results even though they are using the same Scan Template.

Description

Here are a couple of possible scenarios where the scan results may differ:

• In cases where you use a custom Scan Template filtering by User Criticality, agentless and agent based scan results may differ.  The User Criticality filter is ignored by agent scans, this may account for the difference in scan results between the agent and the agentless scans.
• Another possible reason is the scan definitions used in the agentless scan are different from the from the definitions used in the agent scan. This will occur if the agent doesn't have access to the updated definitions, usually because the Distribution Server has not synced with the Protect console before the Agent runs its scan.
• You can verify this by looking at the Patch Definition on the Agent in View > Machines.

• You can verify the Protect console definitions by going to Help > About Shavlik Protect and looking at the Patch Assessment version.

Resolution

• When creating custom Scan Templates for use in both agent and agentless scans, do not filter by User Criticality.
• Verify the definitions are the same between the Protect Console and the Agent.

Affected Products

Shavlik Protect 9.x

Symptom

• You cannot deploy a patch with Shavlik Protect   
• You see the error:  Patch does not appear to be digitally signed

Cause

Protect verifies the patch is digitally signed by Microsoft. If the signature cannot be verified the deployment process will stop with an error  If a patch download fails repeatedly, it is possible that the partially downloaded patch is cached in a proxy server between your console and the vendor download center. This issue may also occur if the partial patch is cached in the console's Internet Explorer browser cache. Antivirus software can also prevent the patch from downloading and will give an error of 'patch' fails digital signature check.  This can also occur if the Microsoft root certificate is corrupt or out of date on the Protect server or target machine.

Resolution

Verify there are no URL filtering on .exe .dll .msu .msi

1. Open Internet Explorer on the console machine.
2. Click Tools> Internet Options> Temporary Internet Files.
3. Click Delete Files.
4. Go in the patch folder and delete the patch file.
   By default, the patch files are located at:
   - v.9x on Windows Vista, 2008, Windows 7 - C:\ProgramData\LANDesk\Shavlik Protect\Console\Patches
   - v.9x on Windows XP, Windows 2003 - C:\Documents & Settings\All Users\Application Data\LANDesk\Shavlik Protect\Console\Patches
   If you have changed the default directory, you can verify this by navigating within Protect under the following directory:
   - v.9x: Tools > Operations > Downloads > Patch download directory
5. Try downloading the patch again.
   

If you want to manually check if the file is digitally signed:

1. Right-click the file and click Properties.
2. Click the Digital Signatures tab. If the file is signed, a Digital Signature exists. If the file is not signed, you do not see the Digital Signatures tab.

If patch fails digital signature check:

1. Update out of date root certificates.
2. Disable antivirus and try downloading the patch from Protect Console again.

Affected Product(s)

Shavlik Protect 9.x

We have a large pool of remote workers who only periodically come into the office and usually only connect to the VPN briefly (under an hour) every few days.  So Protect Cloud Sync works perfectly for Windows Patches and builtin 3rd party patches.  However we were curious about custom patches/software.  My understanding is that custom patches/software can't be deployed through Cloud Sync (which makes complete sense as the patches don't exist outside of our environment).  That is no problem, however I want to make sure that the patches do get deployed when the laptop connects to the VPN or comes into the office.  I was wondering if anyone had any advice/best practices for deploying custom patches/software to guarantee they are deployed to remote staff?

My best guess would be to add an additional scan and deploy task (for custom software only) to the agent policy that is scheduled frequently (ex. every hour) and hope that it runs while they are connected to the VPN or come into the office.  Just wondering if this is the best option or if there was potentially a more elegant way to solve the issue.

Thanks,

Chris

Is anyone else having trouble deploying Google Chrome patches in the last couple weeks?  After deploying them in Shavlik they just sit there in the Operations Monitor as "Executing" and never finish.  If I go to the clients and open Chrome and look at the "About" screen, it indicates that an update is running and after 2-3 minutes it finishes and requires a restart of the application to complete the install.  Again, this problem just started with the last 2 or 3 Chrome updates, it used to work fine in the background.  Any ideas?

Symptoms

Patches released after April 2014 are not being detected as missing on 2012 R2 server or Windows 8.1 operating systems.

Cause

KB2919355  CU1 is not installed on the system so no updates can be applied.

From the MS KB: http://support2.microsoft.com/?kbid=2919355

Important All future security and non-security updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require this update to be installed. We recommend that you install this update on your Windows RT 8.1, Windows 8.1, or Windows Server 2012 R2-based computer in order to receive continued future updates.

Resolution

Install KB2919355 on the affected systems

Additional Information.

Non-security update KB2969339 is a prerequisite to show KB2919355 as missing. The non-security update has been replaced twice so far so it could be replaced again, however the KB would indicate as such.

From the MS KB: https://support.microsoft.com/en-us/kb/2969339

Affected Product(s)

Shavlik Protect: All Versions

Shavlik Patch: All Versions

Purpose

The purpose of this document is to give instructions on how to scan more than one machine group in the same scan.

Description

There are two ways you can initiate a scan on multiple machine groups.

The first way is using the home screen

   1. Click the home button on the top left-hand side of Protect to get to the home screen.

   2. You will see the following "Operations" screen.

   3. Check all machine groups you would like to scan, choose your settings and click "Scan Now" or "Schedule".

The second way is using Nested Groups

   1. Open any Machine Group.

   2. Navigate to the Nested Group tab and select the desired groups to scan, then click "Add".

   3. Click "Run Operation", choose your settings, then click "Scan Now" or "Schedule".

Additional Information

• Using the "Nested Group" tab will use the credentials that are set in the original machine group, so there is no need to set credentials.
• Scanning machines within a nested group will maintain their original groups under View > Machines.

Affected Product(s)

Shavlik Protect 9.x

The Shavlik Protect Threat Protection engine is based on the Vipre SDK engine, and uses threat definitions created by GFI's ThreatTrack Security (formerly Sunbelt Software).

In case you see a possible threat that is not being detected or a false-positive for a threat, it is best to provide the following information to support so the issue can be addressed as efficiently as possible:

You can easily submit the information to support, here: http://support.shavlik.com/

Ensure to provide the following information.

-Software being wrongly detected (in case of false positive)

-Software version affected

-Software is detected as? (Threat Name)

-Software (threat) download location, if from a website

-Any attachments that may assist in identifying a threat or false positive

-Include a copy of the existing agent logs from the affected system, as described in this document: http://community.shavlik.com/docs/DOC-22921

*Note: It may prove helpful to enable additional agent logging as described here if you can reproduce the problem prior to submitting: http://community.shavlik.com/docs/DOC-23066

1.     These steps are intended for use if you need to remove the Shavlik (ST) Remote Scheduler service from multiple systems.

1. Please download the attached zip file at the bottom of this document called "RemoveScheduler.zip". Extract the files from this zip. The files have been renamed to avoid conflict during download so you will need to make sure they are named as follows:
   1. Stopscheduler.bat
   2. DeleteScheduler.reg
2. Create a folder to contain these files for deployment. We recommend creating a folder titled RemoveSched or similar under your current patch repository (patch download directory). The default patch repository is located in the following:
   1. For Vista/2008/7/8/2012: C:\ProgramData\LANDesk\Shavlik Protect\Console\Patches
   2. For 2003/XP: C:\Documents & Settings\All Users\Application Data\ LANDesk\Shavlik Protect\Console\Patches
3. Create a new patch scan template within Protect, and call it “Custom Action Scan”. This scan template can be used for future custom action scans as well if you like.
   1. The scan template should have the Patch Type Filter set to ‘Scan Selected’ with only the ‘Custom Actions’ patch type selected.
   2. No other settings need to be changed in the template. Click Save.
      
4. Create a new Patch Deployment Template, and call it “Custom Action to Remove Scheduler”. Make sure to set the following settings:
   1. On the General Tab, deselect the ‘Send Tracker status’ option. This change is so that the tracker doesn’t falsely report the deployment as failed. Be aware you will not receive a tracker status for this deployment.
      
   2. Go to the Post-deploy Reboot tab, and set this to ‘Never reboot after deployment’.
      
   3. Go to the Custom Actions Tab, and Click ‘New’ to create a new step in the custom action. All of these will use the setting at the top as ‘All deployments using this template’. Set up the following:
      • Step 3: Push File
      • Step 4: Path to the Stopscheduler.bat
        
   4. Create another action like the one above, this time for the DeleteScheduler.reg file. Click ‘New’ to create a new step in the custom action. All of these will use the setting at the top as ‘All deployments using this template’. Set up the following:
      • Step 3: Push File
      • Step 4: Path to the DeleteScheduler.reg
        
   5. Now create a new action to stop the scheduler service. This one will differ from the previous 2 actions by having step 3 occur "before any patches".
      • Step 3: Before any patches;
      • Step 4: CALL %pathtofixes%Install\Stopscheduler.bat

Here is what the complete custom action should look like (all steps):

Using the custom action scan and deployment template

Run a scan on any machines you wish to remove the scheduler from using the Custom Action Scan template that you created. You should see the dummy patch (bulletin MSST-001) shown as missing. This will always show as missing.

1. Right click and choose to deploy. Then make sure to choose your deployment template of Custom Action to Remove Scheduler.
2. This will not push any actual patches, but it will allow the custom action in the template to run. It will in turn remove the registry key for the scheduler.
3. *Important* The the next time you deploy patches the scheduler service will be reinstalled. You can also reinstall the scheduler service by going into the Protect console under Manage > Scheduled Tasks. Right click on a system in the left column, then choose Scheduler Service > Install.

Symptoms

You attempt to open Protect and receive the following error: You Have Renamed This Computer. To Correct Possible Communication Errors, Go To 'Tools->Console Alias Editor' from the Main Menu, Verify the Current Computer Name is Listed, and Then Save.

Cause

You did not update Protect 9.0 or 9.1 to patch 3 and your certificate has expired.

Solution

Shavlik has released updates for Protect 9.1 and 9.0 customers. Patch 3 is mandatory for all customers. This update resolves an issue which will prevent the console certificate from automatically renewing after it reaches its two year term date, at which time several issues would occur including communication failures, agent check-in failures, and console errors. You can download the latest version of Protect here:  Shavlik Protect Download Page

Affected Product(s)

Shavlik Protect 9.X

Purpose

When running the Shavlik Protect in a secure environment without Internet access, it is necessary to download the latest data files on a system that has internet access and then transfer them to the console machine.

This article applies only to patch data.

Description

This article discusses both methods:

• PowerShell (Highly Recommended)
• Individual file download (All Files Are Required)

PowerShell

  Running the script on a Windows 7 SP1 system with the natively installed PowerShell does not work with the execution policy set to "RemoteSigned". You will still receive an error that the script is not digitally signed. The script will only run if the execution policy is set to "unrestricted"

To use the PowerShell script:

• Download and install PowerShell 1.0 from Microsoft, if it is not already installed. For more information, see Microsoft KB article 926140.
• Shavlik NetChk Protect and VMware vCenter Protect patch files are released twice per week. To download the patch files, you can use a PowerShell script to automate the process or you can download each file individually.
• If you need a compression utility, download and install the 7-Zip extraction utility from http://www.7-zip.org/download.html.

          Shavlik does not endorse or recommend any particular third_party utility.

• Create an output directory.
• Download and extract the PowerShell script attached to this article: DownloadProtectData90.zip

  This script works for all versions of these products.

• Open a command prompt.
• Enter PowerShell by typing powershell.
• Navigate to the location where you extracted the PowerShell script.
• At the PowerShell command prompt, launch the script with this command:
  
  .\DownloadProtectData90.ps1 "<outputdirectory>" <major or minor version> "<7-zip directory>"
  
    The command begins with the characters . before the script name. These characters are required if the script is in the current working directory. If you are in a different directory, enter the full path to the script.
  
  The major/minor version argument has a two-digit value. Use the value corresponding to your version:

• Protect 9.0: 90
• Protect 9.1: 91

Example:

The command you run looks like this: .\DownloadProtectData90.ps1 "C:\Data" 90 "C:\program Files\7-Zip"

The command has these elements:

• .\DownloadProtectData.ps1: This is the script itself.
• c:\Data: This is the folder to which you are downloading the data files.
• 90: This is the version of vCenter Protect or Shavlik Protect files you are downloading.

1. You may see this error:
   
   execution of scripts is disabled on this system
   
   If this occurs, enable the execution of scripts by entering this command:
   
   set-executionpolicy RemoteSigned

  This command is case-sensitive.
   
   Alternatively, you can sign the script instead of changing the execution policy. For more information, see http://www.hanselman.com/blog/SigningPowerShellScripts.aspx.    The preceding link was correct and last checked as of June 11, 2013.

Individual file download

You can manually download the necessary data files. To download the files:

1. Right-click each link and select Save Link As.
2. Save the files to the console, in the DataFiles folder. This is the default location:
   • 8.x on Vista, 2008, & Windows 7: C:ProgramData\Shavlik Technologies\NetChk\DataFiles
   • 8.x on Windows XP or 2003: C:\Documents and Settings\All Users\Application Data\Shavlik Technologies\NetChk\DataFiles
   • 9.x on Vista, 2008, & Windows 7: C:\ProgramData\LANDesk\Shavlik Protect\Console\DataFiles
   • 9.x on Windows XP or 2003: C:Documents and SettingsAll UsersApplication Data\LANDesk\Shavlik Protect\Console\DataFiles

  The Protect console requires both the .CAB and the files archived within the .CAB files for Protect to function correctly. The PowerShell script downloads the .CAB files, places the files in the output directory, and extract the files to the output directory. You need to manually extract the .CAB files using an archiving tool like 7-Zip if you choose to manually download the .CAB files.

Update files for Shavlik Protect 9.0:

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/AssetInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/PatchInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ThreatInstaller.msi

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.dll

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.exe

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.exe

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/assetinventory.xml

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STPlatformUpdater.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/cl5.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/ST.Licensing.Data.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/DplyEvts.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/7z.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/SafeReboot64.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STSchedEx.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STRemoteCommand.cab

http://xml.shavlik.com/data/Protect/v9/90/Protect/1182/STScheduleView.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/hypervisors.cab

http://xml.shavlik.com/data/assetinventory.cab

http://xml.shavlik.com/data/Protect/v9/90/manifest/protect.manifest.cab

Update files for Shavlik Protect 9.1.4334:

http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.dll

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.exe

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4334/assetinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/patchinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/threatinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.dll

http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.dll

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/supportedHypervisors.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.exe

http://xml.shavlik.com/data/assetCatalog2.obf

http://xml.shavlik.com/data/assetCatalogMetadata2.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4334/7z.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/cl5.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/safereboot64.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stschedex.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stremotecommand.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stscheduleview.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/st.licensing.data.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/dplyevts.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/supportedHypervisors.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4334/stplatformupdater.cab

http://xml.shavlik.com/data/assetCatalog2.cab

http://xml.shavlik.com/data/assetCatalogMetadata2.cab

http://xml.shavlik.com/data/Protect/v9/91/manifest/protect.manifest.cab

Update files for Shavlik Protect 9.1.4511:

http://xml.shavlik.com/data/protect/v9/91/protect/4446/7z.dll

http://xml.shavlik.com/data/hf7b.xml

http://xml.shavlik.com/data/protect/v9/91/protect/1048/cl5.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot64.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stschedex.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stremotecommand.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stscheduleview.exe

http://xml.shavlik.com/data/pd5.xml

http://xml.shavlik.com/data/ai_dpd.xml

http://xml.shavlik.com/data/protect/v9/91/protect/4446/assetinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4446/patchinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4446/threatinstaller.msi

http://xml.shavlik.com/data/protect/v9/91/protect/4446/st.licensing.data.dll

http://xml.shavlik.com/data/protect/v9/91/protect/4446/dplyevts.dll

http://xml.shavlik.com/data/iadata.xml

http://xml.shavlik.com/data/scriptcatalog.zip

http://xml.shavlik.com/data/supportedHypervisors.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stplatformupdater.exe

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stplatformupdater.exe

http://xml.shavlik.com/data/assetCatalog2.obf

http://xml.shavlik.com/data/assetCatalogMetadata2.obf

http://xml.shavlik.com/data/protect/v9/91/protect/4446/7z.cab

http://xml.shavlik.com/data/hf7b.cab

http://xml.shavlik.com/data/protect/v9/91/protect/1048/cl5.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/safereboot64.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stschedex.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stremotecommand.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stscheduleview.cab

http://xml.shavlik.com/data/pd5.cab

http://xml.shavlik.com/data/ai_dpd.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/st.licensing.data.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/dplyevts.cab

http://xml.shavlik.com/data/iadata.cab

http://xml.shavlik.com/data/supportedHypervisors.cab

http://xml.shavlik.com/data/protect/v9/91/protect/4446/stplatformupdater.cab

http://xml.shavlik.com/data/assetCatalog2.cab

http://xml.shavlik.com/data/assetCatalogMetadata2.cab

http://xml.shavlik.com/data/Protect/v9/91/manifest/protect.manifest.cab

Additional Information

Shavlik Protect and VMware vCenter Protect consoles that have no internet connectivity, but that still try to download updates automatically can experience other issues. Shavlik recommends setting consoles with no internet connectivity to Disconnected Mode. To enable Disconnected Mode from the console application:

Version 8.x: Go to Tools and select Run Disconnected.

Version 9.x: Go to Tools and deselect Auto-Update Definitions.

Document Content Update History

11/1/2011 - Updated article for VMware vCenter Protect 8.0.x 

07/16/2013 - Updated article for Shavlik Protect 9.0.x

05/21/2014 - Updated article for Shavlik Protect 9.1.x

Products

Shavlik Protect 9.x

we just went through our site updating servers and desktops, a couple of 2012 servers prompted for "help" with windows update.  Come to find out WU doesn't know the updates were applied.  Same thing on my laptop thise morning, protect says all up to date WU wants me to install 28 updates.   What gives? 

Hi

We patched a few server agentless. The patches were applied successfully and the reboot occurred right after.

But after the reboot happened, we could not connect to the server via RDP. After we logged on in vsphere one time, we could connnect again with RDP. Why do this happen?

After a week the Server rebooted without any interaction. We've seen the reboot was initiated from Safereboot.exe.

Has anyone seen this before?

Regards

Hi,

I am still relatively new to using Shavlik to push patches through to our domains, but I am running into an issue regarding Java.

Currently, in my domain there are users reliant on an older version of Java (7u76) to run an in-house Oracle based database program.  However, Shavlik recently started to push out Java 7u79 as part of the overnight scans of the domain machines.  Unfortunately 7u79 does not work with the program and it requires 7u76 until the software designer behind the program pushes through to support newer Java versions I need to keep these machines on 7u76.  Simply put is there a way I can force Shavlik to leave Java unscathed in the scans as to not push the version?  As I have it now I can either skip Java through the scan template or include it in the list and have it force through 7u79.  Now of course when I skip it in the scan template Shavlik removes all trace of Java off the machine instead of just bypassing it and leaving it as is.

If anyone could help me out with this I would greatly appreciate it.

Thank you.

Looking for advice on the best method of patching an Exchange 2010 DAG.  Up to now we've been doing it manually, given the complexities of the environment.  Any advice on automating patching with Shavlik would be appreciated.

Brian

I am seeing the result of Shavlik Scans showing DirectX 9.0c as being End of Life 7/14/2015 on Windows 7 and Windows 2008 R2 systems. What I don't see is any method to remove or update DirectX 9.0c on these systems.  It seems this component is baked into the OS.  I haven't been able to find any Microsoft documentation on how to deal with this, though there are plenty of third party sites that have information on removing it (with varying degrees of success). Microsoft offers KB2670838 (Platform Update) which possibly installs newer versions of DirectX, but my systems already show that as being installed (MSWU-716) Any suggestions on how to mitigate this issue?