Quantcast
Channel: Shavlik User Community : All Content - Ivanti Patch for Windows
Viewing all 2126 articles
Browse latest View live

"Send to" Within Report Does Not Send Email

$
0
0

Purpose

 

The purpose of this document is to provide a work around for emails sent from within the report creation tool.

 

Symptoms

 

After creating a report you use the "File", "Send to" to email the report and it is never sent.


The steps to reproduce the issue:

 

Create an executive summary report

File --> Send To...

Use or create an email contact

Send E-mail

The email is never sent.

 

Resolution

 

To work around this issue:

 

1) Create the report, export the report as a PDF and manually email the report.

2) Depending on the report you may also be able to automatically send the report using either the scan template or the deployment template.

 

Additional Information

 

Since there are many root causes to issue like this, it would be prudent to open a case with Shavlik Support in order to verify your issue matches the defect.

 

Affected Product(s)

 

Protect 9.1


computers downloading from vendor site instead of distribution servers

$
0
0

were are having issues with some  computers  are bypassing the local distribution server ( I am assuming the patch they want is not available on the distribution server)  and are going outside (web/vendor) to download the updates. This is what we are seeing  from the logs as well as  from the traffic these machines are generating. This seems to be  isolated to  laptops. We do have a separate agent policy for laptops  and have protect cloud sync also configured for these. I am thinking this might be related to the agent setting "use vendor as a backup site) which is not enabled on the desktop. so if I uncheck this setting does that mean when that when my laptops are offsite  they will not update since they will not have access to the distribution servers?

 

laptop agent.PNG

Flash 13 EOF yet??

$
0
0

Certainly Flash 13 is considered EOL by now? We found a couple of users still stuck on this old software when Flash 18 is already out. We really would like Shavlik to detect it as EOF and upgrade them to a newer version.

Server showing no patches when they are patches to install

$
0
0

We currently had a Windows 2003 server that was being patched by Shavlik.  This worked fine.

Because of the software on the server we ended up having to do a inplace upgrade to 2008 R2.

Even since then Shavlik has been having issues with this server.  While all the other server show 5 to 10 patches depending on the month, this server shows none.

Also getting the following icon next to server name. 

Server is working fine except for this issue.

Didn't know if anyone had seen this before and could offer some advice on how to fix.

 

Thanks

Agent Status And Corresponding Icons

$
0
0

Template

Purpose

 

This document outlines the symbols associated with an agent's status.

 

Symptoms

 

activeagent.jpg

The agent is active on the machine.

 

inactive.jpg

The agent is not active on the machine.

 

remdagent.jpg

The agent has been removed from the machine.

 

Agenterr.jpg

The agent has reported an error.

 

Description

 

Informational

 

Affected Product(s)

 

Shavlik Protect 9.x

Question about Windows Updates

$
0
0

So I'm able to push patches out to any computers on our network but is there anyway to setup Windows Update so it uses the Shavlik update files. Right now any computer on our network still goes out to Microsofts update locations. Not sure if its possible but figured I would ask.

Google Chrome Update Deployments

$
0
0

Is anyone else having trouble deploying Google Chrome patches in the last couple weeks?  After deploying them in Shavlik they just sit there in the Operations Monitor as "Executing" and never finish.  If I go to the clients and open Chrome and look at the "About" screen, it indicates that an update is running and after 2-3 minutes it finishes and requires a restart of the application to complete the install.  Again, this problem just started with the last 2 or 3 Chrome updates, it used to work fine in the background.  Any ideas?

Unable to update definitions in SQL database

$
0
0

Hi,

We've started having issues when updating the patch definitions. This prevents the running of scans.

 

Running the 'refresh files' process fails with the error;

"Failed to update the database with new deifinitions."

and

"The transaction associated with the current connection has completed but has not been disposed.  The transaction must be disposed before the connection can be used to execute SQL statements."

 

Initial thoughts were the size/vintage/upgrades that the db has had, so a fresh one was created. This has been ok for a few weeks but the error has returned...

 

looking at the st.protect.managed(username).log reveals:

 

2015-08-10T03:28:02.8549135Z 0007 E WorkItemCatalogDataImport.cs:147|ST.UI.UserViewableException: Failed to update the database with new definitions. ---> System.InvalidOperationException: The transaction associated with the current connection has completed but has not been disposed.  The transaction must be disposed before the connection can be used to execute SQL statements.

   at System.Data.SqlClient.TdsParser.TdsExecuteRPC(_SqlRPC[] rpcArray, Int32 timeout, Boolean inSchema, SqlNotificationRequest notificationRequest, TdsParserStateObject stateObj, Boolean isCommandProc, Boolean sync, TaskCompletionSource`1 completion, Int32 startRpc, Int32 startParam)

   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite, SqlDataReader ds)

   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean asyncWrite)

   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion, String methodName, Boolean sendToPipe, Int32 timeout, Boolean asyncWrite)

   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()

   at ST.Data.CatalogData.DataAdapters.PatchDataAdapter.UpdatePatchProductCveLink(DataTable patchProductCveDataTable, SqlConnection connection)

   at ST.Data.CatalogData.DataAdapters.PatchDataAdapter.UpdateNonBulk(PatchUpdateDataSet patchData, String sysXmlVersion, SqlConnection connection)

   at ST.Data.CatalogData.DocumentParsers.Hf7Parser.PersistModelInternal(AssessmentData model)

   at ST.Data.DbAccessLayer.AttemptTransaction.Try[TArgument1](Action`1 transactedOperation, TArgument1 argument1)

   at ST.Data.CatalogData.DocumentParsers.Hf7Parser.PersistModel(AssessmentData model)

   at ST.Data.CatalogData.CatalogDataFileImporter.ExecuteCatalogImport(Func`1 createModel, Version currentFileVersion, String sqlConnectionString, Hf7Parser parser)

   at ST.Data.CatalogData.CatalogDataFileImporter.ImportPatchDataDocument(Func`1 createModel, Version currentVersion)

   at ST.BusinessObjects.FileDownload.CatalogImportOperation.Import(Boolean alwaysImport)

   at ST.UI.Controllers.CatalogData.CatalogImportController.UpdateDatabase(Boolean alwaysImport)

   at ST.UI.Controllers.Tasks.WorkItemCatalogDataImport.<RunAsync>d__0.MoveNext()

   --- End of inner exception stack trace ---

 

Which seems to indicate a deadlock condition in the database - the question is why? The DB server is MSSQL 2012 on Windows Server 2008R2, Console is v9.1.0 Build: 4511 on Windows Server 2008R2, SQL load is low (currently only used for 'internal' applications like Shavlik, backups catalogs/antivirus etc.)

Both machines are ESX5.5 VM's on 10Gbe iSCSI SAN storage and vFRC allocated to 'workload' volumes. The SQL VM is provisioned with 20GB vRAM and 4 vCPU's. Console VM has 8GB & 4 vCPU's,

 

Any help appreciated!


Does Shavlik Protect 9.0/9.1 Support SHA2?

$
0
0

Purpose


Now that Microsoft is planning on phasing out SHA1 in early 2016, the question of whether Shavlik Protect 9.0/9.1 supports SHA2 is being asked more and more.  This article will answer that question.

 

Solution

 

  • Shavlik Protect 9.0/9.1 do not support SHA2.
  • The upcoming release of Protect 9.2 late Fall will support SHA2.


Affected Product(s)


Shavlik Protect 9.x

 

 



Error Code 452 when scanning OU

$
0
0

I have two recently deployed machines that when scanning their OU I get an Error Code 452 'Unable to connect to the remote machine.'  Other machines in the OU scan without problem.

 

I can scan both PCs by IP or by machine name, but when I scan the OU that they are in both of these machines return the error.  I'm perplexed -- can anyone shed some light?

Patching VMware Templates

$
0
0

We are currently beginning deployment of Shavlik 9.1.  I attempted to scan our VMware templates (ESXi 5.5) and was receiving the following error "Error 800 - Unable to retrieve OS info for image (24309)".  Upon further research I found this DOC (Troubleshooting Shavlik Protect Patch Scan Error Messages) that stated "SysPrep: Enter System Out-of-Box Experience (OOBE) with Generalize checked.  Generalize is not a supported switch and will cause scan failures to offline VM and Templates.".  Does that mean generalized images are not supported?  Wouldn't the vast majority of templates be generalized?

 

Thanks,

Chris

Enabling Additional Threat Scan Tracing For A Single Agent

$
0
0

Purpose

 

The purpose of this document is to provide steps to enable additional logging surrounding threat scans.

 

Symptoms

 

If there is a problem with threat scan detection we may need full tracing from the threat (antivirus) scan.

 

Resolution

 

1. Go to the client (agent) system where you are seeing the issue.

2. Open Services.msc, and stop the following services:

          Shavlik Protect Agent

          Shavlik Protect Agent Dispatcher

          Shavlik Protect Threat Engine 

3. Open task manager, Processes, and end the STAgentUI.exe process. (Displayed as Agent UI in Windows 8/Server 2012 process manager.) All other agent processes should have ended when the services were stopped.        

4. Delete or move ALL the files that currently exist in the following directory:

     v.9.x on Windows 7,8,2008,Vista,2012: C:\ProgramData\LANDesk\Shavlik Protect\Logs

     v.9.x on Windows XP or 2003: C:\Documents and Settings\All Users\Application Data\LANDesk\Shavlik Protect\Logs

5. Go into the following directory:

     v.9.x on 64bit: C:\Program Files (x86)\LANDesk\Shavlik Protect Agent

     v.9.x on 32bit: C:\Program Files\LANDesk\Shavlik Protect Agent

6. Locate the STThreat.exe.config, and open the file in a text editor.

7. Find the line that states:

     <threatServiceStartup preventAPIfIncompatiblesExist="false" debugFiles="false" tslog="false"/>

     Change it to the following:

     <threatServiceStartup preventAPIfIncompatiblesExist="true" debugFiles="true" tslog="true"/>

     Then locate the line:

     <add name="NativeLog" type="FileLog" initializeData="|LOGDIRECTORY|\STThreat.log" maximumFileSize="20000000" maximumNumberOfFiles="2"/>

     Change it to the following:

     <add name="NativeLog" type="FileLog" initializeData="|LOGDIRECTORY|\STThreat.log" maximumFileSize="20000000" maximumNumberOfFiles="30"/>

8. Save the file.

9. Start all the agent services back up (see step two).

10. Start the agent. You can do this by opening the agent UI from the start menu (paths below) or by going into the program files directory and running the STAgentUI.exe.

     v.9.x: Start > All Programs > Shavlik Protect > Shavlik Protect Agent

11. Run a full threat scan or recreate the issue.

12. Once the scan is complete or you have reproduced, zip and send ALL the files that now exist in the directory mentioned in step four.

     Note: Some of the additional logging created may be in XML format.

 

Description

 

How-To

 

Affected Product(s)

 

Shavlik Protect 9.x

MS15-080 - KB3078601 (KB3078662) Shows Missing when Installed

$
0
0

I have several PCs that Shavlik Protect is reporting the above patch as missing when in fact Windows shows it as installed.  Shavlik would you please review and verify your detection logic on this patch.

Microsoft Security Bulletin MS15-093

$
0
0

Microsoft Security Bulletin MS15-093 was released today. When will Shavlik have it available?

Java 8 Update 60 detected as missing security patch

$
0
0

Hi,

 

Just scanning our system now with Security scan and noticed that it is detecting Java 8 Update 60 as missing on systems, even though Update 60 doesn't include any security fixes and the Java security baseline indicates Java 8 update 55 is still the latest.

 

Java™ SE Development Kit 8, Update 60 Release Notes

 

JRE Family VersionJRE Security Baseline
(Full Version String)
81.8.0_51
71.7.0_85
61.6.0_101

 

My questions are:

 

1. Is there a reason this is list as a missing security patch.

 

2. Is there an way I can remove it from our internal security scan so it doesn't appear as a missing patch.


VMWare Machine Hardware version

$
0
0

Hello,

 

I have a request from one of my colleagues to see if it is possible for Shavlik Protect to update/upgrade the machine version of a VMWare guest after we have updgraded the version of ESXi on the host itself. We are currently in the middle of a VMWare ESXi upgrade and would like to know if there is any way to automate the upgrade of the guest hardware version, we are aware Shavlik can update vmware tools but this is asking specifically about machine hardware version.

 

Regards,

Radu

Drag and Drop patches aren't being found?

$
0
0

We have a network in this secure facility that we run Shavlik on to patch. There were some Windows IE 11 patches we downloaded MS15-093, I dropped them into the patches folder in the ProgramData\LANDESK\Shavlik Protect\Console\Patches. How do I update the patches so Shavlik sees them? How can I push those two patches to the machines?

 

Thanks!

File Version is Less Than Expected

$
0
0

Template

1604_157_49_cache.png

 

                 

Symptoms


Scan results showFile version is less than expected...

 

1-file version less than expected.png

 

 

 

                 

Cause


This message indicates why a particular patch was determined to be missing; this is not stating that something went wrong in the program. During the Patch scan, one or more of the applicable file versions were checked against what version they should be, and was found to be a value lower than it should be.

 

Example: In the example image at the beggining, the fileC:\Windows\MICROSOFT.NET\FRAMEWORK\V4.0.30319\CLR.DLLwas found to have a current version of4.0.30319.17929and the patch found missing will change that value to4.0.30319.19080.

 

 

                 

Solution


To correct this issue, install the missing patch, and rescan the machine. Provided the patch is not found missing again, the issue has been resolved.

Agent deployment failing

$
0
0

Recently i noticed i am unable to deploy agents. The machines are detected and scan fine, but when i select a machine or machine group, right click and attempt to deploy the agent along with a policy it fails with a generic "Deployment failed".

Where should i start troubleshooting?

Pushing Shavlik Agents as Part of the Software Distribution

$
0
0

Hey all,

 

I was wondering if it is at all possible that Shavlik Agents could be installed via Shavlik as a patch push?  In essence I have a bunch of agentless machines that I am going to push the agent onto and I know that I would have to set command line parameters to install quietly and to use the proper credentials to install as well as to register the right server and policy for the install, but I'm having a rough time going about it myself.

 

Also as a side question if anyone happens to know, but wouldn't it make it easier to just include the Shavlik Agent itself as part of the list of Software Distributions in order to allow the software to be pushed by itself with a properly set patch group list and such?  I don't know if this was planned to be implemented but if it is it would make this process much easier.

 

Thanks in advanced,

 

Collin Hunter

Viewing all 2126 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>