Our info sec department keeps coming back to me saying the MS bulletin 12-035 is missing on tons of our servers. I looked into my setting and I and my patch templates are including every criticality for All Security Patches. Im not doing security tools and non-security patches. is the MS12-035 Bulletin in a different category?
↧
MS12-035 not showing up unless i scan for that MS
↧
Agent Status Message: "Agent didn't respond"
Issue
When trying to send a command to an Agent from the Console you receive the response: "Agent didn't respond"
Possible Causes
1) Are you able to ping the Agent Machine. Is it on your network still and turned on?
2) Are the proper ports open. The Agent machine needs to have port 4155 open to listen for commands from the Console and the Console needs to have port 3121 open to recieve the response back from the Agent.
To test this you can use Telnet:
3) Ensure that DNS resolution is working correctly when contacting the Protect console system. From the client system run the following commands. The results should match up.
nslookup consolemachinename
nslookup consoleIPaddress
4) Is your Agent able to resolve the names in your Console Alias Editor. If needed update the Console Alias Editor by adding the IP Address, NetBios and FQDN. To do this in Protect go to Tools>Console Alias Editor and add the Alias needed. Then manually have your Agent check-in to update it.
5. Is the time on your Agent Machine within 2 minutes of the time on the Console. If the times are not syced they will not communicate because of trust issues by not being able to verify the certificates.
Affected Products
Shavlik Protect
↧
↧
Issues with MS15-058 (KB3045316)
Has anybody managed to install this patch successfully? I have pushed to 3 of our SQL servers, it shows as being installed successfully but our Nessus scan pulled the server up as it was missing this patch.
When I scan the machines again the patch shows as missing but in the patch information it has an install date and time from when we pushed it??
Any ideas?
↧
Java detection not working properly when there are multiple installs of different patch levels
I have a bunch of systems with different versions of Java installed at different update levels. For example 1.6.0_23 may be installed in one place, but 1.6.0_45 in another location. When Shavlik scans it apparently sees the later version and declares the system up to date, but doesn't report on the older version even existing. Can this behavior be modified?
I've seen it so far on both 1.6 and 1.7 installs of varying patch levels.
↧
Console Scheduler Credential - The Selected Console Scheduler Credentials Does Not Match The Current User's Account. Please Enter A Shared Credential Matching The Current Account.
Purpose
This document will explain why you are seeing a popup message: The selected Console Scheduler credential does not match the current user's account. Please enter a shared credential matching the the current account.
Description
You will receive the error depicted below if you do not have valid shared credentials set for the 'Scheduled Console Tasks scheduler'. In Protect 9.2, you must create then set your currently logged on user account (the account you use to log into the Protect server) in Manage > Scheduled Console Tasks > Set Scheduler Credentials.
Resolution
1. Navigate to Manage > Credentials create a new entry for your currently logged on credentials. Make sure to check-mark: 'Share this with background tasks, Agent, and other feature'.
2. Navigate to Manage > Scheduled Console Tasks and click on 'Set scheduler credentials...'. Choose the credentials you created and click 'Assign'.
3. You may see the following popup informing you of possible further steps if other administrators log into the Protect server with their own accounts.
Affected Product(s)
Protect 9.2
↧
↧
Exclude MSWU
I'd like to create a patch scan template that excludes all and any future MSWU-xxxx patches from the template. What I've done so far is go into View > Patches from the Menu. Then search for MSWU and add them to a new patch group. I then modified my template by adding the new group as "Skip Selected" "Patch Groups".
My question is, will this include any up-coming that Shavlik/Microsoft might release in the futrue? If not, how can I make sure?
↧
Error message when launching Shavlik Protect.
Hello all,
When we go to launch Shavlik Protect we get the following error, which is attatched below. We noticed it starting to act a little strange (it would get hung up on scans, etc.) now it won't even open. We have done the usual reboot and also verified the services are started. It doesn't bring up a second window after I hit ok. Any ideas?
Thanks,
Chris
↧
Why Do Patches Not Have A 'Download' Indicator Next To Them?
Purpose
This documents explains why some patches do not have a 'Download' indicator next to it.
Symptoms
You find a patch in Patch View or a scan result, and there is now Download button in the patch information.
Cause & Resolution
Not all patches are available to be deployed with protect but the scan information is still available to detect if the patch is missing. We refer to these as ‘scan only’ items. In some cases the patch requires user intervention and the patch cannot be deployed silently, a good example of this would be Exchange service packs therefore we are not able to deploy the patch with Protect. Other times the vendor has changed the URL or the patch is no longer publically available. In those cases we leave the scan detection there but are unable to download the patch.
Additionally, the lack of download icon could be caused by out of date data files. You should run a Help -> Refresh Files to ensure you have the latest files.
Affected Product(s)
Shavlik Protect 9.x
↧
Credentials in Administrator group??
Is it possible for the credentials needed for Shavlik be placed in a nested administrator group on the local machine? I.E. If I place domain\ShavlikAdmin in group MyDomainLocalAdmins and then make MyDomainLocalAdmins group a local administrator, will this work? I am getting credential errors when I try this way.
↧
↧
Shavlik and SQL Service Packs
0Our SQL 2008 servers (on W2008R2) recorded need for SQL Service Pack 3 a month or so ago. We attempted the update via Shavlik but they failed because Shavlik cannot run the dialog box that happens with that update (so we learned).
So we loaded it manually on our servers last month and just confirmed that it's running that version of SQL.
I ran a security scan on those servers today and it is still reporting a need for that same Service Pack.
Why would it still be reporting a need for this Service Pack?
Thanks for your help.
-Dharmatma
↧
October 2015 Microsoft Patches fail to download
When attempting to download October 2015 Microsoft patches, we get an error in the Shavlik Protect Operations Monitor. Status is "Connection lost: The remote certificate is invalid according to the validation procedure." Non-Microsoft updates download just fine (Adobe, Citrix, etc).
↧
Network connection error (201) on two servers across a WAN
Hello! We are a new Protect implementation and are having issues with scanning and updating of two servers that reside on the far side of a WAN from the console. On scheduled scans, the first attempt always fails with a 201 (Network connection error. Verify that you can remotely log on to the specified machine) error. Both servers are correctly configured for connections, remote registry, etc. When manually scanning the error is usually 452 (unable to connect to remote machine). Making second attempt within a few minutes of a failure will usually yield a successful scan.
In short, something about going over the WAN is causing an error on initial attempts, but follow-up attempts have a good shot at succeeding. We are clean and standard with regard to Active Directory, DNS, time synch, permissions, bandwidth, and so on. From the console I can connect to both machines over CIFS or whatever else without issue.
Has anyone else dealt with this issue over a WAN before? Suggestions?
↧
Software Distribution update?
I have been looking around for a way to update/upgrade some of our applications (such as Java & Adobe products) to newer versions and it seems the best way to do this is highlighted with some very good steps in the Software Distribution Best Practices and Informational Guide. The problem I am finding is that this is full of installations that are very, very old (seems to be from 11/18/2013) and obviously I am not looking to install Adobe Flash Player 10.2 or even 15.0 when we are currently trying to push version 19.x.
Is there a way to get an updated Software Distribution set or another way to update these products? I was able to find the Java update here, but that doesn't address any of the other applications that are listed in the Software Distribution "Supported Products".
If I am missing something, please forgive me as I have been using Shavlik Protect for a long time but like many other products, I use it for what I need and other features (like this one) go unnoticed until such a time as I have a need. !
↧
↧
Patch not available for language selected.....Windows 10 enterprise
I have a new laptop with a fresh install of Windows 10 enterprise and Office 2013 w/sp1. When I attempt to patch it, the patches fail with the following;
If I filter out this patch and rescan, the patches fail again with the same error....
So what gives here?
Michael Goff
↧
MS12-035 not showing up unless i scan for that MS
Our info sec department keeps coming back to me saying the MS bulletin 12-035 is missing on tons of our servers. I looked into my setting and I and my patch templates are including every criticality for All Security Patches. Im not doing security tools and non-security patches. is the MS12-035 Bulletin in a different category?
↧
Ingore a particular patch for a particular host?
Hello, We have two newly installed applications that, unfortunately are not compatible with current versions of Java. We would like our scans to NOT show missing Java patches just for these two hosts. Is there anyway to do this? We are using the WuScan, and I know that a custom scan can be configured, but that seems like overkill if we want to ignore particular patches on particular hosts. Thank for any help you can provide.
↧
patch definitions not updating
I have a large percentage of my Shavlik Agents stuck with Septembers Patch definitions 2.0.1.4686 and not updating, what can I do to fix?
↧
↧
Upgrade to 9.2 crashes, no Shavlik now ???
Hello,
I had a problem with shavlik, more exactly it didn.t want to deploy anything Error reason: Unable to connect to the remote server .
After that i tried a Test Patch Deployment and got the error failed to install and or connect to the shavlik scheduler service
Being in the middle of patching on several customer (which will be extremely angry) i tried several things from the net without succes, refreshed files, restarted server, console, services etc etc.
At final, tried to upgrade to 9.2, had a error, crashed, now i have no shavlik installed. MAJOR ISSUE
Shavlik, help ? it.s your fault
↧
Shavlik won.t deploy, URGENT issue, can.t patch
Hello,
I have this issue :
On the console in case i have multiple clients (>100 servers) and on all of them i can only deploy 10% of the patches, on the rest of them i have that error.
When i do a Test Deploy i get this :
I already tried to reinstall the ST Remote Scheduler Service with this, but without success
How To: Uninstall & Reinstall The Shavlik (ST) Remote Scheduler Service On A Single Machine
Also, reinstalled the console, tried to restart services/server etc. I need some suggestions quickly, i.m in the middle of patching and nothing works.
URGENT URGENT
↧
Patch groups Shavlik 9.2
In Shavlik 9.1 we had 2 different Update groups, with different assigned patches. Since the update to Shavlik 9.2 I cannot make a difference between the 2 groups. If I uncheck an vendor in Group 1 it will also be unchecked in Group 2. Is there a new way of working to make a difference in patch groups?
↧