Quantcast
Channel: Shavlik User Community : All Content - Ivanti Patch for Windows
Viewing all 2126 articles
Browse latest View live

Problem with FF10-024 QFF3617 after upgrade to 9.2

$
0
0

Hi,

I've just upgraded to 9.2 and found a strange issue with an old Firefox patch, We use patch groups to scan with, the group contains all Security Patches, Security tools and Non-security Patches. We do not add any Software Distribution and this is also unticked in the scan template.

 

When scanning my machines it is showing that bulleting ID - FF10-024 - OFF3617 (Patch Type Software distribution) is shown as missing. There is no Firefox installed on these machines.

 

I managed to get around this by removing FF11-008 - QFF3617 from my Patch Group so there must be an issue with this patch, please can this be looked at?

 

Thanks


Excluding Patches

$
0
0

After updating to 9.2 I noticed that you cannot exclude patches by clicking on the particular machine group, then Add, then unchecking the boxes for the patch.  I am now going thru the patch templates to exclude patches but I am still seeing patches that I have asked to exclude showing up in the scans.  Google Drive, Skype, Picassa are ones in particular.  I am going into the patch template and both checking the left side to "scan for these" and the right side  for "exclude these"  I am making choices on both sides so as to make sure they are not being included but I am still showing those patches when I scan.  I hope this makes sense.  Is there something I am missing?  Thanks in advance!

 

jgivhan

Flash Player updates, and Security Patches vs Software Distribution

$
0
0

What is the difference between security patches and software distribution?  For example, if a Google Chrome update shows as either a security patch or software distribution, isn't the process the same?  Shavlik pushes down the latest installer and installs it?

 

I ask this because I have software distribution turned off.  I only do security patches and non-security patches.  Usually. this is fine.  However, with the recent Flash Player updates, these only showed as software distribution, so I missed them because they weren't security patches.

 

Can you shed some light on this?

 

Also, will the latest Flash Player updates ever appear as security updates?

Error Unknown When Activating Shavlik Protect Console License

$
0
0


Purpose


This document will show how to successfully activate your Shavlik Protect console license when receiving the errorUnknown while trying to automatically activate your license.

 

 

Description


You receive the following error when trying to automatically activate your Shavlik Protect console license:

 

Shavlik.PNG

 

 

Cause

 

This error happens when your Shavlik Protect Console is unable to reach our licensing server.

 


Resolution


You will need to configure your proxy to allow access to license.shavlik.com as a permanent solution. You can find the complete list of required URLs for Shavlik Protect at Shavlik Protect Firewall And Proxy Exceptions URL List. If you are unable or prefer not to change your proxy configuration, you can successfully activate your Shavlik Protect console license offline following the instructions in this document How To Process A Manual (Offline) Activation For Shavlik Protect.


 

Affected Product(s)

 

Shavlik Protect 9.x

Stagger Reboots???

$
0
0

Does anyone have a script to more evenly stagger reboots?  We are running into a boot storm essentially when patching a large number of VM's.  I know the simple answer is to patch\reboot in smaller groups, but I'd really like patching to be fire and forget.  I don't think that there is an easy way without scripting inside or outside of Shavlik.

 

Thanks peeps!

Upgrade from 9.1.0 to 9.2 - upgrade database error

$
0
0

     Hello,

 

When I tried to upgrade to the latest Shavlik protect form 9.1.0 Patch 3 to 9.2 I get the error message below.  The DB is running on our SQL (2008) server not locally.  The server is running Server 2008 R2 (64-Bit)

Violation of UNIQUE KEY constraint 'UK_Cve_cveID'.  Cannot insert duplcate key in object 'dbo.Cve'.  The statement has been terminated

 

Capture.PNG

Shavlik Protect Landing Page

$
0
0

Shav_logo_no_glow_061213.png

 

This is a list of highly recommended documents for improving general knowledge of the Shavlik Protect product. This article is not a comprehensive list of documents.

 

For the Shavik Protect specific landing page, please see document DOC-23514.

 

Initial Installation & Configuration

 

 

 

Licensing Information

 

 

 

Best Practices & How To's

 

 

 

Troubleshooting & Common Issues

 

Installation & Upgrade

Obtaining Trace Logs

Scanning & Detection

Patch Deployment & Shavlik Scheduler

Database Related

Agents

Other

 

 

Other Useful Information

 

Shavlik 9.2 - Issue with patches for Firefox and Adobe appearing for system that do not have these products installed

$
0
0

After upgrading to shavlik 9.2 I'm having an issue that the system scan shows patches for products that are not installed on the OS. This is very similar to the question that is being asked in Problem with  FF10-024 QFF3617 after upgrade to 9.2

However I don't believe the answer provided is sufficient.

 

In Shavlik 9.1 the scan engine was intelligent enough to recognise when a product was not installed on a system and would therefore not give the patch for that product as needing to be installed. In Shavlik 9.2, according to the answer provided in the above discussion, this is not the case?

 

I would like to be able to keep a single patch group from a specific point in time that I can run against a range of machines having different software products installed. If I have one machine with .Net installed and another with firefox installed do I now need two separate patch groups explicitily specifying the products installed on the system?

 

I hope you can clear this up for me as the new patch discovery seems like a bug to me

 

Larry


Shavlik VMware Tools

$
0
0

I am testing out the demo. I did a scan of some of my machines. It shows that the VMware tools are out of date (They are) however it only wants to patch it to an older version.

 

from 9.4.10 to 9.4.12. When 9.10 is out. And online you can download 10.x. I don't see 10.x in Shavlik at all. However it seems to be treating VMware Tools 9.10 as a separate install and I don't see a way to get it to deploy this. Any help would be appreciated.

 

Also I have added the vCenter server and had it scan all hosts (6.0u1).

Patch groups Shavlik 9.2

$
0
0

In Shavlik 9.1 we had 2 different Update groups, with different assigned patches. Since the update to Shavlik 9.2 I cannot make a difference between the 2 groups. If I uncheck an vendor in Group 1 it will also be unchecked in Group 2. Is there a new way of working to make a difference in patch groups?

Upgraded to 9.2 and when I run shavlik, just get the splash screen saying "Importing Patch definitions..."

$
0
0

Just run the update this morning to Shavlik Protect 9.2, update ran successfully as did the db schema update.  Ran Shavlik and splash screen appeared and it just stays stuck with "Importing Patch definitions".   Looks to be running ok according to Task Manager, but not sure if it is actually updating or has become stuck.  Been like this for approximately 2 hours now. Anyone else seen this?

Service Packs in patch scan results

$
0
0

I have in the scan results Service Pack available as missing patch. I have disabled Microsoft in the patch scan template but after every scan the (only Microsoft) service packs are detected as missing patches:

 

Settings in scan template:

Scan Template.png

Scan results:

Result.pngSPs.xml.png

Custom Actions not working in 9.2

$
0
0

Has anyone seen this issue.  I was trying to deploy an msi via Custom Actions in 9.2.  I am able to setup the null patch.  I go into my custom actions and set 1) push file 2) push file 3) call .bat file to launch the install.  The files make it over into C:\Windows\ProPatches\Installation\InstallationSandbox#2015-10-20-T-15-01-10, but never to the C:\Windows\ProPatches\Install directory.  Am I losing my mind?  I used to do this 9.1 all the time without issue, but I have never seen this action.  I am running 9.2.4918.  This was an "upgrade" from the beta.  Everything else looks good.  It seemed on the install that it removed the beta files prior to dropping the newer release.

 

Thanks,

Shoup

Console Scheduler Credential - The Selected Console Scheduler Credentials Does Not Match The Current User's Account. Please Enter A Shared Credential Matching The Current Account.

$
0
0

Purpose


This document will explain why you are seeing a popup message: The selected Console Scheduler credential does not match the current user's account. Please enter a shared credential matching the the current account.

 

Description

 

You will receive the error depicted below if you do not have valid shared credentials set for the 'Scheduled Console Tasks scheduler'.  In Protect 9.2, you must create then set your currently logged on user account (the account you use to log into the Protect server) in Manage > Scheduled Console Tasks > Set Scheduler Credentials.

 

Resolution


1. Navigate to Manage > Credentials create a new entry for your currently logged on credentials.  Make sure to check-mark: 'Share this with background tasks, Agent, and other feature'.

2. Navigate to Manage > Scheduled Console Tasks and click on 'Set scheduler credentials...'.  Choose the credentials you created and click 'Assign'.

3. You may see the following popup informing you of possible further steps if other administrators log into the Protect server with their own accounts.


Affected Product(s)


Protect 9.2

Delete credentials

$
0
0

I'm trying to clean up our credentials library, but I am unable to delete credentials created by other users (predecessors, mainly). How can I remove credentials that were created by a no-longer active account?


Custom Patch issues after 9.2 Upgrade. Couple of issues.

$
0
0

The first issue I am seeing is that the Install file command line switches I am putting into that field are not there if I save the XML and go back into it to edit it later. I'm almost 100% sure those commands stayed in that line in 9.1. I'm unable to go back in and edit those lines, and it also seems to be ignoring what I put in that line anyways.

 

The second issue I have is that it appears to be launching the patch file twice on custom patches.

 

My current example is a Visual Studio 2013 Update 5 patch I made.

 

I added the .exe to the deployment info tab, and when I deploy the patch I can go on the machine I'm testing with and that patch exe is running twice in the Task Manager. I let it sit for about 3 hours this morning to see if it would ever finish and it never did. I then decided to run the patch manually with a /passive switch to see if it would run manually and also to time the install. IT ran, and only one instance of the exe was in the Task Manager, the install completed in about 20 minutes.


I decided to try the /passive switch in the custom patch so I could monitor the deployment this time. Again the deployment launched 2 instances of the install exe and appeared to ignore the /passive command as nothing was displayed on the screen.


Any help would be appreciated.

A few picky comments on Protect 9.2

$
0
0

When editing a patch group and adding patches, I can right-click on the selected patches and add by picking a patch group from a list that may be long enough to need scrolling.  But most likely I want to add to the group displayed in the lower pane.  There's no context menu option for this, nor can I drag and drop.

 

Display scan results, click on a missing patch (not first column), screen scrolls right.  Other places such as machine view don't do this.

 

Looking at a patch in machine view, I can get a list of affected machines in the bottom pane, but I can't export the list.  I would use such a list outside of Protect to look for machines powered off or not logged in to patch outside of our scheduled maintenance windows.

 

There is no complaint when starting a scan if a machine group includes a linked file that doesn't exist.

 

With the taskbar at the top of the screen and not autohidden, help comes up under the taskbar.  (Using a Remote Desktop connection in case it matters.)

 

When I open the operations monitor, I sometimes see standard Windows min/max/close buttons until I move the mouse over them, then they are replaced by your custom buttons.

Excluding Patches

$
0
0

After updating to 9.2 I noticed that you cannot exclude patches by clicking on the particular machine group, then Add, then unchecking the boxes for the patch.  I am now going thru the patch templates to exclude patches but I am still seeing patches that I have asked to exclude showing up in the scans.  Google Drive, Skype, Picassa are ones in particular.  I am going into the patch template and both checking the left side to "scan for these" and the right side  for "exclude these"  I am making choices on both sides so as to make sure they are not being included but I am still showing those patches when I scan.  I hope this makes sense.  Is there something I am missing?  Thanks in advance!

 

jgivhan

Flash Player updates, and Security Patches vs Software Distribution

$
0
0

What is the difference between security patches and software distribution?  For example, if a Google Chrome update shows as either a security patch or software distribution, isn't the process the same?  Shavlik pushes down the latest installer and installs it?

 

I ask this because I have software distribution turned off.  I only do security patches and non-security patches.  Usually. this is fine.  However, with the recent Flash Player updates, these only showed as software distribution, so I missed them because they weren't security patches.

 

Can you shed some light on this?

 

Also, will the latest Flash Player updates ever appear as security updates?

Shavlik Remote Scheduler Service stopped

$
0
0

I upgraded to V 9.2 on Monday. We have a scheduled scan that is supposed to run on Thursday; it did not. (I set the credentials for it yesterday.) Server was rebooted for VMware tools install. The Shavlik Remote Scheduler Service is stopped and cannot be started. Is this normal behavior / am I missing something, or do I need to make a support request?

Also, if I do need to make a support request, I'm not sure how to 'reproduce' the issue since the service is stopped.

Thanks as always for your help.

-Dharmatma

Viewing all 2126 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>