Does Shavlik supports an in-place-upgrade option for WIN10 enterprise, using our WIN10 ISO.  We'd like to avoid the 'wipe and load' scenario, if at all possible, when upgrading from 1607 to 1703.  I don't think Shavlik supports 'Task sequence' type options that SCCM does.

Also I do not see KB4022715 to push for patches.  It comes up hot on our ACAS scanner but Shavlik showes nothing for that patch.

Thank you

Steve

Is there a way to customize the Shavlik Agent so that it does not force a restart when certain applications are running? I have several users who connect remotely to PCs and have jobs running overnight. When they come in hours after our agents patch, they discover that their PCs have rebooted and their jobs lost. I have spoken with support prior who state that a Shavlik will restart when a user session is not active.

If there is a ability to integrate some scripting alongside these agents, that would be ideal.

I am using Shavlik Protect Standard 9.2.0 Build 5119

the download option is not available

have tried refreshing xml still not there

Hallo zusammen,

auf einigen unserer Rechner sind administrative Freigaben via GPO deaktivert (AutoShareServer und AutoShareWks = 0).

Auf diesen Rechnern schlägt daher der Patchscan mit dem Fehlercode 301 fehl, obwohl wir bereits in den Patchoptionen den Punkt "Temporäres Systemlaufwerk erstellen, falls keines vorhanden ist" aktiviert haben.

Welche Maßnahmen müssen wir zwecks Lösung treffen?

(Anmerkung: Das Aktivieren der administrative Freigaben ist in diesem Fall leider keine Option für uns.)

Zur Info auf den betroffenen Rechnern gibt es nur noch die Systemfreigabe IPC$, zu dieser werden über den, im ivanti konfigurierten Admin-User, beim scannen auch kurzzeitig 3 Sitzungen aufgebaut, es wird jedoch kein temp. Systemlaufwerk angelegt.

Grüße

Patches are failing with an error in the description field via Deployment Tracker with patch fails - returned 126

Overview

We are changing how we handle patching for Citrix Receiver to better match up with Citrix's lifecycle process. The changes we are making are:

Versions less than 4.9: Systems running versions of Citrix Receiver prior to version 4.9 will detect as previously, with the newest patch being offered updating the software to version 4.9 which is the Long Term Service Release (LTSR) of Citrix Receiver.

Version 4.9: As this is the LTSR release it will have any Cumulative Updates marked as applicable for it, but it will not have the update to version 4.10 marked as applicable. If you want to upgrade to 4.10 from 4.9, 4.10 will be available as a Software Distribution as a separate branch, similar to how major version updates are handled currently of Java Runtime Environment.

Version 4.10: As this is the current release, and the start of a new branch, it will have updates marked as applicable as they are released up to the point of the next LTSR release of Citrix Receiver. At this point a new branch will be created, with versions between 4.10 and the next LTSR being offered updates to the LTSR version.

Additional Information

• Lifecycle Milestones for Citrix Receiver - Citrix
  
• Citrix Receiver for Windows 4.9 LTSR

Affected Product(s)

Shavlik Protect 9.2.x

Protect SDK 9.2.x

Ivanti Patch for Windows Servers 9.3.x

hi,

the status column in the patch deployment shows scheduled instead of finished, even though the patches were successfully applied and the server rebooted.

Hello,

I’m trying to move my Ivanti console from one server (W2K8R2 STD) to another server (W2K16STD) but I always get the same error : Object reference not set to an instance of an object

Steps I did :

• Attached/detached my DB from SQL2005 to SQL2016 - SP1 – CU5 (13.0.4451.0)
• Changed the DB location with “Database setup tool” to this new SQL server

on the old server : (UserID with Admin rights on the server)

• Upgrade my Shavlik console from 9.1.xxx to IvantiPatchForServers_9.3.4510
• Backup Core settings
• Backup User settings

on the new server : (The same userid)

• Installed IvantiPatchForServers_9.3.4510
• The installation also installed SQL Express
• Created a local DB for the new installation of Ivanti Console
• Copied the Backup files from the old server to the new server
• Tried to Restore the Core settings but it always fails with the same error

This is the output of the logfiles located at C:\ProgramData\LANDESK\Shavlik Protect\Logs

1. ST.Backup.Protect.UI.managed.[username]@[domain].log

2017-12-15T10:20:09.8032504Z
0001 I Program.cs:49|'D:\Program Files\LANDESK\Shavlik
Protect\ST.Backup.Protect.UI.exe' is starting, version: 9.3.4510.0, full name:
ST.Backup.Protect.UI, Version=9.3.0.0, Culture=neutral,
PublicKeyToken=19306d7375e33918.

2017-12-15T10:20:35.7350073Z
0001 I Database.cs:70|Starting restore of the database.

2017-12-15T10:20:35.8600074Z
0006 I Credentials.cs:167|Starting deletion of invalid credentials.

2017-12-15T10:20:35.8912586Z
0005 I Credentials.cs:184|Finished deletion of invalid credentials.

2017-12-15T10:20:35.9068835Z
0005 I Credentials.cs:258|Starting restore of user credentials.

2017-12-15T10:20:35.9225083Z
0005 I Credentials.cs:274|Finished restore of '0' user credentials.

2017-12-15T10:20:36.0318846Z
0001 E MainForm.cs:414|System.NullReferenceException: Object reference not set
to an instance of an object.

   at
ST.Core.Net.ProxyCredentials.InitGlobalProxy(ProxyCredentials proxyCredentials)

   at
ST.BusinessObjects.FileDownload.ProxyConfiguration.<SafeConfigureAsync>d__2.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Backup.Protect.RestoreWorkflow.<RunInternalAsync>d__2.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Backup.Protect.NTService.<RunWithStoppedAsync>d__4`1.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Backup.Protect.UI.MainForm.<RestoreAsync>d__24.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Backup.Protect.UI.MainForm.<RunRestoreInternalAsync>d__26.MoveNext()

1. ST.DatabaseConfiguration.log

2017-12-15T10:19:32.0039302Z
0001 I Program.cs:212|'D:\Program Files\LANDESK\Shavlik
Protect\ST.DatabaseConfiguration.exe' is starting, version: 9.3.4510.0, full
name: ST.DatabaseConfiguration, Version=9.3.0.0, Culture=neutral,
PublicKeyToken=19306d7375e33918.

2017-12-15T10:19:32.0195551Z
0001 I Program.cs:238|Database installation wizard started.

2017-12-15T10:19:32.5664347Z
0001 S Program.cs:147|InstallInteractive|Entering.

2017-12-15T10:19:39.3477731Z
0001 S
InstallWizard.OnTransitionAwayHandlers.cs:16|PrepareConfigureSqlState|Entering.

2017-12-15T10:19:39.3946194Z
0001 S
InstallWizard.OnTransitionAwayHandlers.cs:16|PrepareConfigureSqlState|Leaving.

2017-12-15T10:19:44.6603745Z
0001 S InstallWizard.TransitionGuardHandlers.cs:43|GetDatabaseConnectionState|Entering.

2017-12-15T10:19:44.8634994Z
0001 S ConnectionValidator.cs:268|QueryConnectionState|Entering.

2017-12-15T10:19:44.8791260Z
0001 S ConnectionValidator.cs:268|QueryConnectionState|Leaving.

2017-12-15T10:19:44.8791260Z
0001 S SqlPrincipalManager.cs:420|QueryNameBySid|Entering.

2017-12-15T10:19:44.8791260Z
0001 S SqlPrincipalManager.cs:420|QueryNameBySid|Leaving.

2017-12-15T10:19:44.8947507Z
0001 S PermissionManager.cs:165|HasPermission|Entering.

2017-12-15T10:19:44.9416268Z
0001 S PermissionManager.cs:165|HasPermission|Leaving.

2017-12-15T10:19:44.9416268Z
0001 S PermissionManager.cs:165|HasPermission|Entering.

2017-12-15T10:19:44.9416268Z
0001 S PermissionManager.cs:165|HasPermission|Leaving.

2017-12-15T10:19:44.9416268Z
0001 S PermissionManager.cs:165|HasPermission|Entering.

2017-12-15T10:19:44.9416268Z
0001 S PermissionManager.cs:165|HasPermission|Leaving.

2017-12-15T10:19:44.9416268Z
0001 S PermissionManager.cs:165|HasPermission|Entering.

2017-12-15T10:19:44.9416268Z
0001 S PermissionManager.cs:165|HasPermission|Leaving.

2017-12-15T10:19:44.9572508Z
0001 S PermissionManager.cs:165|HasPermission|Entering.

2017-12-15T10:19:44.9572508Z
0001 S PermissionManager.cs:165|HasPermission|Leaving.

2017-12-15T10:19:44.9572508Z
0001 S RoleManager.cs:32|IsInRole|Entering.

2017-12-15T10:19:44.9572508Z
0001 S RoleManager.cs:270|IsInRole|Entering.

2017-12-15T10:19:44.9572508Z
0001 S RoleManager.cs:270|IsInRole|Leaving.

2017-12-15T10:19:44.9572508Z
0001 S RoleManager.cs:32|IsInRole|Leaving.

2017-12-15T10:19:44.9728759Z
0001 S
InstallWizard.TransitionGuardHandlers.cs:43|GetDatabaseConnectionState|Leaving.

2017-12-15T10:19:44.9728759Z
0001 S SqlPrincipalManager.cs:420|QueryNameBySid|Entering.

2017-12-15T10:19:44.9728759Z
0001 S SqlPrincipalManager.cs:420|QueryNameBySid|Leaving.

2017-12-15T10:19:45.0510019Z
0004 S DatabaseInstallerController.cs:237|ExecuteInstallAsync|Entering.

2017-12-15T10:19:45.0822517Z
0004 S DatabaseInstaller.cs:158|InstallAsync|Entering.

2017-12-15T10:19:45.0822517Z
0004 S DatabaseInstaller.cs:298|GetIntelligentTimeoutAsync|Entering.

2017-12-15T10:19:45.0822517Z
0004 S DatabaseInstaller.cs:298|GetIntelligentTimeoutAsync|Leaving.

2017-12-15T10:19:45.1291272Z
0005 I DatabaseInstaller.cs:365|Commit started.

2017-12-15T10:19:45.1447528Z
0004 I DatabaseInstaller.cs:412|(1000201) Linking console

2017-12-15T10:19:45.1603771Z
0005 I DatabaseInstaller.cs:377|Console linked to existing database.

2017-12-15T10:19:45.1603771Z
0005 I DatabaseInstaller.cs:1096|Completed install transaction scope.

2017-12-15T10:19:45.1603771Z
0005 S DatabaseInstaller.cs:937|SetupRoleUsersAsync|Entering.

2017-12-15T10:19:45.1603771Z
0005 I DatabaseInstaller.cs:441|Changed database context to 'Protect'.

2017-12-15T10:19:45.1760023Z
0005 S SqlPrincipalManager.cs:212|GetCreateServiceAccountLogin|Entering.

2017-12-15T10:19:45.1760023Z
0005 S SqlPrincipalManager.cs:326|GetCreateAccountLogin|Entering.

2017-12-15T10:19:45.1760023Z
0005 S SqlPrincipalManager.cs:326|GetCreateAccountLogin|Leaving.

2017-12-15T10:19:45.1760023Z
0005 S SqlPrincipalManager.cs:212|GetCreateServiceAccountLogin|Leaving.

2017-12-15T10:19:45.1916275Z
0005 S RoleManager.cs:309|IsInRoleAsync|Entering.

2017-12-15T10:19:45.1916275Z
0004 S RoleManager.cs:309|IsInRoleAsync|Leaving.

2017-12-15T10:19:45.1916275Z
0004 S DatabaseInstaller.cs:937|SetupRoleUsersAsync|Leaving.

2017-12-15T10:19:45.1916275Z
0004 S RoleManager.cs:211|CleanupDbExecutorRoleAsync|Entering.

2017-12-15T10:19:45.1916275Z
0004 I RoleManager.cs:219|Removing db_executor role.

2017-12-15T10:19:45.3166285Z
0005 S RoleManager.cs:211|CleanupDbExecutorRoleAsync|Leaving.

2017-12-15T10:19:45.3166285Z
0005 S DatabaseInstaller.cs:158|InstallAsync|Leaving.

2017-12-15T10:19:45.3166285Z
0005 S DatabaseInstallerController.cs:237|ExecuteInstallAsync|Leaving.

2017-12-15T10:19:48.5298254Z
0001 S Program.cs:147|InstallInteractive|Leaving.

2017-12-15T10:19:48.5298254Z
0001 I Program.cs:277|Database installation complete.

1. ST.Protect.managed.[Username]@[domain].log

2017-12-15T10:19:51.7651871Z
0001 C Launcher.cs:87|System.InvalidOperationException: Crash from UI thread
---> System.InvalidOperationException: Crash from UI thread --->
System.NullReferenceException: Object reference not set to an instance of an object.

   at
ST.Core.Net.ProxyCredentials.InitGlobalProxy(ProxyCredentials proxyCredentials)

   at
ST.BusinessObjects.FileDownload.ProxyConfiguration.<ConfigureAsync>d__1.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Protect.Forms.ConsoleStateExaminer.<RunChecksThatCauseApplicationExitAsync>d__13.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Protect.Forms.ConsoleStateExaminer.<IsStateValidAsync>d__0.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Protect.Forms.Main.Splash.<OnShownAsync>d__6.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Protect.Forms.Main.Splash.<TaskFormShown>d__9.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   --- End of inner exception stack trace ---

   at
ST.Protect.Launcher.TerminateFromThreadException(Exception exception)

   at ST.Protect.Launcher.ApplicationThreadException(Object
sender, ThreadExceptionEventArgs e)

   at
System.Windows.Forms.Application.ThreadContext.OnThreadException(Exception t)

   at
System.Windows.Forms.Control.InvokeMarshaledCallbacks()

   at
System.Windows.Forms.Control.WndProc(Message& m)

   at
System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr
wparam, IntPtr lparam)

   --- End of inner exception stack trace ---

   at
ST.Protect.Launcher.TerminateFromThreadException(Exception exception)

   at ST.Protect.Launcher.ApplicationThreadException(Object
sender, ThreadExceptionEventArgs e)

   at
System.Windows.Forms.Application.ThreadContext.OnThreadException(Exception t)

   at
System.Windows.Forms.Control.WndProcException(Exception e)

   at System.Windows.Forms.NativeWindow.Callback(IntPtr
hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

   at
System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG& msg)

   at
System.Windows.Forms.Application.ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr
dwComponentID, Int32 reason, Int32 pvLoopData)

   at
System.Windows.Forms.Application.ThreadContext.RunMessageLoopInner(Int32
reason, ApplicationContext context)

   at
System.Windows.Forms.Application.ThreadContext.RunMessageLoop(Int32 reason,
ApplicationContext context)

   at
System.Windows.Forms.Form.ShowDialog(IWin32Window owner)

   at ST.Protect.Launcher.ExecuteMain()

   at ST.Protect.Launcher.ExecuteInMutex(Action
action, String mutexName)

   at ST.Protect.Launcher.Main(String[] args)

2017-12-15T10:19:51.7808124Z
0001 W Licensing.cs:400|No capability for 17170444

2017-12-15T10:19:51.7808124Z
0001 W Licensing.cs:400|No capability for 17170444

1. ST.ServiceHost.managed.log

2017-12-15T10:19:47.8110702Z
2414 I Host.cs:89|Service 'Host' is stopping.

2017-12-15T10:19:47.8423209Z
0006 I ComponentManager.cs:367|Component 'ResultsReceiver' shutdown.

2017-12-15T10:19:47.8423209Z
0006 I ComponentManager.cs:367|Component 'Messaging' shutdown.

2017-12-15T10:19:47.8891952Z
2415 I ComponentManager.cs:367|Component 'Scheduler' shutdown.

2017-12-15T10:19:48.1391970Z
0001 I Program.cs:41|'D:\Program Files\LANDESK\Shavlik
Protect\ST.ServiceHost.exe' is starting, version: 9.3.2666.0, full name:
ST.ServiceHost, Version=9.3.0.0, Culture=neutral,
PublicKeyToken=19306d7375e33918.

2017-12-15T10:19:48.1860722Z
0004 I Host.cs:75|Service 'Host' is starting.

2017-12-15T10:19:48.2329482Z
0004 I ComponentManager.cs:321|Component 'Administration' loaded.

2017-12-15T10:19:48.2329482Z
0005 I ComponentManager.cs:321|Component 'AgentDeployment' loaded.

2017-12-15T10:19:48.2641984Z
0004 I ComponentManager.cs:321|Component 'AgentSupport' loaded.

2017-12-15T10:19:48.2641984Z
0005 I ComponentManager.cs:321|Component 'CloudSynchronization' loaded.

2017-12-15T10:19:48.2641984Z
0004 I ComponentManager.cs:321|Component 'Credentials' loaded.

2017-12-15T10:19:48.2798221Z
0005 I ComponentManager.cs:321|Component 'EngineOrchestrator' loaded.

2017-12-15T10:19:48.2798221Z
0005 I ComponentManager.cs:321|Component 'PowerShellEngine' loaded.

2017-12-15T10:19:48.2954485Z
0004 I ComponentManager.cs:321|Component 'Exporter' loaded.

2017-12-15T10:19:48.3110723Z
0004 I ComponentManager.cs:321|Component 'Messaging' loaded.

2017-12-15T10:19:48.3110723Z
0005 I ComponentManager.cs:321|Component 'ResultQueueMonitor' loaded.

2017-12-15T10:19:48.3110723Z
0004 I ComponentManager.cs:321|Component 'ResultsReceiver' loaded.

2017-12-15T10:19:48.3266980Z
0005 I ComponentManager.cs:321|Component 'STS' loaded.

2017-12-15T10:19:48.3266980Z
0005 I ComponentManager.cs:321|Component 'Synchronization' loaded.

2017-12-15T10:19:48.3266980Z
0005 I ComponentManager.cs:321|Component 'Tracker' loaded.

2017-12-15T10:19:48.3266980Z
0005 I ComponentManager.cs:321|Component 'VirtualDeployment' loaded.

2017-12-15T10:19:48.3266980Z
0004 I ComponentManager.cs:321|Component 'Scheduler' loaded.

2017-12-15T10:19:48.5767001Z
0006 I ComponentManager.cs:437|Component 'Scheduler' started.

2017-12-15T10:19:48.5767001Z
0005 I ComponentManager.cs:437|Component 'Messaging' started.

2017-12-15T10:19:48.6704528Z
0007 I ComponentManager.cs:437|Component 'ResultsReceiver' started.

2017-12-15T10:19:48.8735770Z
0005 E ComponentManager.cs:396|Component 'Administration' failed to start.:
System.NullReferenceException: Object reference not set to an instance of an
object.

   at
ST.Core.Net.ProxyCredentials.InitGlobalProxy(ProxyCredentials proxyCredentials)

   at
ST.BusinessObjects.FileDownload.ProxyConfiguration.<SafeConfigureAsync>d__2.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at ST.Services.Administration.AdministrationServiceComponent.<StartAsync>d__3.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Host.ComponentManager.<StartComponentAsync>d__21.MoveNext()

2017-12-15T10:20:35.3756307Z
0010 I Host.cs:89|Service 'Host' is stopping.

2017-12-15T10:20:35.3912549Z
0007 I ComponentManager.cs:367|Component 'ResultsReceiver' shutdown.

2017-12-15T10:20:35.3912549Z
0007 I ComponentManager.cs:367|Component 'Messaging' shutdown.

2017-12-15T10:20:35.4068806Z
0011 I ComponentManager.cs:367|Component 'Scheduler' shutdown.

2017-12-15T10:20:36.0006346Z
0001 I Program.cs:41|'D:\Program Files\LANDESK\Shavlik
Protect\ST.ServiceHost.exe' is starting, version: 9.3.2666.0, full name:
ST.ServiceHost, Version=9.3.0.0, Culture=neutral,
PublicKeyToken=19306d7375e33918.

2017-12-15T10:20:36.0318846Z
0004 I Host.cs:75|Service 'Host' is starting.

2017-12-15T10:20:36.0475096Z
0004 I ComponentManager.cs:321|Component 'Administration' loaded.

2017-12-15T10:20:36.0475096Z
0005 I ComponentManager.cs:321|Component 'AgentDeployment' loaded.

2017-12-15T10:20:36.0475096Z
0004 I ComponentManager.cs:321|Component 'AgentSupport' loaded.

2017-12-15T10:20:36.0475096Z
0004 I ComponentManager.cs:321|Component 'Credentials' loaded.

2017-12-15T10:20:36.0475096Z
0005 I ComponentManager.cs:321|Component 'CloudSynchronization' loaded.

2017-12-15T10:20:36.0475096Z
0005 I ComponentManager.cs:321|Component 'Messaging' loaded.

2017-12-15T10:20:36.0475096Z
0004 I ComponentManager.cs:321|Component 'EngineOrchestrator' loaded.

2017-12-15T10:20:36.0475096Z
0005 I ComponentManager.cs:321|Component 'PowerShellEngine' loaded.

2017-12-15T10:20:36.0475096Z
0004 I ComponentManager.cs:321|Component 'Exporter' loaded.

2017-12-15T10:20:36.0631349Z
0005 I ComponentManager.cs:321|Component 'ResultQueueMonitor' loaded.

2017-12-15T10:20:36.0631349Z
0004 I ComponentManager.cs:321|Component 'ResultsReceiver' loaded.

2017-12-15T10:20:36.0631349Z
0005 I ComponentManager.cs:321|Component 'STS' loaded.

2017-12-15T10:20:36.0631349Z
0005 I ComponentManager.cs:321|Component 'Synchronization' loaded.

2017-12-15T10:20:36.0631349Z
0005 I ComponentManager.cs:321|Component 'Tracker' loaded.

2017-12-15T10:20:36.0631349Z
0005 I ComponentManager.cs:321|Component 'VirtualDeployment' loaded.

2017-12-15T10:20:36.0631349Z
0004 I ComponentManager.cs:321|Component 'Scheduler' loaded.

2017-12-15T10:20:36.1725103Z
0006 I ComponentManager.cs:437|Component 'Scheduler' started.

2017-12-15T10:20:36.1881361Z
0006 I ComponentManager.cs:437|Component 'Messaging' started.

2017-12-15T10:20:36.2193855Z
0006 I ComponentManager.cs:437|Component 'ResultsReceiver' started.

2017-12-15T10:20:36.3131354Z
0005 E ComponentManager.cs:396|Component 'Administration' failed to start.:
System.NullReferenceException: Object reference not set to an instance of an
object.

   at
ST.Core.Net.ProxyCredentials.InitGlobalProxy(ProxyCredentials proxyCredentials)

   at
ST.BusinessObjects.FileDownload.ProxyConfiguration.<SafeConfigureAsync>d__2.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Services.Administration.AdministrationServiceComponent.<StartAsync>d__3.MoveNext()

--- End of
stack trace from previous location where exception was thrown ---

   at
System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   at
System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task
task)

   at
ST.Host.ComponentManager.<StartComponentAsync>d__21.MoveNext()

Symptoms

When attempting performing scan, you may receive error "Error code 201: Network connection error. Verify that you can logon to the specified machine " even though the most common prerequisites have been met, e.g.

• DNS resolution: nslookup machinename resolves correct IP
• Admin share access: net use \\machinename\IPC$ succeeds
• Remote registry connection: Able to connect to the machine from Regedit by going to File > Connect Network Registry...
• Windows Firewall is not configured.
• Have admin access to VM's, can map to VM's remotely C$ & IPC$.

Troubleshooting

On the target machine, the "Operational" log located under the Applications and Services Log/Microsoft/Windows/NTLM records warnings “NTLM server blocked: Incoming NTLM traffic to servers that is blocked”, "NTLM authentication requests to this server have been blocked."

Cause

NTLM Traffic is blocked on the target machine. Local Group Policy "Network Security: Restrict NTLM: Incoming NTLM Traffic" is configured as "Deny all domain accounts" or "Deny all accounts".

Resolution

Set "Network Security: Restrict NTLM: Incoming NTLM Traffic" to "Allow all".

Affected Products

Shavlik Protect 9.2.x

Ivanti Patch for Windows Servers 9.3.x

Hello,

I implement rings for patching and has to disable automatic updates and create a scheduled automatic download task in the Options to update the definitions and download the patchs using the Predictive patch downloads feature. I would like to run the Scheduled automatic downloads task more than one (i.e. first and thirt monday of the month) but I could only create one schedule for the task, If I click on the add button to create a schedule it replace the schedule of the active task. For now I have to use the Microsoft scheduler and create multiple trigger of the tasks. I was wondering if there is Qan easier solution to do it.

Secondly I would like to exclude some Services Packs in the scan. I can see the Service Pack 1709 for Windows 10 missing but I don't want to install it now, is there any way to exclude it from the scan like a patch ?

Thanks in advance for any help

Best regards

Gabriel

Is PBIRS 2017 available to be monitored and updated via Shavlik?

I have configured User role Assignment in our environment because I don't want a single user account to be used by all users of the system (10 - 15 users). However I didn’t realise when I configured settings/ options in my profile that they are not set globally in the environment and inconsistencies are cropping up and causing at a per user level.

Is there any way to configure a default profile for all users? Meaning we have a consistent setup for each user that includes all the settings i have configured e.g Credential Manager, Internet Proxy settings e.t.c.

Purpose

To troubleshoot the cause of the deployment error "File download failed"

Symptoms

When deploying a patch, the deployment fails with the Patch progress state of "File download failed"

Cause

This error occurs when the console attempts to download the necessary patch, but is unable to do so.  Some of the most common reasons you might see this include:

• The console is offline, not connected to the internet.
• The console is blocked from accessing the patch vendor's site (proxy, firewall, etc.)
• The console is set to download patches from a distribution server, but the patch in question is not there (possibly not yet synced from a main console, etc.)

You can get more information about the failure in C:\ProgramData\LANDESK\Shavlik Protect\Logs\ST.Protect.managed.<username>@<domain>.log.  Look for an entry that states "Download Error" like this example:

2017-12-29T22:12:09.2522976Z 0006 W SingleFileDownload.cs:554|Download Error 'file://<DistributionServerPath>/windows8.1-kb4051956-x64.msu': System.Net.WebException: Could not find file '\\<DistributionServerPath>\windows8.1-kb4051956-x64.msu'. ---> System.Net.WebException: Could not find file '\\<DistributionServerPath>\windows8.1-kb4051956-x64.msu'. ---> System.IO.FileNotFoundException: Could not find file '\\<DistributionServerPath>\windows8.1-kb4051956-x64.msu'.

Resolution

If the patch is supposed to be downloaded from the vendor, copy the download address from the error and enter it into a browser to shed more light on what's blocking access, then resolve whatever that block is.

If using a distribution server, make sure the patch is synced from its source so the console can access it.

If you are unable to make the download available using either of the methods described above, you can manually place the patch in the console's patch download location following the steps outlined in this doc:

How To: Supply and Deploy Patches That Can No Longer Be Downloaded

If you need any assistance determining what the block is or how to resolve it, please open a support case.

Affected Product(s)

Shavlik Protect 9.x

Ivanti Patch for Windows Servers 9.3+

For some time Protect has not been rescanning machines if all deployed patches (to that machine) have return code zero.  Is this what's supposed to happen now?

I have been creating seperate machine groups, Physical groups and Virtual Machine groups.

for example:

01 Monday Physical Machine Group

01 Monday Virtual Machine Group

When running a patch scan only (no deployment template selected) I get failures each day from the Virtual Machine group (random machines)

Upon investigation, it seems that VCENTER vmotions VM's between hosts and thus impacts on the VM Machine Groups I have created.

Ar present there is no dynamic link between the machine groups and hosts within VCenter.  So the machine, when added to machine group from an ESXi host, is a static entry.

This means I have to recreate the machine group with the machines that have changed hosts, before I can patch each day.

I have submited a request to have this "dynamic" update included in a future version of Shavlik Protect.

Does anyone else have this issue, and how are you getting round it, or advice on how to minimise the admin needed to machine groups prior to patching each morning at 5:00am

Thanks in advance

Julian

Purpose

To provide information regarding KB4058702, an out-of-band release from Microsoft to address critical security vulnerabilities

Information

Microsoft released KB4058702 late the night of 1/3/18 (out of band) to address an Intel CPU firmware vulnerability.  The patches released will be added to our patch definition XML update to be released later today, 1/4/18.

List of patches from Microsoft:

https://www.catalog.update.microsoft.com/Search.aspx?q=2018-01

Affected Product(s)

Shavlik Protect 9.2.x

Ivanti Patch for Windows Server 9.3.x

When will the following be available in the product >

Microsoft Update Catalog

I have an Adobe Flash security update patch, specifically:

Adobe Flash 11
Bulletin ID: APSB17-42

KB: QAF2800126

I have a machine that is identified has missing it based on a default security patch scan. When attempting to deploy, the patch files are verified as having been downloaded (via patching window), are copied to machine (verified), and the installation directory is properly populated with the batch file to get things going. The batch file never renames itself to .HIS though, and instead the entire directory is cleaned up. The resulting error message in the console is "File Validation Failed". Examining the logs client side, STDeployerCore.log reports "WinTrustVerifier.cpp:270 Certificate verification failed with error: -2146762748.".

I've restarted all prerequisite services on this server, have done some root cert cleanup, and have attempted to redeploy and am receiving the same error message still.

Just looking for thoughts on what else might be causing this.

Thanks,

Overview

Microsoft has identified a severe compatibility issue with a small number of anti-virus software products.

Due to to possible BSOD issues that may occur when installing this update on system with out of date AV software, we will be adding a detection prerequisite:

Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat"

Value="cadca5fe-87d3-4b96-b7fb-a231484277cc"

Type="REG_DWORD”

• The patches will be offered for deployment if the key exists.
• If key does not exist you will be offered the detection only version of this patch.

Affected patches:

• MS18-01-IE Q4056568
• MS18-01-SO7 Q4056897
• MS18-01-SO8 Q4056899
• MS18-01-SO81 Q4056898
• MS18-01-W10 Q4056888, Q4056890, Q4056891, Q4056892, Q4056893

Affected CVEs:

• CVE-2017-5753
• CVE-2017-5715
• CVE-2017-5754

Link to Security bulletin advisory:  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002

Affected Products

Ivanti Patch for Windows Servers 9.3.x

Shavlik Protect 9.2.x

Purpose

As of January 3rd 2018, Microsoft is now requiring a registry key to be added to machines for addressing compatibility issues with a small number of anti-virus software products.

More information on this can be found here: Important information on detection logic for the Intel 'Meltdown' security vulnerability

Description

1.  Download and extract the attached zip below or here to get the batch file used for adding the registry key.

2.  Create a new Patch Scan Template that scans for only Custom Actions. (this will allow you run this against machine with no missing patches)

3.  Create a new Deployment Template.

4.  Name the template. Ex: Intel Meltdown Registry Key

4.  Click on Post-deploy Reboot. Change the reboot option to 'Never reboot after deployment'.

5. Click on Custom Actions. Click 'New'. A prompt to save the template will be presented. Click 'Save'.

6. The first action will push the batch file. Ensure that step 3 states 'Push File', and then select the batch file from the local machine. Click 'Save' when completed.

7. Click 'New' once more. Change Step 3 to 'After All Patches' and use the following command in Step 4: Call %pathtofixes%addregkey.bat

8. Click 'Save' twice to finish creating the Deployment Template.

9. Use the new Scan Template to scan your target machines.

10. Once the scan is completed, click 'View Results'

11. The results will offer our nullpatch.exe for deployment. Proceed by right-clicking the patch and clicking 'Deploy all missing patches'.

12. Select the new Deployment Template created earlier. Click 'Deploy' to start the deployment.

13. Open regedit to validate the registry key was added.

Additional Information

How To: Perform a Custom Action Complete Tutorial with Custom Actions

Affected Product(s)

Shavlik Protect 9.2

Ivanti Patch for Windows Servers 9.3