LGarvin

Comments

  • As a matter of practicality...... -no- .... turning off the AV/AM is not something patch administrators do in the normal course of events, but I have seen an occasional scenario where AV/AM software did interfere. When it does, then special arrangements must be made. It is a bit more prevalent though with new application…
  • <sdp:InstalledRule SchemaVersion="1.0"> <lar:Not> <bar:FileVersion Path="C:\CharlesRiver\91435\client\Patch103.txt"Csidl="0"Comparison="LessThan"Version="9.9.9.9"/> </lar:Not> </sdp:InstalledRule> Only use the File Version rule in the Applicability Ruleset, in place of the previous NOT File Exists rule. The Installed…
  • This was a back-end issue on the catalog server and has been resolved as of this morning.
  • The ORION database and sql instance had to manually be removed Yes, they do. The article says so in Steps 17 and 18. It fails to remove the Solarwinds performance counters. This is what I'd like to get more information about. If fails to remove other registry entries. This is new information in this discussion.…
  • Thank you for the details. The other thing to check is the SQL Server service. If the SQL Server service is running, and you're still encountering this issue, please enable logging, capture a logfile, and then open a support ticket via customerportal.solarwinds.com. To enable/disable logging, navigate to Patch Manager…
  • Windows update log shows the error code 800B0109. Fundamentally your failures are due to a misconfiguration on the client, or a missing or incorrect WSUS Publishing Certificate on the client. Please verify that the Allow signed updates from an intranet Microsoft update service location is ENABLED, and that the WSUS…
  • This is also something you'll need to manipulate externally in Excel. Patch Manager does not have a boolean field for 100%patched-or-not. There is a system report that lists Percentage of Approved/Installed updates by Computer, and you can use an Excel formula to convert that percentage value (100% or not-100%) to a…
  • This specific report was intended for getting a current report of the deployment (rate) of the current flash update. The simplest way to achieve this is to use the report Approved Summary with percentages which is available in the "Windows Server Update Services" report collection. Filter the report by Update Title to get…
  • I would be happy to troubleshoot it within this thread. Great! With respect to my observation of the >12,000 updates in your collection, I would suggest starting with these two tasks: WSUS Timeout Errors - Too many updates WSUS Timeout Errors - Removing unneeded update approvals While I know you're not yet experiencing any…
  • Third Party Updates published to a Software Update Point should show the icon as "Files are downloaded" on the Patch Manager console and the SUP (WSUS) console. If this is not the case, first run a "Refresh Update Server" from the SUP (WSUS) node of the Patch Manager console. Also, check the WSUS console to see if they are…
  • I think ideally the registry inventory would be best but i'll need to work out how to get that working. Do you know of any documentation for doing it? The Administrator's Guide briefly mentions (on p72) how to collect FileSystem and/or Registry information using the Managed Computer Inventory task. Once that data is…
  • Additional Information -- for those reading this after the fact. Sometime yesterday (Mon Apr 21), Oracle 'updated' the contents of the binaries contained on the Oracle Technology Network JavaDownloads page... and didn't tell anybody. It's not the first time they've done this; it likely won't be the last. As a result,…
  • This is a link to the site for download and the file is called vcredist_x64.exe I'm only too familiar with the nightmare that is the VC++ runtimes. We used them for Patch Manager, in fact. :-) No Applicability Rules and No Installed Rules. You must have at least one rule in each ruleset. If you have no Applicability Rules,…
  • because I thought I had used the german languaged package on first publish. Are you saying that you thought you used the German language FIrefox installer instead of the English language installer? If you downloaded using the "Download Content" or "Publish Packages" tool in Patch Manager, this is actually not possible, as…
  • Post the entries from WindowsUpdate.log showing the download and shutdown events, please.
  • I'm looking for the informations from the ID column within my WSUS/Computers Nodes. Ahhh, yes. I had forgotten that column was available in that view. Is it possible to create a patch manager report which includes the ID (e.g. 47ea9572-625b-4598-9696-6b1e43232644)? Yes, as I noted, the field is available in every…
  • The reports are in the list, but no data returns. When was the most recent Managed Computer Inventory task performed? Did that inventory include "Installed Software"? Is this a fresh install of 2.0, or an upgrade from 1.8 to 2.0?
  • That's classic behavior of an Automatic Approval Rule having been enabled on the WSUS server. Go to Options -> Automatic Approvals in the native console to access and manage them.
  • I have a situation where some but not all of my target groups that exist in the native WSUS console and show under "Computer and Groups" in the Patch Manager console do not show up when I select "Approve" for Third Party Updates. The list of WSUS Target Groups is captured and cached from the Server Node of the Patch…
  • Even if the PM groups were defined in the database, there's no provision for specifying a PM group as an attribute of a computer, or for reporting against PM groups in general. In fact, the only grouping mechanism that does exist for update status reports would be the WSUS Target Group memberships. One way you can approach…
  • From what I understand the patch manager can only manage servers/workstations that are part of the domain. Not true. Neither WSUS, nor Patch Manager, much cares whether a machine is a member of a domain or not. When initiating communication TO a managed system, the only requirements are that RPC and WMI are accessible, and…
  • I have 2008 express database which only has a 4 gig limit. Ouch. So my first suggestion would be to do an IN-PLACE upgrade from SQL Server 2008 Express Edition to SQL Server 2008 R2 Express Edition, which will raise that database limit from 4GB to 10GB. Is it possible to migrate the patch manager server or do I have to do…
  • By the way is there any plan to be able to rotate other pages that are not a sub tab? Tabs are the way this functionality is implemented; but you can create additional tabs and customize them with the resources you want to see. Take a look at Using and Configuring Subviews for more information.
  • By the way: The necessary client should be in both groups (in the example "Java" and "clients")? I thought the group "java" inherits all approvals from the upper group "clients"? That is correct. The subgroup does inherit update approvals, and you could simply move the client from the parent group to the "Java" group. How…
  • Those two rules are already IN a group. Creating an additional group without more rules is logically inconsistent (and pointless). PLUS... unless you're explicitly testing for the presence of the 32-bit version of the app AND the 64-bit version of the app, the above ruleset, as defined, will return FALSE 100% of the time.…
  • Two thoughts. First, only some of the functions are in SWISv2; all are available in SWISv3, so check the version of SWIS you're using. Second, what version of the SDK do you have installed; v1.9 is now available.
  • I'm not certain how the other vendors got around this, but they have. By violating the binary redistribution licensing agreements of Adobe, Oracle, et.al. I know of at least one such product vendor who got their hands slapped by Adobe a couple years ago for redistributing Flash binaries. Also know that Adobe does publish…
  • Also it is quite strange that PackageBoot scans all the files in the F-Secure folder even though they are not running. Unless the package has been customized, I'm not aware of any reason that PackageBoot would be scanning any folders other than those explicitly listed in the package rule. The exception could be that if…
  • Just an additional point.. REG.EXE is already on the target system, there's no need to include REG.EXE in the package, just path it appropriately in the Run Program statement.
  • Re--run the Patch Manager Update Configuration Wizard. That will re-capture the catalog titles. Then in the subscription screen, select the entries from the "SolarWinds" catalog node (they may already be selected based on your current "EminentWare" selections)