Are HTTP ports needed?
Hello, Due to the sensitive nature of my org's business, we like to avoid using unsecured communication protocols--like HTTP--whenever possible. When I first rolled out Desktop Central I did not allow the HTTP ports 8444 and 8032 through the firewall. However, my team has reported that remote management (Remote Desktop, System Manager, etc.) does not always connect immediately. Could this be because I am blocking HTTP ports? What is transferred over HTTP? I do not like the idea of transferring potentially
Some old patches as "Not approved" and no option to "Approve" them
Hi, I have noticed that after scanning our network looking for vulnerabilities, there are some KB patches that need to be applied. Looking for those patches in Desktop Central, I can see they are "Not approved" although we have "automatically approve all patches" option enabled. Also I can not select those patches to mark them as "approved". They are listed in the "Supported Patches" section, not in the "Applicable Patches" section. How can we "approve" those patches and install/download again?
Agent Deployment Fails : The system cannot find the file specified.
Hello Everyone. Have been using patch manager plus for a few months now, but today i find that whilst trying to push the agent out to a few computers in SOM i now get the following error. The system cannot find the file specified. I then tried to uninstall the agent on one of the computers that already had the agent and im having the same issue. I tried looking at the account used to push out software through my AD but it looks fine. How do i trouble shoot this?
Copy file to Desktop client - File Folder Operation
Good morning i need to copy a file from a source to a destination. the destination is the desktop of the logged in user. If the script targets the user's name it works. (Source File \\ 192.168.10.9 \ data_exchange \ ced \ restore \ AS800.lnk Destination Folder C: \ Users \ User05 \ Desktop Copied Successfully! File is copied). If the destination is written with a variable the script says Ok but the file is not copied. (Source File \\ 192.168.10.9 \ data_exchange \ ced \ restore \ AS800.lnk Destination
Modify Configuration Re-Deploys already installed software?
When we setup a configuration, say called "Base Software" and we add a whole site to it along with a list of packages it works great to get them all installed. But, if we make a change to that configuration i.e. adding or removing a package desktop central is re-installing every package completely which is very undesirable. Is this by design? Can we not use the configuration as we visioned, "Base Software" that automatically gets applied when a new PC enters the site (the scope of the configuration).
Patch Tuesday September 2020 - Supported updates
Hello there, Below is the breakdown of all the updates released in September 2020 Patch Tuesday. New Security Bulletins : 2020-09 Security Monthly Quality Rollup for Windows Server 2008 Systems (KB4577064) (ESU) - Not Supported 2020-09 Security Only Quality Update for Windows Server 2008 Systems (KB4577070) (ESU) 2020-09 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 Systems (KB4577053) (ESU) 2020-09 Security Only Quality Update for Windows Server 2012 Systems (KB4577048) 2020-09
Desktop Central - Deploy Microsoft Teams
Dear Support, I tried to deploy MS Teams via Desktop Central Software Deployment. I created the package from template and deployed to one computer. The status is executed/Succeeded, but the application not showing in Start Menu. Regards, Feremc
Is there a way to create a "base"/first Configuration Setup?
Hi there, I am currently looking for a way to set up DesktopCentral so that a few Configurations are run automatically when the DC Agent is first installed on a "new" computer, well new to DC anyway. Have any of you had any success doing this? There are a few items that I would like to have automatically installed as soon as the agent starts talking to our DC Server. Thank you so much for your time!!
Intel driver updates and logitech driver updates not implemented
Hello, so the Intel posts links for the newer drivers needed for their systems. However, we do not see these updates for drivers and chipsets in desktopcentral. Could we get those added in our patch management? Also, logitech drivers for cameras and software is not in your store. Is there a reason why this is not applicable in your software deployments?
Enhance availability of the Patch Management Download Manager...
Posting this here to see if the community think it's a good idea. This is currently only invoked by DC during certain patch download operations. It would be significantly more useful if we were able to invoke it, on demand, regardless of what we or DC are doing. I have also posted this as a "feature request" in your appropriate feedback/ideas form.
Chrome stable channel update fixes 20 security vulnerabilities
Hello everyone, Chrome 85 has been promoted to the stable channel 85.0.4183.83 for Windows, macOS, and Linux. This update comes with fixes for 20 security vulnerabilities, the details of which are given below: CVE ID Vulnerability details Severity CVE-2020-6558 Insufficient policy enforcement in iOS High CVE-2020-6559 Use after free in presentation API High CVE-2020-6560 Insufficient policy enforcement in autofill Medium CVE-2020-6561 Inappropriate implementation in
Security updates released for Firefox 80, ESR 68.12, and ESR 78.2
Hello everyone, Mozilla has released security updates for Firefox 80, Firefox ESR 68.12, and Firefox ESR 78.2. Most of the vulnerabilities fixed are of high severity. The details of the vulnerabilities fixed are as follows: CVE ID Vulnerability details Severity CVE-2020-15663 Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege High CVE-2020-15664 Attacker-induced prompt for extension installation High CVE-2020-12401 Timing-attack
Out-of-band updates released for Windows 8.1 and Windows Server 2012 R2
Hello everyone, Microsoft on August 19, released an emergency out-of-band update for two privilege escalation vulnerabilities disclosed in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems. The vulnerabilities are tracked as CVE-2020-1530 and CVE-2020-1537. Both of these vulnerabilities exist in Windows Remote Access Service (RAS) and when exploited, grant elevated privileges to remote attackers. A patch for both vulnerabilities for Windows 10, Windows 7, and Windows Server 2008,
Mac Remote Control
Is anyone having a good experience with Desktop Central Mac agents? I have installed it on a test computer in my environment and am having nothing but frustration. Remote control is extremely flaky, the computer shows offline even though I can ping it from the server and vice versa, and then suddenly it will be back online, but only for a few minutes. This is a LAN machine and I'm not having similar issues with PCs.
Windows 10 versions out of order?
I've noticed that the pie chart of Windows 10 versions (on the Patch Management homepage) is out of order and I think I finally figured out why. It appears to be displaying the versions from right to left instead of left to right. I would expect the versions to go couter-clockwise around the chart in this order: 1607, 1703, 1709, 1803, 1809, 1903, 1909. Instead it goes 1703, 1803, 1903, 1607, 1709, 1809, 1909. If you reverse the digits you get 3071, 3081, 3091, 7061, 9071, 9081, 9091, which is in
Dynamic groups based on AD container
We group our servers and workstations in Active Directory according to function, eg Servers Mail Servers Citrix Servers Workstaions IT Workstations Finance Workstations Laptops etc. It would be very useful to make dynamic groups from these OUs, when adding a server or workstation then the dynamic group would automatically pick it up for the correct deployments.
Custom Group Add List
I have no idea why this feature went away. But please dear little baby Jesus...bring it back. Being able to paste in a list of computers to create a custom group was great. It was fast. Easy. It's how I did most of my groups that span more than one OU in AD.
August Patch Tuesday - Non-security and Third party updates
Hello everyone, Below is the list of the supported Non-security and Third party updates from August Patch Tuesday NON-SECURITY UPDATES : Update for Microsoft Office 2016 (KB4484418) Update for Microsoft Project 2016 (KB4484477) Update for Skype for Business 2016 (KB4484464) Update for Microsoft Office 2010 (KB4484454) Update for Microsoft PowerPoint 2010 (KB4092435) NON-SECURITY SQL SERVER UPDATES : Cumulative Update Package 6 for SQL Server 2019 - KB4563110 Cumulative Update Package 14 for SQL
August Patch Tuesday security updates
Hello everyone, Below is the list of the security updates supported from August Patch Tuesday New Windows Security Updates : 2020-08 Security Only Quality Update for Windows 8.1 (KB4571723) (CVE-2020-1464) 2020-08 Security Only Quality Update for Windows Server 2012 R2 (KB4571723) (CVE-2020-1464) 2020-08 Security Only Quality Update for Windows Server 2012 (KB4571702) (CVE-2020-1464) 2020-08 Security Monthly Quality Rollup for Windows 8.1 (KB4571703) (CVE-2020-1464) (CVE-2020-1380) 2020-08 Security
Security fixes released for Adobe Acrobat and Reader
Hello everyone, Adobe has released security updates for Acrobat and Reader for Windows and macOS. Most of the updates are rated 'critical' and 'important'. Successful exploitation of these vulnerabilities could lead to arbitrary code execution in the context of the current user. The affected versions are as follows: Acrobat DC Continuous - 2020.009.20074 and earlier versions Acrobat Reader DC Continuous - 2020.009.20074 and earlier versions Acrobat 2017 Classic 2017 - 2017.011.30171 and earlier versions
Chrome stable channel update 84.0.4147.125 fixes several security vulnerabilities
Hello everyone, Google has updated its stable channel for Chrome to 84.0.4147.125 for Windows, macOS, and Linux. This update comes with 15 security fixes. The vulnerabilities addressed are as follows: CVE ID Vulnerability Severity CVE-2020-6542 Use after free in ANGLE High CVE-2020-6543 Use after free in task scheduling High CVE-2020-6544 Use after free in media High CVE-2020-6545 Use after free in audio High CVE-2020-6546 Inappropriate implementation in installer
Agent Install Access is Denied
Greetings, I have a new copy of Desktop Central version 10.0.575 on a Windows 10 Pro computer joined to an Active Directory domain. In Scope of Management, I added the domain. I was able to add the domain computers to SOM, but when I try to install the agent, I get Access is denied. I tried modifying the domain details and reentering the password, but it did not help. I tried selecting the computers and then clicking the Edit Credentials button before installing the agent, but that did not help
Desktop central patch mangement
Hello, Urgent support required! I am using desktop central for many years for endpoint management and patch management but there is a big issue with desktop central patch management. End-user cannot choose and install patch after deployment, they are forced to install all the patches pushed, this is good for endpoints but not for server patching. we are still using WSUS for server patching, can you please add some feature, like available patch on Self-Service Portal so user can choose and installed.
DC alert: ports are blocked by windows firewall after 10.0.555 update
Hi, Desktop Central console (scope of management, computers) brings up an alert: "Ports that are used for the agent-server communication are being blocked by windows firewall" with an "unsafe" link "Unblock now" (javascipt). This happended after upgrading to version 10.0.555. I have a bunch of open ports incoming. And there is no problem with the agents (updating, patching, inventory or remote access) communicating. Any idea where this message comes from? See screenshot atteched. Thanks, Juergen
MSI software removal
I am trying to install a new version of software that we received from a vendor. The first thing I need to do it remove the old version of the software. I'm in the software package setup, and I need some help trying to figure out the uninstallation string I should use here. If I look at the computer details screen, I can look at the software inventory tab and uninstall it from there without a problem. Is there a way I can tell what command it sent from there?
Remove Old Computer without AD Sync
Is there a way to remove or receive notifications from inactive computers without having Desktop Central synchronized with Active Directory?
Patch stored location is not available to download the patch from the server error
Hi, I have a new install of Desktop Central, in a workgroup environment. I get the following error on all workstations I have configured: Patch stored location is not available to download the patch from the server. The workstations can browse and reach the patch store folder manually through the network. How can I troubleshoot this? thank you!
Can't install Secure Gateway
Good day, Can't install Secure Gateway Firewall turned off on desktop central and Secure Gateway servers Nat opened the server for Secure Gateway An error appears when installing at 80%
Desktop Central Requirements
Hi, Desktop Central has been used in our company for many years. We currently have 7,000 connected devices (PC). We are at the stage of purchasing a database server. And here a few questions arise on our part. 1. What are the performance differences between PGSQL and MSSQL for the operation of Desktop Central? (Large, medium, small, meaningless) 2. Can I use MSSQL in the Express version? 3. Whether Desktop Central is compatible with the MSSQL Server 2019 database version. This information is
The target account name is incorrect.
Some computers in SoM getting error after trying agent installation (The target account name is incorrect. ). I read KB and there is only one description. Cause When a computer is imaged and copied in a different computer, you will find two computers with the same account name. But i don't have in my domain computers with same names.. And i won't rename it while PC is on remote work. From server where Desktop Central installed i can reach this PCs - name resolution is OK and pc is accesible. Is there
Duplicate computers MacOS
Good day, All Mac computers are connected to the domain. When the agent is automatically installed, they are registered with the local domain name xxx.local The business domain name remains on the list of computers. How can you leave only the enterprise domain name so that there are no duplicate computers?
Deploy Agent (Mac) thru Munki
HI guys, We're currently evaluating DC and many of our Mac clients are managed by Munki. Is there any one here was able to deploy DC agent through Munki? Thanks.
Unable to list the computers
Team, I'm not sure if this is for me only, but I find one problem in the new Create Group page. If I select 6 or more Domains/Workgroups in the Domain field; while creating a static group; I can see no computers listed in List tab of Available Computers. As I add the Domains/Workgroups, the list is populating until I click the 6th one. I tried in all possible combinations from the list of Domains/Workgroups and its the same -- as I add the 6th Domain/Workgroup, the List tab shows no computers. I
DC Patch Management patch not detected...
Patch: 2020-01 Update for Windows 10 Version 1909 for x64-based Systems (KB4497165) Microsoft Windows Update identifies this system as requiring this update. However, DC does not, despite the inventory report, in DC confirming it has a qualifying CPU.
Patch's KB4565589 & KB4565636 not installing on Windows 7 w/ ESU's
The above two patches have failed to install on all of our Windows 7 machines that have had an ESU license applied to them. The ending result from the .NET error log is: Final Result: Installation failed with error code: (0x80070643), "Fatal error during installation. According to Microsoft, the error code is a generic code. Anyone else having issues with these two patches?
Remove computer from Desktop Central WITHOUT removing agent
Hi, I was wondering if there is a way to remove computer records from Desktop Central without it automatically uninstalling the agent when it next communicates? Basically, I want to remove all machines that haven't contacted the server in 60 days but for them to auto-repopulate if they do check in again. Withouth having the agent removed and then re-installed Is this possible?
Safe way to reboot Desktop Central Server
Hi, Could anyone give me the correct process for rebooting the Desktop Central server? I performed a standard server reboot last year which caused big issues with the DB. Support managed to resolve and said it was due to an unclean shutdown / reboot. However they failed to provide me with any info on how to avoid it happening again. Do a need to stop services in a particular order first? Is there a batch file within the Desktop Central program files? I need to reboot my server but don't want to risk
Postgres 100% CPU
I have what seems to be a somewhat common issue where Postgres takes 100% of the CPU. Restarting the whole machine seems to return it to normal for a while, but at some point it goes back to 100% and stays there. Windows 2016 VM (Vmware host) 8G RAM 2 CPU Charlie Harris
Major framework changes to Desktop Central...
Hi, I have been getting responses to application, patch and feature requests, from the DC team, stating that they can't address these requests as they "are working on a major framework change, Once it completed we will start working on the feature request for Mac"? Is anyone, here on Pitstop, aware of what these major framework changes might be? I haven't heard anything and can't see anything in the roadmap. Cheers, David.
Security updates released for Firefox 79 and Firefox ESR 68.11
Hello everyone, Mozilla has fixed several security vulnerabilities in Firefox 79 and Firefox ESR 68.11. The details of the vulnerabilities are as follows: CVE ID Vulnerability Severity CVE-2020-15652 Potential leak of redirect targets when loading scripts in a worker High CVE-2020-6514 WebRTC data channel leaks internal address to peer High CVE-2020-15655 Extension APIs could be used to bypass Same-Origin Policy High CVE-2020-15653 Bypassing iframe sandbox when allowing
Next Page