Free support for Windows 7 Extended Security Updates (ESU)
Hello everyone, Microsoft has announced the end of life for Windows 7 and Windows Server 2008/2008 R2. This means that you will no longer get bug fixes, security updates, or new functionalities for this version of the OS. We would suggest you to migrate to the latest version of Windows 10 as soon as possible to avoid potential cyber attacks. Incase you are unable to migrate on time or reluctant to upgrade, you can purchase and avail the Extended Security Updates (ESUs) that Microsoft offers for
New Error messages, no documentation.
I've come across a few new error messages I have yet to see before and i'm not finding anything in the documentation or Google searches. Before being asked to upload logs, can someone explain what they mean so I may see if it's something on this end that can be fixed by myself. Error: An attempt was made to create more links on a file than the file system supports. Error: Transaction support within the specified resource manager is not started or was shut down due to an error. Each of these errors
Patch now! 2 new use-after-free zero day vulnerabilities in Chrome.
Google Chrome decided to spook its users this Halloween by issuing an update that fixes 2 new use-after-free vulnerabilities "CVE-2019-13720" and "CVE-2019-13721", of which CVE-2019-13720 is already exploited in the wild. Use-after-free flaw, which in the least could result in a crash or could be leveraged by an attacker to run arbitrary codes or even enable remote code execution. CVE-2019-13720 - affects the Chrome's audio component. CVE-2019-13721- affects the PDFium library. Google also announced,
Custom report with Remarks
I've been through all the options I could find to create a report that contains remarks from a specific screen, however, I am unable to locate such. Is it possible to get a report based of certain criteria? If you go to Patch Mgmt > Dashboard > Deployments Failed Click on a computer that is missing patches or click the number of patches a particular computer is missing. On this screen there is a column for remarks. It's these remarks that are defining why a system is missing said patches. Where
Modifying autopatch deployment problem
Hi, I have version 10.0.436 when modifying auto patch deployment configuration and click save at the end it returns error:"Sorry something has gone wrong, unable to reach page". Could you check whats the problem?
Bios Update Database
I'm curious as to how often the BIOS versions are updated in the patch management database? I was testing this with a Dell Optiplex 7060 in our environment and according to DC, it was up to date with BIOS version 1.3.4 (released 4/4/19), however Dell's support site shows a newer version available for the 7060; version 1.4.2 released 7/5/19. This just makes me concerned as to how up to date the DC database really is...
Why the big difference in time stamps
I've finally gotten around to digging into some reports. I am seeing major discrepancies in time stamps. A computer can be listed as Last Checked in in June of this year yet will state the Agent Upgraded yesterday. What are the differences between Last Contact, Last Boot and Agent Upgraded? One would think that if the agent was upgraded, it had to have some sort of contact with the server to realize it needed to e upgraded, thus the other time stamps would update and reflect. Examples: Computer
"Aw, Snap!" messages in the latest Chrome M78 update
Hello All! The latest Google Chrome M78 update faces a high number of "Aw, Snap!" crashes. This is found to be a result of incompatible older versions of Symantec Endpoint Protection running on the computers on your network. Resolution: Update your Symantec Endpoint Protection to version 14.2 or above. Disable the RendererCodeIntegrityEnabled policy. Listed below are few other applications that might be causing the crash, contact the application vendor for a fix. 1. PC Matic 2. Print Audit 3. Palo
Redeployment of missed patches
Good Day, I'm trying to figure out what happens if/when a patch is missed during Automated Deployment. Say Patch 3 requires that Patch 1 is installed first but patch 1 requires a reboot. So patch 1 is installed, the computer reboots, will patch 3 then get installed and if need be reboot the computer again? After the reboot when the agent contacts the server again, does it scan itself for missing patches and subsequently install any patches that were missed immediately? Or does the Scan only happen
Microsoft 2019-10 Patch Deployment Problem
Hello to Everyone, I have a problem. When I try to send a patch, I get these two errors as you can see in the appendix. Unknown error code: 50 Unknown error code: 50021 Here, the issue of Symantec installed on the client needs to be updated. I've updated it on all clients. I still have a problem. Patches I'd like to send: 2019-10 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4519976) 2019-10 Security Only Quality Update for Windows 7 for x64-based Systems (KB4520003) Thank
Patching LibreOffice results in removing the old version but NOT installing the new one, "not applicable" - but it is?
One of my users today complained about the disappearance of LibreOffice Calc. I had launched a series of updates on her machine that included getting LibreOffice to 6.2.8 Several operations followed including the removal of the existing version I have checked the configuration outcome and it did not apply 6.2.8 as "not applicable". Except it is applicable, as I manually installed it later. The user had several applications open, and the installation complained about needing to close Adobe Creative
PatchManagement
Hi, my problem is, that the PatchManagement report me, that it could not download Opera and i will activate my firefall or set a rule on the Virusscanner. The Firewall is deactivated in the domain network and a rule for the ESET NOD Virusscanner is set on all servers. When anybody have a resolution...;-)...please....upload from my desktop: It cames the same message...
A major security flaw in Linux Sudo has been discovered!
A potentially catastrophic vulnerability in sudo has recently been found that affects all Linux endpoints. This vulnerability (CVE-2019-14287), when exploited, enables users with hostile intentions to surpass security restrictions and run commands as the root user. Sudo is a core command in Linux that enables users to execute commands as other users including those that have elevated privileges such as another superuser or root user. Desktop Central now supports detecting and fixing the vulnerability.
Adobe releases out-of-band security updates in its products
Adobe is considered one of the widely used third-party applications in the market with over 15 million active subscriptions. As announced earlier, Adobe has released out-of-band security updates today to patch a total of 82 security vulnerabilities across products listed below. Adobe Acrobat and Reader Adobe Experience Manager Adobe Experience Manager Forms Adobe Download Manager Of these 82 vulnerabilities, 45 are rated critical and if exploited, attackers can execute arbitrary code in the context
Windows 10 upgrade to 1903 failed, Windows cannot verify the digital signature...
Hello, I am trying add and upgrade Win 1903, but it always failes with the error below. Error: "Remarks from the CreateProcess is Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source." I have tryed re-downloading the Windows 10 iso from diffrent sources but get the same result. Updating PC that has "Windows 10 Professional Edition
Last Boot Time and Patch time
Is it possible to add the Last Boot Time and Last Patch time as columns under Patch Management > Deployment > Automatic Patch Management > System Details of a configured automatic patch management configuration?
Zero-day vulnerability in Apple iTunes and iCloud for Windows patched
Hi guys, A zero-day vulnerability in iTunes and iCloud for Windows, which has been exploited in Ransomware attacks has been patched in Patch Tuesday October 2019 updates. The vulnerability exists in the Bonjour installer that gets installed in Windows machines along with the iTunes and iCloud for Windows app. This vulnerability in Bonjour installer is an 'unquoted service path' vulnerability, and can be exploited by planting a malicious executable file to the parent path. Further this exploit's
Add the ability to make changes to Test Groups instead of having to delete and remake the group
As the title says, I'd like the ability to make changes to a test group for patches instead of remaking the group whenever we need to add/remove a PC.
Microsoft Patch Tuesday updates - October 2019
Howdy folks A quick run-down on the patch tuesday updates for October 2019 New Security Bulletins : 2019-10 Security Only Quality Update for Windows Server 2008 (KB4520009) 2019-10 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4520003) 2019-10 Security Only Quality Update for Windows Server 2012 (KB4519985) 2019-10 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 (KB4519990) 2019-10 Cumulative Update for Windows 10 Version 1903 and Windows Server
Microsoft releases out-of-band security update to fix IE zero-day & Defender bug
1. IE zero day The IE zero day is a very critical vulnerability which can be exploited via Remote Code Execution (RCE). Remote code execution is an attack that can be performed by executing malicious codes from remote location. The IE zero day is tracked with CVE-2019-1367identifier. 2. Microsoft Defender DoS bug Microsoft also released security patches to fix a DoS bug associated with Microsoft Defender. The good news is, to exploit the bug, the attacker first needs to gain access to the victim's
Patch Sync Failed
My patch database failed to sync this morning (Saturday). Anyone else getting these messages? The link in the messages is "dead". I am on 10.0.433. Problem Synchronizing Patch Database Details of the latest patches could not be updated due to version incompatibility. Upgrade to the latest hotfix to get this fixed. Patch Sync Failed! Your Patch Database is not up-to date. To synchronize your Patch Database, contact support with server logs
C&C security threat found on Trend DDI from Desktop Central
Hello, I have a question for the community regarding Desktop Central and Trend Micro's DDI box. Since the 5/9/19 we keep seeing C&C activity on our Trends DDI box linking back to Desktop Central running the C&C activity, its not occurring on all computers in the environment and is only happening 2-6 times a day on different devices every time. We were effected by the high CPU usage issues in the last patch but have installed the hotfix and soon to install the latest patch, would any of this cause
Is there a way to manually remove superseded patches from showing in Desktop Central
I've been told that the computers for these patches that have been superseded need to be removed from desktop central. That cannot be the case. Some of the machines are remote users who don't always connect to the companies VPN, thus they aren't reporting all the time. I did however check my missing patches. I have 26 that are marked as superseded. Patch ID Bulletin ID Patch Description 27233 MS19-AUG6 2019-08 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4512506) 27234
Patch Tuesday September 2019 updates from ManageEngine
Good day. Quick update on the September 2019 Patch Tuesday. New Security Bulletins : 2019-09 Security Update for Adobe Flash Player for Windows (KB4516115) 2019-09 Security Only Quality Update for Windows Server 2008 (KB4516051) 2019-09 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4516033) 2019-09 Security Only Quality Update for Windows Server 2012 (KB4516062) 2019-09 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 (KB4516064) 2019-09 Cumulative
KB4512578 Fails to download and fails checksum
27380 MS19-SEP3 2019-09 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4512578) Looks like this patch may have been re-released, Manage Engine server fails to download, when attempting to download manually and then upload to patch database, I get a checksum error. Please look into. Thank you.
Installed Patches - discrepancy
I have a Windows Server 2016 Datacenter VM that has the Desktop Central Agent installed and the scanning status is showing OK, but for some reason the count (results) showing on Installed Patches differs (show less) from the ones I see on the Installed Updates (Control Panel) inside the machine. How or where does the agent looks for the updates installed and why I'm seeing less updates installed than the currently installed. *Already tried uninstalling and reinstalling the agent *Also tried the PowerShell
Deploying a transformation with a patch
I'm trying to deploy windows 1903 to my encrypted laptops, but I need to include a transformation with it. Is that possible?
What does Error code 10008 mean ?
The patch database in DesktopCentral has suddenly stopped updating this week and we don't know why. We suspect it may be something to do with our proxy server. I noticed in the serverout log it has error messages referencing error code : 10008. If we could identify what this error code means then it might give us a clue as to where the fault lies.
Unknown Error. Code : -2145124329
Unknown Error. Code : -2145124329 I got this error code while deplying a Micrisoft Patch (Patch ID : 26143). Desktop central version 10.0.422 There is no information about this error code. Can anyone please assist? Thank you Mohammad Ezzi
Patch Scan timeouts only on systems with 'WinBuildVer:18362 - Windows Server version 1903'
Hi Team, I'm just setting up a new installation of DescktopCentral 10.0.430, everything works fine excluding for Patch Scans on any Windows system running 'Windows Server version 1903 Datacenter Semi-Annual Channel (core installation) Edition (x64)' or 'Windows Server version 1903 Standard Semi-Annual Channel (core installation) Edition (x64)' both being Windows Build#18362 . All systems are on the local LAN subnet. I have followed all your tips for the timeout issue, UNC, LocalAccountTokenFilterPolicy, UAC,
NodeJS Updates not deployed
Hi, our environment contains 4 machines running NodeJS 10.x but DesktopCentral seems to not recognize NodeJS is installed on these systems because updates to NodeJS don't apear in missing patches view.
The latest update for Windows Defender (1.299.2640.0) - Download Success but checksum failed
Got an issue this morning with the latest update for Windows Defender (1.299.2640.0) Patch ID 400009 "Download Success but checksum failed" on workstations. Checking the patch, it says it failed to download, "Download blocked by firewall/antivirus. Enable firewall configuration or exclude antivirus to allow download", however there is a 400009-mpam-fe file in the store of 110 MB size. I've tried deleting and re-downloading but this hasn't helped. I've checked the firewall and antivirus, this is not
Shedule a reboot of Windows 10 client with a countdown popup of 24 Hours
Hi , I'm using Desktop Central to push Windows Updates to Windows 10 clients. I need to display a reboot popup to logged-in users with a countdown of 24 Hours. Users should not be able to discard reboot but can minimize the popup window. How to achieve this?
Description of Windows 10 cumulative updates
Hi, I think it would be extremely useful if the description of Windows 10 cumulative updates could include the build number, e.g. currently a patch is called "2019-08 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4512495)" but in order to tell if this is a valid patch for a system, you need to check the build number online (https://support.microsoft.com/en-gb/help/4512495/windows-10-update-kb4512495) and then compare the build number listed there (OS Build 14393.3181) against
Customise Office Patches
I notice while troubleshooting downloads of Office updates, that DesktopCentral will download and package Office updates using the following xml file example: <?xml version="1.0" encoding="UTF-8" standalone="no"?><Configuration> <Add Channel="Monthly" OfficeClientEdition="64" SourcePath="D:\ManageEngine\DesktopCentral_Server\store\27250_Office365"> <Product ID="O365BusinessRetail"> <Language ID="en-us"/> <Language ID="it-it"/> <Language ID="da-dk"/> <Language ID="es-es"/> <Language ID="de-de"/> <Language
Software Deployment versus Patch Management
Does anyone know if Software Deployment configuration and Patch Management deployment would conflict with one another? What I mean is, if I set up a Default Workstations software configuration under Software Deployment based on the Dynamic Group of Windows Workstations Windows 7 through Windows 10. I have 12 default applications within the software configuration that would go on all computers. I have the pre-check installation requirement check for the existing software, example Google Chrome version 76.0.3809.87.
Patch Tuesday August 2019 updates from ManageEngine
Good day. Quick update on the August 2019 Patch Tuesday. New Security Bulletins : 2019-08 Security Only Quality Update for Windows Server 2008 (KB4512491) 2019-08 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4512486) 2019-08 Security Only Quality Update for Windows Server 2012 (KB4512482) 2019-08 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 (KB4512489) 2019-08 Cumulative Update for Windows 10 Version 1809 and Windows Server 2019 (KB4511553) 2019-08
To get current status please click Refresh Status button.
Where is the Refresh Status button? Been looking for it for a long time and really can't believe that it is that hard to find. To get current status please click Refresh Status button.
Windows 10 LTSB version upgrade 1607 > 1809
Hi, I have a lot of systems running Windows 10 Enterprise x64 LTSB 2016 (1607). I would like to upgrade these to Windows 10 Enterprise x64 LTSC 2019 (1809). I can do this manually by opening the LTSC 2019 iso, running setup.exe, selecting 'keep files and apps' - this will upgrade windows without touching programs or user data. I was hoping I could automate this process using desktop central - I found the instructions at https://www.manageengine.com/products/desktop-central/windows10-feature-packs.html and
upgrade Windows 10 to 1903 error 1047526908
Hi ALL We are trying to upgrade Windows 10 to 1903. English version Windows updated without problems. When i trying to update the Russian version of Windows 10, we encounter an error 1047526908. How can we download file "upgradeWindows_x64.exe" for different languages of Windows 10.
Next Page