Automate patch deployment reboot policy
Hi, We are facing problem in “ManageEngine Desktop Central MSP 8” that during Automate Patch Deployment, Restart Pop-Up is coming very frequently on user’s system (even after restarting whenever asked to restart). Current reboot policy is “Allow user to skip Reboot”. We need to find an option to deploy all missing patches in one shot and need only one reboot after the FINAL patch deployment. Please suggest that is there any option to fulfill our requirement. Thanks in advance Regards Tejvir
Is there a way to change the severity of a patch?
Security update bulletin ID's always start the same way, but I've notice a lot of them still appear as unrated. Is there any way to adjust this?
Chrome and Flash
Good morning, I notice that whenever I do a Patch Scan, every machine that has Chrome installed shows up in DC as needing the latest version of Flash. This occurs when Chrome (and up to date) is installed and: 1) no other Flash player is installed. 2) ActiveX flash is installed (up to date or not). 3) ActiveX and Plugin Flash are installed (up to date or not). For example: On my scans today, I noticed that a newly introduced Server was needing a Flash update (utility program needs it). Fine, I install
Patch Scan Suggestion For Improvement
I noticed a problem with one of our servers today. The server has been failing patch scans for almost 2 months but it was hard to tell there was a problem though due to the way Desktop Central views are shown. As the last succesful scan of the server occured when the server was up to date with missing patches - the server appeared in the "Healthy Server" group and has remained there ever since despite missing weeks of updates. The problem is that the "All Managed Systems" view shows the "Last
VLC Media Player support in patch management
I would like VLC media player to be added to the list of applications supported by patch management in Desktop Central.
Multiple Daily Patch Scans - are they usefull
I have approximately 1300 PCs in remote locations (non-AD joined) that are turned on at different times of the day and some not very often. (one or twice a month) I need to configure a Scan, Download and Deploy Configuration(s) that will scan each and every PCs soon after it is turned on and download and deploy patches. We do not set a reboot for these PCs and allow the user to keep the PC on until they are ready to shutdown. I have considered setting one to start at 6:30 AM Another at 9:00 AM
IE 8 missing in XP
HI, I m facing an issue that in some of my system with XP having IE 6 but in the patch scanning its does not show any patch is missing. As i know it should get the upgraded with the patches. Please suggest. Regard's Pradeep Bedse
Not restarting after deployment
I have an automated deployment scheduled and configured to not reboot if a user is logged on. The attached screen shot shows the status of the deployment. The problem is that this user is not actually logged on. This was the last person who used the computer, but they already logged off yesterday! To complete the deployment I had to login to the computer and click the Desktop Central popup message to initiate the reboot. Why did DC not correctly detect that no user was actually logged in at this
Custom Group Change - Patches were installed
Hello, I was hoping you could help me out with an issue just occurred today with Desktop Central. I moved 4 machines that were not in any groups into an existing Custom Group with no issues. About an hour later I received a call from the business owners of those servers stating that Windows Patches were pushed out and installed on them. From the Admin > Action Log Viewer I am unable to find any information as to when and what patches were pushed out to these 4 servers and what time. Can you provide
Scan, Download, Deploy.... well what about copy to Workstation but don't deploy?
My current patch setup is that I still manually kick off the Deployment stage on the weekends I choose. I have the Scan and Downloads running on an automated schedule. As I understand what this means is that the server scans workstations, determines the patches necessary, and then downloads them to itself, then during the deploy mode, patches are actually copied to the workstation and then deployed. In the interest of time(say when a workstation has been turned off for nights in a row for a month
Latest Java Updates are supported in Desktop Central
The latest java updates, released last Friday, can now be installed on multiple computers using Desktop Central. The details of the patches are given below: JRE 7 Update 13 32bit JRE 7 Update 13 64bit JRE 6 update 39 32bit JRE 6 Update 39 64bit In addition to the above patches, you will also be able to use Software Deployment module to install the following: Java SE Development Kit 6 Update 39 (64-bit) Java SE Development Kit 6 Update 39 Java SE Development Kit 7 Update 13 Java SE Development Kit
Scheduling automated deployments
We have a group of machines protected by Deep Freeze, which discards any changes to the hard drives upon a restart. These machines are "thawed" at night by I.T. for 6 hours each week for Desktop Central updates. We must complete any Desktop Central deployments within this 6 hour window. Assume there are multiple, layered updates awaiting which will require 3 scans, 3 deployments and 3 restarts, how do we schedule these 3 automated deployments such that we are guaranteed they all 3 complete within
Java patch issue - certificate revocation message
hi, I am pushing a java update to a computer and it pops up an installer message. when you click view it switches out and shows: Revocation information for the security certificate for this site is not available. Do you want to proceed? [Yes] [No] [View certificate] Unless you click yes it fails. Any ideas? Regards, Kahthan
Remarks
Why do the remarks say "Patch already installed" if the current status is Retry (see attached screenshot)? If the current status is "retry" then the remarks should state the reason for the retry. But if the reason for the retry is "patch already installed" then a retry is meaningless.
ERROR when deploying configurations during startup!
I found following interesting line in the computer.log file on such a client machine: ***** [ERROR] ProcessPatch : Scheduled time not reached. The configuration will be applied on next upcoming cycles !!! ***** "Scheduled time not reached"??? What does this mean? I did NOT change the "Install Between" setting of these configurations. Does anyone else have such problems? regards, peter
Winzip Update
We recently bought winzip 16.5 which has been rolled out to some desktop machines and licenced. After a recent patch update i've noticed the machines have been "upgraded" to Winzip version 17 but now the software is unlicensed and the old licence key will not work as it is for version 16.5 not 17. Could i suggest that this is removed from the list of patches?
Update for Adobe Reader 10.1.5?
Hi all Any ideas when the Adobe Reader 10.1.5 update will be available? Thanks Stefan
Missing vs. Failed
I'm doing an automate patch push and I'm getting A LOT of machines that say for example "4 patches missing" yet after deployment it says "4 patches failed" I'm not sure what is going on. When i go to the windows directly on said machine, the KB*.log file isn't even present. I'm supposed to patch over 1000 machines tonight and I don't feel confident in DesktopCentral at this point..
Incorrect number of scans
Please see attached screen shot. There are only 7 machines in this custom group, so how can 26 machines have been scanned successfully? Also, there is a misspelling in this drop-down menu (see attached screen shot 2)
Saved Configurations
The Automate Patch Deployment feature works nicely, but is there also a way to create a configuration within Desktop Central that can be saved and re-used on-demand? In other words, can I create and save a configuration for a custom group of computers that includes a new scan, download and deploy, then I could just manually re-run that configuration whenever I wanted? The attached screenshot shows that a new scan and download can be included in a configuration, but all I see is "No Patches Added."
Build 80123 triggers Patch deployment, without one being scheduled
I just updated Desktop Central to Build 80123 within our organization. Upon doing so, multiple computers began being patched by Desktop Central, despite no configuration or automated process being scheduled. How / why did this happen? This has never been the case with past updates, and I am worried it's going to force our entire organization to reboot in the middle of the work day.
After Patching reboot reschedule time by user
Hi, We have Desktop Central MSP 8 (Build 80014) server. We are using DS server for Patch deployment process. We have choose the restart policy "Allow user to skip reboot". Restart later option after the patching, user reported that if they opt to skip, DC pops up again every 5 to 10 minutes and they can not specify the reboot reschedule time. How user can reschedule the reboot after 1 hour, 4 hour etc..? Regards Tejvir
Desktop Central Patches Not Downlaoding (2 kb per)
This weekend I have run into a problem where patches i previously had downloaded and installed on other machines have changed to 2kbs in size each. I have tried deleting and redownloading the patches and get the same results. I have tried to manually download the patches and renaming them to fit the scheme and have had no luck. This has only been an issue in the last 2 days and seems to be with adobe air, flash, java 6v38 and the latest itunes, all of which were installed previously this week.
Deployment Failed
What does this mean "only applicable for future deployments"?
KB2760410 will not install on win 7 32 bit
Window Title] Recognition of interactive services [Main Instruction] A program running on this computer is trying to display a message [Content] The program may need information or permission to complete a task. Why is this happening? [V] View program details [Show message] [Ask me later] [Expanded Information] There are programs or devices that need control. Message Title: Microsoft Word 2010 (KB2760410) 32-bi Program Track: ral_Agent \ patches \ 12823-word2010-kb2760410-fullfile-x86-glb.exe Received:
Deploying patches and update to multiple machine
Hi there, I'm lost with this one, and I am hoping someone can offer some help: I want to be able to deploy all the patches that have been approved to all the machines that require them. Sounds very simple really, but can't seem to find a way to do that. It seems I have to manually select each computer from the OU, or type it in by hand. If I click on "Patch Mgmt" button, I see that there 13 "Highly vulnerable systems" on my network.. I then click on the "13" to view these systems, and it shows
Patch Scan Failing
I have installed desktop central 8 on 4 computers. I have turned off the firewall on all the computer and the server. I have checked to make sure the patch download folder is receiving new updates. but every time i tell it to run a patch scan i fails. I have attached a screen shoot of the error.
Machine restarts when requested not to
Hi, Build number 80114 I am having an issue with machines asking for a restart when a patch configuration is applied and the setting do not reboot is selected. In some cases the reboot happens regardless and the machine just reboots. In the past if you selected not to reboot the user was not prompted, in the case of pc's it was then just a matter of scheduling a reboot to happen at midnight and the patching is taken care of, with laptops when the user shut down and restarted in thier normal
Exclude IE8 from deploying to 1 workstation
I have patch management set to deploy patches automatically upon approval. I also have two automated configuration templates defined: one for workstations, one for servers that is scheduled to deploy the approved patches at a particular time. There is one workstation that cannot run IE8 due to issues with a critical financial website that only functions properly with IE7 My question is: 1. Is there a way to deselect the particular workstation from receiving IE8 updates, without creating
microsoft patch update ?
Hi, When is base updated in Manageengine server with new microsoft patches, my last microsoft patch is from 10.09.2012. Do I have to wait that you accept new microsoft updates so I can download them to my server or is there other way to get new updates earlyier ? With proxy setting maybe directly from microsoft ? thnx,
Will laptops download patches from vendors if they are offline.
Hello, Assuming the laptops have the latest configurations, will they download patches from the vendors if they are offline. Or what happens if they are offline during the patch window but are connected to the internet? Thanks, Jon
Patch Management - How can I exclude "Not Approved" from the list of Highly Vulnerabe Computers?
?
Missed Patch Tasks
I am new to Desktop Central. I have several automated patch scans tasks and deployments. What happens if the Desktop Central server or service is shutdown when an automated scan task is scheduled? Does the missed scheduled scan task kick off when Desktop Central restarts or is the task rescheduled to the next run time? Example: Scheduled patch scan weekly on Monday at 07:00:00. The server was down for the weekend. It is restarted on Monday at 10:00:00. What happens to the scheduled patch?
Discrepancy Between DC and Windows Update
Hi, I have come across a discrepancy between the patches that Desktop Central think are applicable for our clients and what Windows Update shows as available updates. While this is an issue for most Desktops in our organisation, here in an example based on my laptop, which is Windows 7 Professional SP1 64-bit. Among others, Windows Updates says I am missing the following update: KB2705219 However, DC does now list this for my computer, and when I try to install it manually, it returns with Not
PatchID 12416 Logic Problem
Hi guys Not sure if anyone else has reported strange logic problems with PatchID 12416 (WindowsXP-KB2744842-x86-ENU.exe) ? I have lots of machines showing that the patch is missing so patched one of them this afternoon at 1:45 pm. The job shows status succesfull so the machine was rebooted. After rescanning the machine again though PatchID 12416 is still shown as required so i attempted to reinstall at 2:49 pm. This time the patch install failed with an error that the patch was already installed.
PatchID 300370 (Ccleaner) - Location path incorrect
Hi there I just tried to deploy the patch mentioned above, however, the download failed. I clicked on the location path in patch details but it seems that the link is incorrect (I ended up at http://www.piriform.com/). Thanks & Regards Stefan
Patch "Not Applicable"
Hi, I am having an issue with deploying patches to our users PC's. We are testing deploying patches in our environment using java, specifically: 300381 and 300382. I have removed Java on the test PC's and attempted to install these updates. The keep showing as not applicable. So far I have: 1) Removed Software on target PC 2) Deleted any leftover reg keys 3) Reboot Any assistance would be greatly appreciated.