KACE is having problems trying to figure out why my Windows Patches are not being applied.  They think it might have to do with permissions on the test workstation.  I used the same smart label patching when I had the trial version and it worked fine.  After we purchased K1000 and K2000, the same smart label patch does not work.  We have not changed anything in between the trial and the purchase.

0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Answers

1

This may not solve your issue, but when I have quarky problems like that happen I create new patch schedules. Worst case I delete all of my patches, and redownload. There could have been an issue moving the DB over when moving from a trial.

Answered 09/18/2013 by: dugullett
Red Belt

  • I did try creating multiple new patch schedules. I have tried a variety of them. None of them seem to work properly.
    • What exactly is happening and do you have a kpatch.log in debug mode to see what is or is not happening? I would also try to test a single patch on a single machine to see if it patches. That way you will know at least know more.
  • We did try just a single patch and they did look at the kpatch.log file. They could not make anything out of it except that there might be some permission issue with writing to the registry. But, like I mentioned before, we have not changed anything. Especially permission wise.
    • create a GPO and turn off the firewall. put one machine in there and run a patch schedule for one patch it needs if it works then you know it's FW. If it doesn't you also know it wasn't the FW. It runs as local system so there are no permissions issues as it runs as local admin.
      • We have the firewall turned off at the workstations. Dell KACE is telling me that the mcescan.exe file does not run on our workstations and it does not let it write to the registry. It can run on my workstation.
Please log in to comment

  • I turned on debugging for KACE support and they were not able to find anything.
Please log in to comment
1

If you think permissions could be involved, check to make sure these are whitelisted: http://www.kace.com/support/resources/kb/solutiondetail?sol=SOL111785

Here is a list of URLs and file extensions to whitelist also: http://www.kace.com/support/resources/kb/article/K1000-Whitelist-of-URLs-and-file-exts-for-Patch-Downloads

Answered 09/18/2013 by: jknox
Red Belt

  • I put those folders and files into the Exceptions in our Anti Virus. After I did that, when I try to Detect and Deploy a patch, it just errors out. The last one said "error (Log Upload Failed".
Please log in to comment
0

There were some buggy patches release from Microsoft. Google the patch numder as it talk of the forums now. Either make those patch inactive or wait until updates in Kace list.

Also try seperate patching i.e. First OS only when it finishes then Office....

My experience was, some 1-2 patches where download n loading n deploying, never ends. Was in a loop.

I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.

http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx - See more at: http://www.itninja.com/question/is-it-possible-to-downgrade-to-5-4-sp1-on-5-5#sthash.jP6G9f3p.dpuf

 

My experience was, some 1-2 patches where download n loading n deploying, never ends. Was in a loop.

I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.

http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx - See more at: http://www.itninja.com/question/is-it-possible-to-downgrade-to-5-4-sp1-on-5-5#sthash.jP6G9f3p.dpuf
My experience was, some 1-2 patches where download n loading n deploying, never ends. Was in a loop.

I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.

http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx - See more at: http://www.itninja.com/question/is-it-possible-to-downgrade-to-5-4-sp1-on-5-5#sthash.jP6G9f3p.dpuf
Answered 09/25/2013 by: haseebiqbal
Orange Belt

  • My experience was, some 1-2 patches where download n loading n deploying, never ends. Was in a loop.

    I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.

    http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx
Please log in to comment
Answer this question or Comment on this question for clarity