K1000: What kind of permissions would be blocking my Windows patches from being deployed?
KACE is having problems trying to figure out why my Windows Patches are not being applied. They think it might have to do with permissions on the test workstation. I used the same smart label patching when I had the trial version and it worked fine. After we purchased K1000 and K2000, the same smart label patch does not work. We have not changed anything in between the trial and the purchase.
Answers (4)
This may not solve your issue, but when I have quarky problems like that happen I create new patch schedules. Worst case I delete all of my patches, and redownload. There could have been an issue moving the DB over when moving from a trial.
Comments:
-
I did try creating multiple new patch schedules. I have tried a variety of them. None of them seem to work properly. - tsienkiewicz@ldirx.com 10 years ago
-
What exactly is happening and do you have a kpatch.log in debug mode to see what is or is not happening? I would also try to test a single patch on a single machine to see if it patches. That way you will know at least know more. - petelanglois 10 years ago
-
We did try just a single patch and they did look at the kpatch.log file. They could not make anything out of it except that there might be some permission issue with writing to the registry. But, like I mentioned before, we have not changed anything. Especially permission wise. - tsienkiewicz@ldirx.com 10 years ago
-
create a GPO and turn off the firewall. put one machine in there and run a patch schedule for one patch it needs if it works then you know it's FW. If it doesn't you also know it wasn't the FW. It runs as local system so there are no permissions issues as it runs as local admin. - petelanglois 10 years ago
-
We have the firewall turned off at the workstations. Dell KACE is telling me that the mcescan.exe file does not run on our workstations and it does not let it write to the registry. It can run on my workstation. - tsienkiewicz@ldirx.com 10 years ago
Have you tried to turn on debugging?
http://www.kace.com/support/resources/kb/article/how-to-turn-on-client-debugging-for-patching
Comments:
-
I turned on debugging for KACE support and they were not able to find anything. - tsienkiewicz@ldirx.com 10 years ago
If you think permissions could be involved, check to make sure these are whitelisted: http://www.kace.com/support/resources/kb/solutiondetail?sol=SOL111785
Here is a list of URLs and file extensions to whitelist also: http://www.kace.com/support/resources/kb/article/K1000-Whitelist-of-URLs-and-file-exts-for-Patch-Downloads
Comments:
-
I put those folders and files into the Exceptions in our Anti Virus. After I did that, when I try to Detect and Deploy a patch, it just errors out. The last one said "error (Log Upload Failed". - tsienkiewicz@ldirx.com 10 years ago
There were some buggy patches release from Microsoft. Google the patch numder as it talk of the forums now. Either make those patch inactive or wait until updates in Kace list.
Also try seperate patching i.e. First OS only when it finishes then Office....
I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.
http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx - See more at: http://www.itninja.com/question/is-it-possible-to-downgrade-to-5-4-sp1-on-5-5#sthash.jP6G9f3p.dpuf
I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.
http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx - See more at: http://www.itninja.com/question/is-it-possible-to-downgrade-to-5-4-sp1-on-5-5#sthash.jP6G9f3p.dpuf
I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.
http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx - See more at: http://www.itninja.com/question/is-it-possible-to-downgrade-to-5-4-sp1-on-5-5#sthash.jP6G9f3p.dpuf
Comments:
-
My experience was, some 1-2 patches where download n loading n deploying, never ends. Was in a loop.
I used my pc to test first. At one stage had blue screen. After restarted, Offered me to "Windows will Check the cause" then it downloaded whole lot of patches from Microsoft.
http://blogs.technet.com/b/office_sustained_engineering/archive/2013/09/12/september-2013-public-update-update-targeting-for-microsoft-update-wsus-and-sccm.aspx - haseebiqbal 10 years ago
