05/07/2019 631 views

We seem to be having some issues with Windows Serve 2016 devices. It appears that when KACE runs a detect against the device, it does not see all of the missing patches. Also, when we run deployments, even though the KACE appliance sees that the patches were applied, when we go on the machine to validate that the patches were made, there are no OS patches that show installed. Has anyone else run into this issue? We are running security only patches at this time, we are not running non-security patches.


2 Comments   [ + ] Show comments


  • We are seeing the same issue. I have a case opened with support, but may not hear anything for a few days. We ran the ivanti troubleshooter today and it had the same issues. If you look at nodes (other OS's) without the issue you will see in the registry they have the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Patchlink.com\Discovery Agent

    This means the scan is able to build a patch list, without it the agent assumes it worked and just reports finished.

    If you find a resolution let me know.
    • We are the exact same situation. I currently have a support ticket open with KACE support, so we'll be delving into this shortly.
  • I have the same problem, and the link to the KB is broken! Come ON!@!!@@! AAARRRGGGHH!!

All Answers


Quest support gave me this article and said this is the issue. 

This have been seen before on previous OS versions asexplained on the KB below: 


Answered 06/27/2019 by: dan.lebaron
Senior Yellow Belt


I had the same problem and opened a support ticket.  It was explained to me there is a bug in Kace SMA version 9 detecting/deploying patches to Windows Server 2016 build 1607.  The bug is not going to be fixed.  The resolution is to upgrade the KACE Systems Management Appliance to the latest release of version 10.0

Answered 09/18/2019 by: davidrnoble
White Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login