KACE Product Support

Interesting. Have you reached out to support? we have been using the KBOX for 4 years and unless we didn't set up labels or the schedule correctly patching has always pushed out the patches that get downloaded and are assigned to a label. I know there have been some issues with the new agent so please check if you are up to version 5.3.4927 for the server and 5.3.47657 for the agent. If not, upgrading may help or if not you may need to call support.

things to check (i am sure you have but never hurts to double check).

1. ensure your webserver and dns under network setting are the same
2. you are patching what you downloaded via subscription settings
3. that you are targeting the correct systems and patches that relate to them
4. separate 32/64 bit ( i find this to be helpful)

@nshah:
- Yes, I have been in contact with support time and again. Currently ticket has been open & active for over a month.
- We have version 5.3.47927 of the server and 5.3.47657 of the agent

1. Please clarify what you mean re: the IP address of the webserver and DNS. Do you mean that the DNS server for the KBox should be itself?
2. Not sure what you mean by "you are patching what you downloaded via subscription settings." Even trying a few specific patches that I know should be downloaded doesn't work on some systems. (i.e. it is not consistent)
3. RE: targeting systems, please share with us how you do that. Do you create seperate patch deployment schedules for each version of Windows? I currently have two, one for XP and one for Vista/7.
4. I'll try seperating out the 64-bit systems into their own patch schedule / patch labels.

Thanks,

djz

How far narrow-down the patches? For example, do you setup a smart label to only get the exact patches needed for each OS? (e.g., a smart label that contains only patches related to Windows 7 x64, including IE 9, .Net framework, and Firefox, but not including SQL Server, Adobe Acrobat, McAfee, etc.?) Just curious how you filter your patches in your patch smart labels for deployment.

Do you run create patch deployments for both OS and Application patches together, or do you split them apart into separate deployments?

Spent 70 minutes on the phone with tech support and the only progress we made was getting an error code. When we try to install an MSU patch file while running under "local system" credentials the following error appears in the Setup event log.

Source: WUA
Event ID: 3
The Windows update "Hotfix for Windows (KB2543367)" could not be installed because of an error: 2149842976 "" (Command line: ""C:\Windows\system32\wusa.exe" "C:\Windows\Temp\Windows6.0-KB2543367-x86.msu" ")

We've tried...
- Disabling UAC
- Running agent service as an administrator (both with and without UAC enabled)
- Removing and re-installing the agent
- Disabling A/V
- Cleared temp folder

The problem *only* occurs when the patch(s) is installed using the KBox. Installing manually or via Windows Update works just fine.

If anyone has any thoughts on this please share.

Thanks,

djz