Problem with Patches Deploying
Ok, I am trying to get patching working in our environment. I'm using a test environment of three machines to simulate different machines in our environment. We are only using Kace to do patching for non OS patches. I'm testing first with Java. So my patch subscription label only downloads Java patches for Windows. I have smart labels created for three groups: 1) New patches less than 14 days, 2) Patches released more than 14 days ago but less than 30 and 3) patches older than 30 days. #1 gets deployed to test environment in my office. #2 gets deployed to test machines on locations and 3) deploys to all machines.
I can see that machines have detected they need patches, but the patch still has not run on them. If I click run now, it still doesn't run on them. The three test machines have Java 7u21 and Java 7u25. So I know they should all get updated to 7u40. Any ideas as to why they aren't patching? I have the schedules set to run once a week, but changed them to run daily today to see if I can get them to work.
Answers (3)
If the patch action is detect, not detect and deploy, it will stop after detecting the need for the patches you have identified.
Comments:
-
I understand that. Notice that the names of the schedules indicate which ones are detect, which ones are deploy and which ones are detect and deploy. I didn't want to go into too much detail on the way I have my schedules set.
The schedule that should be updating my test machines is the production and it is detect and deploy. There are 195 patches in the smart label and I have individually added three machines to the schedule. After a week, they have not been patched. - lmland 11 years ago-
Without more detail about the individual patch schedule settings within the schedule you're asking about, it's really impossible to guess where the issue is. - TankGirl 11 years ago
Success (102) means that the machine needs a reboot to complete the installation. See here for error codes.
http://www.kace.com/support/resources/kb/solutiondetail?sol=SOL111687
Comments:
-
Ok. That's helpful, but this machine has Java 7 u 25 and 7 u 40 is over 30 days old. Why is it not listed and/or being installed on this machine? - lmland 11 years ago
-
Are you forcing a reboot of the box after patching and while deploying patches? I would suggest a restart and then try just a detect. to me it seems like Java is just stuck and needs to apply updates when the machine is booting. - ms01ak 11 years ago
-
Imland,
Have you verified that the 7 u 40 is in the patch label you are restricting the deployments to?
Ron Colson
KACE Koach - ronco 11 years ago-
Yep. It is in the Patch label, because it was downloaded and is listed in the patch label. - lmland 11 years ago
-
Also rebooted machine without having any effect. The schedule also has a force reboot. Why didn't the patch force reboot?
If you look at the date, I believe this is from a previous attempt to get patching set up. That's the trouble with using test machines for patching and then starting over. - lmland 11 years ago
Patch Action: Detect and Deploy
Machine Selection: Three individual machines listed
Operating System: Windows
Limit Detect To Selected Patch Labels: Java to Deploy
Limit Deploy To Selected Patch Labels: Java to Deploy
Max Deploy Attempts: 3
No Alerts
Patching Progress is set to show
Reboot Options: Force Reboot
Patch Schedule: Every day at 12pm
Schedule according to Server Time
Run on next connection if offline
Delay Schedule by 60 minutes
Here is the SQL for the Java to Deploy Label:
select UID
from KBSYS.PATCHLINK_PATCH
where KBSYS.PATCHLINK_PATCH.TITLE like '%Java%'
AND PLATFORM_ID != 7
AND DATEDIFF(NOW(), KBSYS.PATCHLINK_PATCH.RELEASEDATE) > 30 - lmland 11 years ago
select UID from KBSYS.PATCHLINK_PATCH where ( KBSYS.PATCHLINK_PATCH.TITLE like '%java%')
AND RELEASEDATE<DATE_SUB(now(),INTERVAL 30 DAY)
What is the PLATFORM_ID!=7 referencing? I'm not familiar with that.
When you view your label, does it show you Patches being in it? My Java+30 day label shows 137 patches - rockhead44 11 years ago
Ok, so you've verified that the JRE 7 u 40 is in the Patch Label that is pointed at this machine, in either a Deploy OR a Detect & Deploy schedule. Next, either find that patch in the Patch Listing, click on it and look to see what the status of that patch is WRT the specific machine, OR find that machine in Inventory, click on it, and see what the status of that patch is.
Ron Colson
KACE Koach - ronco 11 years ago