/build/static/layout/Breadcrumb_cap_w.png

Rollback Doesn't Rollback

I have a particular server that has KB5010790 installed. I created a patch label with this patch. Of course KACE doesn't detect it because its Inactive but I assumed that during a rollback, it should see it and remove it right? Or do I need to activate the patch to have it removed? When I run the rollback, the job "completes" right away but nothing changed. Under the inventory, I see: Update for Microsoft Windows (KB5010790) 02/21/2022 02:38:37 - Detected. In the Windows setup logs, I see: Package KB5010790 was successfully changed to the Installed state. However when I tried to roll back the job just completes right away with "completed" and nothing changed. 

On another server, it uninstalled fine so its not the patch: 

wG+pFX1H8hfhwAAAABJRU5ErkJggg==

What reasons does this happen where the patch is being reported as installed but won't uninstall during a rollback, and where or what logs can I check? Because this has happened with other patches as well. 


2 Comments   [ + ] Show comments
  • Is this the one from last month that was fixed in the months cumulative? If so, just apply it if you are ok with this months updates. We've applied them and no issue.

    Since it appears that you narrowed this down to a server I guess Id do an uninstall and reinstall of the kace agent and try again. KACE support would ask you for agent logs and server logs.. and will likely take quite some time to essentially r&r the agent and try again.

    Ive not done a rollback yet.. I guess I should test. - barchetta 2 years ago
  • No, the patch and patches related to it may be causing an issue. Of course I don't see any answers meaning either its quite a simple reason or people have no idea. The more I use KACE the less I can trust what I am seeing because the server tells me something is installed but KACE says it's not or the other way around. When you take say 5 patches and only one is active and do a detect scan on it, kace tells you only about that one active patch being installed or not because the other ones are either disabled or inactive. This has always caused a lot of confusion. So the only way to know about all 5 patches is to run a report which is in itself not user friendly and takes a lot of trial and error from my experience. (Or finding people online who are a lot smarter than me who post SQL queries that work.) So with this case, KACE is showing the patch installed and when I attempt to rollback it acts like the patch is not there. I get it, KACE really only takes what windows tells it and kace forwards us that info. But in this case I cannot log into domain controllers and have to depend on KACE which is proving to be difficult. - lama01 2 years ago

Answers (0)

Be the first to answer this question

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ