KACE Product Support

I turned on debug for one machine and ran it again just for the one machine.  Here is what was in kbox_log

kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) Running kbot: runkbot 84 1358612582r7 -noLogUpload
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) Validating kbot xml
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) Kbot xml C:\Documents and Settings\All Users\Dell\KACE\kbots_cache\84-1358612582r7_expanded.xml, Validation Success
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) Validation complete
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (status) START
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) Kbot Config Info - Start
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) id=84 name=Copy of Uninstall Ask Toolbar Most Versions version=1358612582r7 type=policy
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) execute disconnected=true logged_off=true
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) execute events LOGON
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (debug) Kbot Config Info - Finish
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (output) Running as: SYSTEM
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (activity) Checking if registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\KBot Configuration\Uninstall0' value 'key' is equal to '2145779073'
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (output) Checking if registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\KBot Configuration\Uninstall0' value 'key' is equal to '2145779073' succeeded
kbot[84:1358612582r7] @ 2013-01-21T08:44:22 (status) FINISH (in state 'verification_success')

I may have found the problem.  The wizard created a remediation command but I didn't have any command under success.  I added that and It worked much better.

Verify

1. Verify that “HKLM\SOFTWARE\Kace\KBot Configuration\Uninstall0!key” is equal to “2145779073”.
   Edit

Add a new step…Verify a registry key exists...Verify a registry value exists...Verify a registry value is exactly...Verify a registry value is less than...Verify a registry value is greater than...Verify a directory exists...Verify a file exists...Verify a file was modified since...Verify a file version is exactly...Verify a file version is less than...Verify a file version is greater than...Verify a product version is exactly...Verify a product version is less than...Verify a product version is greater than...Verify a service exists...Verify a service is running...Verify a process is running...Launch a program...Search file system...Always Fail.Update policy and job schedule...Verify a registry key does not exist...Verify a registry value does not exist...Verify a registry value is not...Verify a registry value is less than or equal to...Verify a registry value is greater than or equal to...Verify a registry pattern match...Verify a registry pattern doesn't match...Verify a registry key's value count is exactly...Verify a registry key's value count is not...Verify a registry key's value count is less than...Verify a registry key's value count is less than or equal to...Verify a registry key's value count is greater than...Verify a registry key's value count is greater than or equal to...Verify a file version is not...Verify a file version is less than or equal to...Verify a file version is greater than or equal to...Verify a product version is not...Verify a product version is less than or equal to...Verify a product version is greater than or equal to...Verify a registry key's subkey count is exactly...Verify a registry key's subkey count is not...Verify a registry key's subkey count is less than...Verify a registry key's subkey count is less than or equal to...Verify a registry key's subkey count is greater than...Verify a registry key's subkey count is greater than or equal to...Verify a process is not running...Run a batch file...Kill a process...Create a message window...Destroy a message window...Update message window text...Unzip a file...

 

Finish

On Success

1. Launch “SYS\msiexec.exe” with params “/qn /X{86D4B82A-ABED-442A-BE86-96357B70F4FE}”.
   Edit

Add a new step…Launch a program...Set a registry value...Install a software package...Start a service...Log a registry value...Log file information...Log message...Stop a service...Restart a service...Delete a registry key...Delete a registry value...Upload a file...Set a registry key...Run a batch file...Kill a process...Create a message window...Destroy a message window...Update message window text...Unzip a file...

 

Finish

Remediation

1. Set “HKLM\SOFTWARE\Kace\KBot Configuration\Uninstall0!key” to “2145779073”.
   Edit
2. Launch “SYS\msiexec.exe” with params “/qn /X{86D4B82A-ABED-442A-BE86-96357B70F4FE}”.

Add a new step…Launch a program...Set a registry value...Install a software package...Start a service...Log a registry value...Log file information...Log message...Stop a service...Restart a service...Always Fail.Delete a registry key...Delete a registry value...Upload a file...Set a registry key...Run a batch file...Kill a process...Create a message window...Destroy a message window...Update message window text...Unzip a file...

 Do I need to add the set statement to the on success as well?

Finish

I have several still failing.

Running as: SYSTEM
Checking if registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\KBot Configuration\Uninstall0' value 'key' is equal to '2145779073' succeeded
Setting registry 'HKEY_LOCAL_MACHINE\SOFTWARE\Kace\KBot Configuration\Uninstall0' value 'key' equal to '2145779073' succeeded
Error creating process: C:\WINDOWS\System32\msiexec.exe /qn /X{86D4B82A-ABED-442A-BE86-96357B70F4FE}: (0) The operation completed successfully.
Error Code: 0
Status Code: 1603

Does it require the browser to be closed in order to uninstall?  If so, that might be the problem.

Hmm. Good question.  That could be.  Might make sence why every time I run it, I get one or more successes.

Update on this.   Its seems I can only do this if kill iexplore.exe and then launch msiexec with uninstall information. But this only works as the logged in user.  I can't get it to work as system or local admin. Was hoping to uninstall these when the user is not working but I don't think that is possible since it requires the logged in user account.

Has anyone got this to work as I am getting failure as well when creating and trying the above KScript.?

I can only get this to work by running as an Online KScript an running as  User logged into console.  Then the script I have the following script

1. Launch “SYS\taskkill.exe” with params “/F /IM iexplore.exe”.
2. Launch “SYS\msiexec.exe” with params “/qn /X{86D4B82A-ABED-442A-BE86-96357B70F4FE}”

This script works if the user's IE is open. It kills the IE and uninstalls but you have to run this during the day when the user is logged in and possibly cause data loss for the user as you are killing their IE session.  If the user is not in IE, the script fails as it can't find the iexplore.exe process. I haven't found a way to have it continue to execute the uninstall.

If you take out the taskkill statement, it works if the user is not in IE. If the user is in IE, it fails.

If you don't run as the logged on user, you always get Error creating Process as I listed above.  Frustrating, you would think SYSTEM could uninstall this.  Trying to figure out a good way to get rid of all these toolbars our users have.

Finish