Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Deleting Security Patches from Notification Server and Site Servers

Created: 15 Jan 2013 | 6 comments

Hi,

I am looking at instructions on how we can delete the Security patches which has been downloaded to NS and Site Servers using Altiris Console so I can delete them centrally.

Note: Please see that I am aware about Global Package Service Settings and Windows Patch Assessment Settings but need to know how we can delete these patches across from NS & Site Servers centrally thru Altiris Console.

Any thoughts would be highly appreciated.

Comments 6 CommentsJump to latest comment

andykn101's picture

Manage > All resources > Package. Select the Package(s) you want to delete, right click > Delete.

 

Authorised Symantec Consultant (ASC) with Endpoint Management Limited, an Authorised Symantec Delivery Provider based in the UK.

Connect Etiquette: Please "Mark as Solution" posts that fix your problem.

nbhatia's picture

Thanks. How can we know if this has been deleted across from Site Servers which are running the package service.

Under Package it only shows the packages which are available on NS and doesn't show anything related to Site Servers.

andykn101's picture

A Package Server should delete the package once it's no longer on the Notification Server. Delete one and check, it may take a while for it to work through - one of the Package schedules only runs overnight.

Authorised Symantec Consultant (ASC) with Endpoint Management Limited, an Authorised Symantec Delivery Provider based in the UK.

Connect Etiquette: Please "Mark as Solution" posts that fix your problem.

nbhatia's picture

Thanks Andy. Where can i check these schedule on Altiris console for Package Server replication?

andykn101's picture

Windows Task Scheduler.

Authorised Symantec Consultant (ASC) with Endpoint Management Limited, an Authorised Symantec Delivery Provider based in the UK.

Connect Etiquette: Please "Mark as Solution" posts that fix your problem.

Roman Vassiljev's picture

Hi nbhatia,

Actually package cannot be deleted from everywhere "by one click".

As you mentioned in your post:
 - Packages are removed from agents according to settings specified in Windows Remediation Settings > Policy and Package Settings > Delete packages after
Please note that there is known issue related to this setting - any change of "Delete packages after :" setting is not applied to packages which have been already installed on client. Modified setting will work only for "active" policies.
 - Packages are removed from Package Servers according to setting specified in Site Management > Settings > Package Service Settings > Delete Package files if they are unused for

Regarding NS, packages may be removed from NS in case if the are unused. You may do it with Check Software Package Integrity task.

So in order to delete any package from your setup, you need
 
1. To ensure that this package is not used by NS
 - Disable unused Software Bulletins (Select Bulletin in PRC, Right Click -> Disable)
 - Delete all policies, where Disabled bulletin is included.
2. Navigate to Check Software Package Integrity task and enable checkbox "Delete the downloaded packages that are no longer in use"
3. Run Check Software Package Integrity task - Package will be removed from NS
4. As package is not in use anymore, it will be removed from Package server and agents accoriding to described settings.

Hope this helps,
Roman