Patch Management Solution

 View Only

  • 1.  How to find who pushed patches to all servers

    Posted Jan 18, 2014 06:10 AM

    Hello All,

     

    In my company helpdesk team(More than 10 guys) used altiris to push patches to servers and workstations as per the schedule. Suddenly today all the servers and workstations are showing pending for reboot. Based on my findings somene pushed last year patch policy (November Month). I need to find who exactly did this? Please help me to find the logs.

    Regards,

    Mac

     



  • 2.  RE: How to find who pushed patches to all servers

    Posted Jan 18, 2014 09:24 AM
    What product version are you on? If you look at the audit properties of the bulletin task, you should see who last modified it.


  • 3.  RE: How to find who pushed patches to all servers

    Posted Jan 18, 2014 10:16 AM

    Product Version: 7.1.7858

    Yes i saw that but actually as per the planned schedule one of the person from helpdesk team tried to push the november month patch policy to 2 servers so i saw his name in last modified section (01/17/2014 11 AM GMT) but all the servers are showing patches are installed @01/17/2014 06 AM GMT).

    Thanks for your help.

     



  • 4.  RE: How to find who pushed patches to all servers

    Posted Jan 20, 2014 08:15 AM

    If you review the Audit tab, do you find a row that is near that date & time?



  • 5.  RE: How to find who pushed patches to all servers

    Posted Jan 22, 2014 11:30 AM

    Yes i can see Altiris service account modified the policy 15mins before the incident occurs.



  • 6.  RE: How to find who pushed patches to all servers

    Posted Jan 22, 2014 01:33 PM

    OK, so either a background process moified the policy or a user logged into the consoel as the AppId and modified the policy.