Patch Management Solution

Hello,

I would like to know which commands/actions must we do in server or clients to force the start of the patch installation process?

For example, after going to "Windows Compliance by Bulletin" and create a Software Update Policy for a bulletin, how can we deploy this as soon as possible?

I suppose that the client need to force the execution of "Windows System Assessment Scan" so it sends its configuration, OS, patches status, etc. to the server. This task is scheduled in the client every 3 hours.

The Basic Inventory for Symantec Management Agent is done every 7 days and the Symantec Management Agent configuration updated every 15 minutes.

In Software Updates, the update cycle is done every 1 hour.

Any help about this complete process works would be very appreciated (a diagram, brief, etc.)

Thank you very much!

I believe this is still accurate for 7.5. 

http://www.symantec.com/business/support/index?page=content&id=HOWTO44212

Hello again,

Thanks for the information about the process flow ...

But, can we execute some command in the client or in the server for speed up this process?

Thanks.

Hi Licenses LCFIB,

I recommend the following KB:http://www.symantec.com/docs/HOWTO84003

Network23

In addition to this you can run the AeXPatchUtil.exe utility with a /Xa switch from a patch client to initiate installation of pending patches immediately.

C:\Program Files\Altiris\Altiris Agent\Agents\PatchMgmtAgent\AeXPatchUtil.exe /Xa

Hello,

I've read the KB and follow all the steps but the patch is not installed in the machine, nor it is downloaded.

I can see the computer in "View applicable computers by bulletin" but after

- running the assessment scan in the client machine

- create a software deploy policy for the bulletin (MS14-A10)

- execute task NS.Windows Patch Remediation Settings

- update configuration in the client for receiving the task

I don't see it in the software updates tab ...

Is anything else I can look for in the server or in the client?

Thanks.

It doesn't happen immediately.  And you'll have to run the assessment AFTER the patch is downloaded into the catalog and the policy is created for it.  And backend filters need to update first.

If you're new to Patch this is a common frustration but Patch is built on Software Delivery which is a policy-based action.  THIS product is not designed for a do-it-now function... it's not the same as WSUS or plain-old Windows Update.