Patch Management Group

The issue explained in this prior thread (https://www-secure.symantec.com/connect/forums/mswu-804-reinstall-next-day) is now happening with MS13-081

If you look at installlog.csv (C:\Program Files\Altiris\Altiris Agent\Agents\PatchMgmtAgent) it shows MS13-081 correctly installing with code needs reboot.  Even on machine rebooted, however, patch remediation isn't showing any machines as having it installed.  Eventually MS13-081 tries to install again and errors in the installlog as it's already installed.

I don't have time to escalate this one with Symantec (about to go out of town), hoping the rules issue gets resolved on it's own.  

I'll post back if I see it fixed.

I am seeing this same issue and have reported to Symantec Support with these details.

Microsoft Bulletin: MS13-081 installs successfully, but continues to reinstall KB2862330 and KB2862335 on the next update cycle with exit code 2359302.

We saw this same issue on MSWU-804.

In the past I have seen this behavior caused by a corrupt patch or package.  To fix the issue, I will recreate the package in Patch Remediation Center.

1. Disable the policies deploying the bad patch.

2. Re-creatie the package.

3. Re-enable deployment policies. 

If you run MBSA against these machines, does it also state that they are not installed?

I am having the same issue and have opened case 05290197 on it. It is also an issue for KB2862330 in the same bulletin. Both updates "fail" on both x86 and x64 systems.

Manually running each msu update shows that they are already installed. Both are also listed in the Windows 7 Installed Updates in Control Panel.

Microsoft Bulletin MS13-081 IsInstalled=TRUE issues are currently under review:

1. TECH211635: MS13-081-KB2862330 continually reinstalls

2. TECH211636: MS13-081-KB2862335 continually reinstalls

Please subscribe to these articles to receive an update when the resolution is provided.

Advisory:

1. TECH211635: MS13-081-KB2862330 continually reinstalls; was resolved in last night's PMImport fix release. This KM was updated and the fix is now available.

2. TECH211636: MS13-081-KB2862335 continually reinstalls; is still under review, but should be resolved in Tuesday's fix release slated for 10/22/13.

What about MS13-081-KB2884256 ?

I am unaware of any problems regarding KB2884256. Keep in mind each update has a separate IsApplicable / IsInstalled Rule set and will need to be reviewed separately.

If you are seeing similar behavior as detailed in this thread; open a Support Case for review of the environment and to gather the needed rule data for further troubleshooting with Development.

Thank you,

Joshua

Hello All,

I was experiencing the same issue with 2862330 and 2862335. I was finding the updates were installing but were not making the system files "rev up" to the expected versions even while getting succesful installations of the patches. Uninstall and manual installation of the MSU file was not working either.

I found the "owner" of the sys files that were to be updated was "trusted installer", and the "administrators" group only had read permissions on the files due to least privilege most probably. In any case, giving the "admin" group "full control" of the sys files in question did allow the update to go through succesfully and clear the scan afterwards.

Hope this helps, and thanks for all of YOUR posts and advice, they always help out...

A