Client Management Suite

 View Only
Expand all | Collapse all

Patch Management - Pending Status for patches

  • 1.  Patch Management - Pending Status for patches

    Posted Sep 15, 2011 01:44 PM
      |   view attached

    Please see the attached picture...it might help explain without so many words...

    I have a large number of patches that are showing as 'Pending' for status, with no information (Package and task properties are blank).  I'm not sure why they're doing this, or how to go about resolving it.  I know there's a limit of 50 'updates' per patch task created or something of the sort, so i've been very careful to group them in collections of less than 50 when I create the tasks.

    If anyone has any insight or where/how I can find out why this might be happening i'd appreciate it.  I haven't been able to find anything similar in searches on the forum (other than from 6.x patch management).

    Thanks!



  • 2.  RE: Patch Management - Pending Status for patches

    Posted Sep 15, 2011 04:16 PM

    Have you reviewed these possible causes?

    http://www.symantec.com/docs/TECH127676

    What version are you running (7.0 SP5, 7.1, or 7.1 SP1)?



  • 3.  RE: Patch Management - Pending Status for patches

    Posted Sep 16, 2011 07:20 AM

    ...when I did my search, even though the key words matched it perfectly.  I miss the old KB site where I could actually FIND things like this!  Thanks for the link, I will check those things out and post back.  Figures this starts happening 2 days before our patch weekend...

     

    Oh, and we're using 7.1 SP1.

     

    Thanks!



  • 4.  RE: Patch Management - Pending Status for patches

    Posted Sep 16, 2011 08:35 AM

    I'm looking at the STPatchASsessment.log, but I can't seem to find the actual agent log.  Either it moved somewhere strange in 7 or i'm losing my mind and looking for the wrong thing...

     



  • 5.  RE: Patch Management - Pending Status for patches

    Posted Sep 16, 2011 11:25 AM

    I usually register AeXAgentDiagnostics.dll or I use RAAD v2 to access the client logs.



  • 6.  RE: Patch Management - Pending Status for patches

    Posted Sep 19, 2011 08:06 AM

    it appears that everything that is 'pending' on machines appears to be Service Packs.  I can't confirm this 100% since I can't look at every machine, but the last 4 or 5 i've looked at, this has been the case.  The regular security patches appear to be just fine, but Service Packs just sit at a 'pending' state indefinitely.  I'm not sure if this is a bug with 7.1 SP1 or not.  Is anyone aware of any specific settings regarding deployment of Service Packs?  I built the bulletins for SP's the same as I did for any other patch...so there's no difference in the task on my end, but I supposed there could be something different in NS for this.

    anyone else out there using 7.1 SP1 and have any input?



  • 7.  RE: Patch Management - Pending Status for patches

    Broadcom Employee
    Posted Sep 28, 2011 08:25 AM

    Hi RichC,

    There should not be anything different in NS for distributing the policies with SP's.

    May I ask you please attach the client policy from your agent where updates are with 'Pending' status?

    The policy is located at : <Altiris Installation Path>\Altiris Agent\Client Policies\<Console URL>.xml

     

    Thanks,

    Dmitri



  • 8.  RE: Patch Management - Pending Status for patches

    Posted Sep 29, 2011 03:17 PM

    Hi.

    I've seen this kind of scenario on ISA servers that are locked down & can't download the patches via HTTP or UNC. For those patches that are pending, can you browse to the download location? Have those patches been accepted & staged?



  • 9.  RE: Patch Management - Pending Status for patches

    Posted Sep 29, 2011 03:54 PM

    If you open any of them, the info is blank on all tabs.   There are some that are successful, and some that just show as pending.  It's a mix...unfortunately not all one way or the other which would be a little easier to diagnose.  ;-)



  • 10.  RE: Patch Management - Pending Status for patches

    Posted Feb 22, 2012 09:27 AM

    I now have this problem.  Was there a resolution?



  • 11.  RE: Patch Management - Pending Status for patches

    Posted Feb 22, 2012 09:48 AM
    i posted this once, but it didn't show up...not sure why. We ended up having to disable and delete all packages, files, references, etc to the patches with the issues. There should be some red flags in the logs for which patches/guids are having issues. They may have done some additional cleanup though, I don't remember.....


  • 12.  RE: Patch Management - Pending Status for patches

    Posted Feb 22, 2012 07:10 PM

    Check the GUID or name on the package server.

    Match it to a bulletin on the NS

    Right-click the bulletin and choose Recreate Package(s)

    Package should be valid now.



  • 13.  RE: Patch Management - Pending Status for patches

    Posted Feb 23, 2012 01:39 PM

    I had the same exact issue and the only thing that would fix it is to run a FULL PMimport.

    uncheck the box for Incremental import, save the changes and schedule the task.

     

    i also had an issue with Vendors disappearing from the list and had to open a case with support and they pointed me to this TECH doc: http://www.symantec.com/docs/TECH164471