Patch Management Solution

Has anybody else had problems trying to deploy these two patches MSWU-1006 and MSWU-1007 to Windows 8.1 devices? They are app updates that are just for Windows 8.1 and in order to do manually, you have to use a microsoft online account. However these are domain workstations in a lab and will never use microsoft online accounts. Is there any kind of workaround for trying to get these apps to update or remove them from patch management console so they show as NOT needing to be updated?

Thanks

Brad

We are having the exact same issue, the workaround is to manually install them from the MSI file or disable the updates in the Patch Remediation Center. It would be nice to get a fix as we are starting to deploy Win8 to more of the company.

Thanks

That is what I noticed as well. Why is it I can extract out the CAB file and run the MSI myself and update it, but Symantec cannot get the batch file correct to update it?

What is even more bizarre is that I can update it, run a power shell script in order to remove the core apps that get installed in order to run sysprep correctly and then after a image comes down, they are updated in the image already. Really? What is going on here? Not making a Windows 8.1 update 2 deployment very easy.....Gee Thanks!

Hi, apologies for late answer.

You would have to manually recreate packages for policies that include these patches.

Just go to Patch Remediation Center, find these bulletins, multi-select them, right-click > Recreate Packages.

Same action will work for several other patches in case you have a similar problem with them, here is the list:

- MSWU-974
- MSWU-975
- MSWU-976
- MSWU-977
- MSWU-978
- MSWU-979
- MSWU-980
- MSWU-981
- MSWU-982
- MSWU-983
- MSWU-984
- MSWU-985
- MSWU-986
- MSWU-1006
- MSWU-1007

Thanks Alex, I did try that at first when I had problems with this earlier this summer and I did re-created all of those updates again yesterday. Sadly it did not help with MSWU-1006 and MSWU-1007. Even manually downloading them and trying to install them manually, they still fail....Why?

Hi,

First of all make sure you have the latest version of PMImport, which is 7.1.591 (as of today), then recreate these bulletins.  

I`ve noticed you mentioned trying to install these bulletins manually - what kind of error message did you get?

Also, would you mind posting the error code from these updates, just double-click on the bulletin that failed and go to Run History tab.

And finally, please look in your STPatchAssessment.xml file (located in %ProgramFiles%\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{6D417916-467C-46A7-A870-6D86D9345B61}\cache folder) for these updates - what does it say (please see screenshot for example)?

Alex - Thanks for your help with this! I did run the latest PMImport yesterday and re-created the bulletins. Sadly it did not help much. Here is a screen shot of the error that it kicking up from the installation failed error and giving an exit code 1 (first screen shot). Checking out the XML file, it is showing that a registry key is missing and the reason while it is failing (second screen shot). Thoughts?

Hmmm, thanks for posting these.

I still think there is an issue with .bat files not updating during re-creation process.

Would you please compare, for example, my .bat (please rename .zip to .bat) file with yours for Q2962183 from your stpatchassessment.xml?

BAT file should be in the same folder as windows8.1-kb2962183-x64.cab file (usually in C:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{package_id}). I have attached an example.

Attachment(s)

windows8.1-kb2962183-x64_5ae3f99425b62fd9d13e27c6a3eb6ebc...1-kb2962183-x64_5ae3f99425b62fd9d13e27c6a3eb6ebcef7a7073   3 KB 1 version

Here is also a direct link to .bat file for kb2962183 from MSWU-1007. Please make sure the download works from your Notification Server:

http://www.solutionsam.com/imports/7_1/patch/windows/scripts/windows8.1-kb2962183-x86_414526572c661b572b2793759bbb667fc493e9b0.bat

Should be identical with mine.

That file is for a 32bit file. Any chance you have one for a 64bit one? All of the ones that I am getting this error on 64bit.

Thanks

I am unable to open that zip file to compare the batch file to the one that I have. I traced down the one from my workstation to the ns server and see that it re-downloaded yesterday, but if you could post the batch file, I can do a file compare and see if they are the same!

Thanks!

Here you go, direct link where the file is coming from:

http://www.solutionsam.com/imports/7_1/patch/windows/scripts/windows8.1-kb2962183-x64_5ae3f99425b62fd9d13e27c6a3eb6ebcef7a7073.bat

Thanks Alex, I did a file compare with this and the one that I have on my NS server. They are a perfect match. I am pretty sure that this part of the puzzle is working correctly. Also I have about 1/2 of the windows 8.1 workstations that I manage already updated, however the other half have about 13 of these updates that still need to be installed. Thoughts?

Please make sure .bat files on these clients are identical to .bat files on NS. Sounds very strange to have only half of the environment updated. Is there a pattern, I mean only 64-bit systems are failing or something of that nature?

Here is full list of .bat files for MSWU-1006/1007 (zipped). Clients must have identical .bat files downloaded along with similarly named kbxxxxxx .cab files. Would you please check at least one client that is failing for these .bat files` presence? I apologize for such long troubleshooting process.

Attachment(s)

MSWU-1006and1007.zip   48 KB 1 version

It checks out on the client workstation as well (see first screen shot). The files match. Also here is a screen shot of a lab full of workstations that need patches installed. Notice that some of them need 18 updates while others need 31. The ones that need 31 updates are the ones that are not getting these updates to install, while the others already have it installed (second screen shot). They are all 64bit Windows 8.1 update 2. For some reason this rolled out correctly to about 1/2 of the workstations while failed on others....

No problem. I did check the files that are not updating, I only have about 13 that have failed. I went through and check the ones that I have against all the ones you had in the zip file. Each one shows a perfect match with your files and the ones on a problem desktop that I have. I guess the next step is to enable logging and see if I can try to get an error code as why it is failing when it tries to install?

Would you please try to update one machine manually? I wonder if there is any error messages thrown by windows itself.

Alex - Here is a zip file of each of the error log files of the 20 or so apps that I am trying to update. Doesn't really point to much of what the problem could be. Any ideas?

Thanks

Brad

Attachment(s)

MSI5684e.zip   271 KB 1 version

All of the updates are failing with 1603 error code. Do you get any graphical message when installing manually? Are these verbose logs, looks like some useful info is missing from them?

http://technet.microsoft.com/en-us/library/cc759262(v=ws.10).aspx

Nope no GUI message when installing. It blows right though the installer and no messages. Thus I had to enable all the logging options in order to get something to show me what the problem is. A 1603 error is a generic failure and could be just about anything....

Correct. Since we download update files directly from MS servers this looks like an environment issue. Might be .NET 4.5 or something else.