Patch Management Solution

 View Only

  • 1.  Rule for revised MS14-066 is incorrect?

    Posted Nov 25, 2014 07:49 AM

    Hello,

    on all SMA (Altiris 7.1 SP2 MP1 ru 5.) we can see that KB2992611 is installing but every day even if installation finished successfully. Compliance report is saying only 8 % has this patch installed.  

    We can see this problem on Windows 7 32 and 64 bit.

    Can you please check it?

     



  • 2.  RE: Rule for revised MS14-066 is incorrect?

    Posted Nov 25, 2014 09:04 AM

    Hi

    When was your last PMIMport run?
    I think I've seen the same, but after running PMImport again it was fixed.

     

    Regards



  • 3.  RE: Rule for revised MS14-066 is incorrect?

    Posted Nov 25, 2014 09:31 AM

    Hi,

    last run was 21.11 so we have latest version.



  • 4.  RE: Rule for revised MS14-066 is incorrect?

    Posted Nov 26, 2014 03:30 AM

    With or without the option to "automatically revise software update policies"



  • 5.  RE: Rule for revised MS14-066 is incorrect?

    Posted Nov 26, 2014 04:28 AM

    With the option revise sw update, incremental import, disable superseded sw and delete excluded data.



  • 6.  RE: Rule for revised MS14-066 is incorrect?

    Posted Nov 26, 2014 06:17 AM

    Customer reported problem that KB2992611 is installed according Altiris inventory but in fact it is not installed. I have checked installlog.csv, WindowsUpdate.log and query Wmic /output:c:\temp\patches.txt qfe. In the logs there is not any info mentioned about installation of Windows6.1-KB2992611-x86.msu.

    With Windows6.1-KB2992611-x64.msu we still can see installation running every day.

    Can you please check it? If you need more info / logs just let me know

    Thank you



  • 7.  RE: Rule for revised MS14-066 is incorrect?

    Posted Nov 26, 2014 06:09 PM

    I checked one file on Windows 7 64 bit machine and file has these details

    Lsasrv.dll - 6.1.7601.22843

    This version is from MS14-068 or 74 which were installed at the same time as MS14-066. Within MS14-066 version of the file is 22814. Patch assesment should detect version >22814 and mark KB2992611 as installed

    Some of customer's PC has version 18637 and these PC reported patch as installed and not trying to install patch again

    So I think the problem is in 22xxx - LDR on Win 7 64 bit

     

    On Win 7 32 bit I have checked one machine and Lsasrv.dll has version 6.1.7601.18637. This is from MS14-068 which was installed. Maybe rule for KB2992611 is not correct for 32 bit Win 7?