Patch Management: Start "Software Update Cycle" with MSDP
Created: 07 Feb 2011 | 4 comments
With Patch Management Soltuion 7 on the NS should also come a built-in Task to start the "Software Update Cycle" on an Endpoint or there should be the opportunity to create a NS task using the AexPatchUtil.exe to execute the “Software Update Cycle” on a computer. It should be possible to use the task within a Managed Software Delivery Policy (together with other task and software resources.) A use case for this would be a Managed Software Delivery Policy with the following tasks and packages:
Update Server MSDP
- Task: Prepare computer for Maintenance (ex. stop service, stop database, move cluster ressources)
- Package: Install Service Pack 3 for Windows 2008 server
- Task: Restart
- Package: Install Symantec Endpoint Security Version 12
- Task: Restart
- Task: Install applicable Security Patches via Altiris PM
- Task: Restart
- Task: Bring computer back to production state (start services, start database, bring cluster services back)
BTW: It's not possible to use AexPatchUtil.exe because of the immediate response behaviour.
Comments
immediate response for Patch Mgm execution in Manag Softw. Deliv
I have no Idea for an alternative Design without Packing the known Hotfixes in new software resources. We Use Patch Mgm only for Clients. If you install new Software in Policy, you may need additional an Patch Management Inventory (AeXPatchUtil.exe" /i), a Patch Mgm Filter cycle on NS-Server, an Configuration Request of the Altiris Client, that the Destination Machine know whitch Patches now are needed.
Florian Uebelacker / Alte-Leipziger Lebensversicherung a.G / Oberursel (Taunus)
We already tried to use the
We already tried to use the AexPatchUtil.exe /Xa command but unfortunatelly this command is not designed very well. As soon as you execute the command (within a task or manually) you will get a success message, also if the patches are still installing or if a patch installation failed.
start /WAIT ?
use the
~Pascal @ Bechtle~ Do you speak French? Et utilisez Altiris: venez nous rejoindre sur le GUASF&l
Final Solution
The final solution was a script which starts the AexPatchUtil.exe /Xa command and checks (in a loop) the Agent logfile for a success message from Software Update. There is no value, registry key or anything else available to get this information.
Would you like to reply?
Login or Register to post your comment.