Patch
Timaroo
|
October 19th, 2009
If you have an existing Notification Server with Patch Management that has already downloaded all or most MS Bulletins, there is no need to re-download them every time you install Patch Management on a new server. You can copy the bulletins from one server to another and Patch Management is clever enough to detect if the bulletins are already available in "C:\Program Files\Altiris\Patch Management\Packages\Updates", and stage them as normal.
How to do it:
You need an existing Patch Management installation that has already downloaded the MS Bulletins that you want. Copy the "Updates" folder, which contains the MS Bulletins, from "C:\Program Files\Altiris\Patch Management\Packages\", either to DVD or an external HDD.
The new Notification Server must have an internet connection.
On the new Notification Server:
Install and configure Patch Management Solution as normal
Rollout the Software Update Agent
Download the Qchain and PM Import...
Altiris Client Management Suite, Endpoint Management and Virtualization, Configuring, Patch, Tip/How to
0 comments
MattS
|
October 7th, 2009
While attempting to use LiveUpdate to patch a Solaris 8 client to 6.5.4 (first time updating a Solaris client using LU), I realized that the Solaris operating systems were not listed as possible clients in the LiveUpdate console menu. Immediately i thought that this was because i didn't have the Solaris LiveUpdate patches extracted to the Live Update URL. This was not the case, the files were already there and extracted. So what gives?
After doing some searching I found that the LiveUpdate GUI only shows client operating systems as options that are in the /usr/openv/netbackup/client/ directory on the master server. To resolve this:
From your client installation media, copy (Solaris in my case): NB_65_CLIENTS3_20070723/NBClients/anb/Clients/usr/openv/netbackup/client/Solaris to this location on your master server: /usr/openv/netbackup/client/
Once copied, simply close the NB Admin Console and open it backup. I did not have to restart any...
0 comments
dtruex
|
September 12th, 2009
I am curious if anyone else has a problem removing quarantined files.
I seems in Antivirus 11.x for the Mac OS X one can remove only one file at a time.
Is there a work-around to batch remove the whole lot of the files at once?
Thanks
11.x, Security, Basics, Configuring, Mac OS, Patch, Endpoint Protection (AntiVirus), Troubleshooting
2 comments
Kinetic
|
August 10th, 2009
This tool is an add on to an article I wrote previously. Every time I setup a patch task that went corporate wide, I had to notify all managers of each department ahead of time. Not only that, but I had to notify them of exactly which machines were getting hit and when. First few times, no problem. But it soon became a chore to go into 6 different consoles, to pull up phase collections, and then to copy and paste each phase, on each server to one spreadsheet.
That time sink started adding up. I needed a way to click a script and have an Excel spreadsheet, separated by sheets, labeled by day that the phase is to be deployed. This is the result.
In the script, replace the following with your server list:
svrName(0) = "servername1"
svrName(1) = "servername2"
Also, replace the following lines with the guids of your phase collections:
phaseGuid(0) = "6bff8864-10ef-492f-8201-f139fbfedf38"
phaseGuid(1) = "589f7865-454d-4a9a-bd59-...
Basics, Altiris Notification Server, Endpoint Management and Virtualization, Downloads, Patch, Tip/How to
0 comments
Kinetic
|
July 20th, 2009
When deploying software or software bulletins corporate wide, it is best practice to divide the pushes over several days. Creating static collections for every push is time consuming and inefficient. This document walks through the process of creating dynamic collections that can be reused, decreasing the amount of time required to plan and setup a corporate wide push.
1. Assume the following schedule over 10 days:
Phase 1 - 20 machines per NS
Phase 2 - 100 machines per NS
Phase 3 - 300 machines per NS
Phase 4 - 400 machines per NS
Phase 5 - 600 machines per NS
Phase 6 - 800 machines per NS
Phase 7 - 800 machines per NS
Phase 8 - 800 machines per NS
Phase 9 - 1000 machines per NS
Phase 10 - 1000 machines per NS
2. Create a collection called "Phase 1". This is the test collection. This can be static if there are specific test machines that will be used. Otherwise, it can be dynamic using the following query:
select top 20 Guid from vResource where Guid in
(select [Guid]...
Basics, Altiris Notification Server, Best Practice, Endpoint Management and Virtualization, Patch, Performance, Tip/How to
9 comments
Dor
|
July 20th, 2009
I've recently started created MSP patch upgrades for my main installer.
Problem is that I can't seem to get patches to apply to an install that has already received one patch upgrade.
IE:
Assume you have installed the full MSI v9.10.1
A major upgrade installer, v9.11.1 has been created and a MSP has been created as well that will upgrade 9.10.1 to 9.11.1
Applying this MSP upgrades you to 9.11.1 successfully.
Another major upgrade installer, v9.12.1 is created, along with an MSP that is designed to upgrade the previous two installers, 9.10.1 and 9.11.1
Applying this patch to the patched install on your system, results in the MSP running, appearing to finish, but not updating anything on the system.
Oddly, if you have a clean install of 9.10.1 you can run the 9.12.1 patch and upgrade correctly.
It's just this patching-a-patched-install that is being uncooperative.
Any good reading someone can point me towards, or even better, some tips as to what I might have missed?
15 comments
DomAspect
|
July 1st, 2009
Hi,
I'm trying to create a patch by running UpdateSync from the latest project against the original .msi and then follow Wise Installer help files on creating patches. I have added an extra file and updated an executable, but when the patch is ran the files in the target directory aren't being updated as required. The patch would seem to have completed as it is available in add/remove programs for roll back. I can't see anything that suggest why my directory hasn't been updated by the patch, but then again this is first time I've tried to do this.
I've ran the patch with verbose log output, I've attached it to this post. Hopefully someone will see where I'm going wrong
Many thanks
3 comments
chrisss72
|
June 2nd, 2009
simple fix needed. How do I update the file definitions on clients manually. I have symantec 10.1.5.5000 installed.
Thanks
0 comments
Screenbert
|
May 28th, 2009
Test this on a development box before using to updates your paths and make sure you get the desired results. Always have a good backup ready. I've never had any problems with it when the UNC and URL paths are correctly configured, but your mileage could vary.
This tool must be run on the NS server.
This tool loads all the packages for every patch inside of Patch Management and displays their current settings. This tool is designed for those that use HTTP instead of UNC paths for patch delivery. For instance you might use Cisco content engines or have another reason. It changes the Package type from UNC to URL and updates the package location based on the UNC Path and URL Path you have entered.
It usually takes about 15-30 seconds to load when first opened.
Any that are highlighted in red are misconfigured according to the UNC/URL path combination you have set. No changes are made until you click repair all. Updating the paths and reloading can take several minutes depending on the...
Altiris Client Management Suite, Altiris Notification Server, Endpoint Management and Virtualization, Configuring, Patch
2 comments
dfrancis
|
May 21st, 2009
Anyone familiar with Inventory Solution for Windows and 64-bit operating systems should know that Inventory Solution 6.1 SP2 does not pull 64-bit programs into the Inv AeX OS Add Remove Programs table. Altiris has published a workaround for this in AKB 39284.
However, this workaround does not account for any program names with apostrophe's in their names which causes the generated XML to be faulty and not import correctly. In our environment, this information is bundled in the same NSE as a majority of our data from the Software Inventory task, so any system with an apostrophe in its program name causes us to never receive any updates to that table or the Inv AeX SW Audit Software table. Any tasks (targeted software delivery jobs or otherwise) that are dependent on either of these two tables for software installs/uninstalls may yield undesirable results.
When doing some troubleshooting, I ran across this in the NS's log:
Log File Name: F:\Program Files\Altiris\Notification Server\...
Altiris Client Management Suite, Altiris Server Management Suite, Endpoint Management and Virtualization, Compatibility, Error messages, Windows, Patch
3 comments
Ogre
|
May 1st, 2009
We are currently running 2 replicated SEPM MR3 (11.0.3001.2224) servers. I notice that LiveUpdate downloaded new MR4 (11.0.4000.0) client packages automatically on Jan 20th 2009, but is has not downloaded MR4 MP1 or MR4 MP1a client packages automatically.
Is this behaviour by design? Will older SEPM servers only download full Maintenance Release versions of newer client install packages, and not Maintenance Patch versions?
I know the process for manually importing a newer MP client install package, just interested if this behaviour is by design.
6 comments
Kimberley
|
April 29th, 2009
Your question may already be answered... Here are this month's most-accessed Technotes from Tech Support. For more info, try checking out the Knowledge Base.
Storage Foundation
Late Breaking News (LBN) - Latest additions to the Release Notes for Veritas Storage Foundation and High Availability 5.0, 5.0 Maintenance Pack 1 (MP1), and Maintenance Pack 3 (MP3) for Solaris (SPARC)
Late Breaking News (LBN) - Updates to the Release Notes for Veritas Storage Foundation (tm) and High Availability Solutions 5.0 to 5.0 Maintenance Pack 3 (MP3) on Linux and cross-references to product documentation
Veritas Storage Foundation (tm) and High Availability Solutions 4.1 to 4.1 Maintenance Pack 4 for Linux - Late Breaking News and cross-references to product documentation
Hardware Compatibility List for Veritas Storage Foundation (tm) and High Availability Solutions 5.0 Maintenance Pack 1, 5.0 Maintenance Pack 2 (including SFCFS for Oracle RAC for RHEL, SLES and OEL) and 5.0 Maintenance Pack 3...
Storage Management, Tech Support, Error messages, Features, Installing, Patch, Tip/How to, Storage Foundation
0 comments
Mathiesen
|
April 29th, 2009
We have a problem with Live update for Backup Exec 12.5.
I can download the updates but I can't install the updates.
When Live Update try to install I get the errors LU1812 and LU1806 and none of the updates will be installed.
I have tried to reinstall Live Update but the errors still come.
Do any of you have an idea to which place I need to look next?
Best regards
Thomas
1 comments
efif
|
April 25th, 2009
4/25/2009 21:36 Infostealer Pending Analysis jtmbl.piy File C:\WINDOWS\
4/25/2009 21:36 Infostealer Cleaned by deletion jtmbl.piy File C:\WINDOWS\
4/25/2009 21:35 Trojan Horse Quarantined setup_u.exe File C:\WINDOWS\system32\
4/23/2009 6:16 Tracking Cookie Deleted Unavailable Trackware Unavailable
4/22/2009 15:34 Tracking Cookie Deleted Unavailable Trackware Unavailable
4/22/2009 14:14 Trojan Horse Quarantined M9[1].exe File c:\Documents and Settings\myname\Local Settings\Temporary Internet Files\Content.IE5\OYBHGCB5\
4/22/2009 12:04 Tracking Cookie Deleted Unavailable Trackware Unavailable
This is the log it cleaned the Trojan but the infostealer keeps on recreating itself in the quarantined folder and doesn't stop please help
11.x, Emerging Threats, Security, Tech Support, Vulnerabilities & Exploits, Windows, Patch, Recovering, Endpoint Protection (AntiVirus)
8 comments
Karthikeyan Sundaram
|
April 24th, 2009
Hello Guys,
I think you would have looked at my Article "Low Disk Space" and some of you may intersted in enabling VSS as a Snapshot Provider.
https://www-secure.symantec.com/connect/articles/l...
But you may lazy and worry to to do this for muliple no of clients, here is the Script to Enable this in your environment for multiple no of clients.
Also Netbackup client service should be restarted once you enable VSS; this also covered in Script ZIP.
Zip file Contains:
VSS.vbs - Script to enable VSS Provider(Place Client names in C:\Sc\Systems.txt file)
Service_Stop.vbs - Script to stop the Netbackup Client Service in Clients(Place Client names in C:\Sc\Systems2.txt file)
Service_Start.vbs - Script to start the Netbackup Client Service in Clients(Place Client names in C:\Sc\Systems2.txt file)
Hope it will help you much.
Thanks,
karthikeyan Sundaram.
Agents, Backup and Archiving, Configuring, Features, Installing, News, Patch, Performance, Tip/How to, Upgrade, NetBackup
0 comments
Jeph
|
April 16th, 2009
I was installed netbackup 6.5 in Solaris10 X64. I used script to crontab.
bparchive run well on OS.
But, I run command bparchive on OS. It is not running bpdbjobs.
How can i check the log?
And This case was Same issue?
1 comments
GertjanA
|
March 11th, 2009
Hello fellow EV-admins, users, supporters,
My name is Gertjan. I am Dutch. (it ain't much if it ain't dutch!)
I am working for a contracting firm called T2. I've been placed at one of the largest EV implementations in the Netherlands. Due to the nature of the environment (as pointed out by someone..) I will not post too much about it.
It is big. Over 95000 mailboxes, over 75000 active archives
Besides managing Enterprise Vault, I also manage a little the Exchange environment.
Current version is EV2007SP2, planning to go to 8.0SP2 (august?)
I cannot promise to post regularly, but will try to do so.
I'm getting used to the new forum-layout, but this Blog is definitely an addition to it.
I'm an MCSE+Messaging2003, MCTS, Symantec Certified Specialist EV2007 for Exchange Administrator (yep, proud of it.)
oh, forgot... Running the EV-servers as VM's... The index and storagedisks are SAN based. (EVA)
Basics, Backup and Archiving, Beta, Best Practice, Certification, Compatibility, HP-UX, Configuring, Documentation, Downloads, Error messages, Evaluating, MS Exchange, Features, Installing, VMware, Licensing, Windows, Patch, Performance, Reporting, Tip/How to, Enterprise Vault, Upgrade, Virtualization
3 comments
oliversl
|
March 2nd, 2009
Hi all,
recently I was running SEPM MR3, then downloaded MR4 MP1 and upgraded. It was my fault and SEPM stopped running.
I needed to run MR4 first! bump!
Now, we upgraded our licence and I had no access to MR3 installation CD and I was in a hurry, so this is what I have done
to recover the server
1. you will need a recent backup of SEPM
2. Follow this instructions:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007082112135948
2.1 I have done this:
Install SEPM, use any connect and DB password(because you have a backup of the DB).
Login in the console a do the JKS step
Restart SEPM
Stop SEPM
Now do the DB Restore, you will end up with a MR3 DB in a MR4 Installation
3. Don start SEPM yet, just run the MR4 setup again
4. Choose Repair and at the end the DB Upgrade tool will appear, this will update your MR3 DB to MR4
5. Run the Management Server Configuration Wizard tool
6. you're done!
I hope Symantec can warn you that a previous version is required. I say a warning in...
4 comments