Deployment Rule Set - Allow file://

I have a DVD that uses Java to look up parts. Java content is blocked because the content is not signed by the vendor. When it is blocked, it lists the location as "file://"
I have tried to add the following to the DeploymentRuleSet with no success:
<rule>
<id location="file://" />
<action permission="run" />
</rule>
It no longer tells me that the content is blocked, but it also doesn't run the content. It just sits there.
I have even added file:/ to the exceptions list and it still doesn't work.
I've had to work around this issue by installing Java 6 on systems that need to access this DVD.
Has anyone been successful in allowing "file://" to run through a rule in their DeploymentRuleSet?

Hello,
Can you try something like
file://*
file://c/*
etc.
-Roger

Similar Messages

Allowing jnlp via deployment rule set

Hello,
In our network, we use a deployment rule set to only allow applets that we deem necessary, and all others are blocked. This has been working fine. However recently I've been asked to add a website to the allowed list. This website downloads a jnlp file, then launches the jnlp locally, and is blocked every time. Now I'm not that well versed in java applets. But I've added the website address that this applet calls too, and have had no luck with this running. Everything I've tried has not worked.
This is a snippet of the ruleset.xml
<rule>
<id location="http://elm.elluminate.com:80/" /> 
<action permission="run" />
</rule>
The java console has not been helpful, as the application is blocked before java even starts...after the jnlp verifies, it blocks the application due to the ruleset. How can i set this ruleset up so that this jnlp is allowed to run?

Hello,
To allow a local jnlp to run without any prompts using Deployment Rule Sets, you can use a rule to allow all the applets signed with a specific certitificate:
<rule>
        <id>
             <certificate hash="794F53C746E2AA77D84B843BE942CAB4309F258FD946D62A6C4CCEAB8E1DB2C6" />
        </id>
        <action permission="run" />
</rule>
You can get your certificate hash in SHA-256 from the signed jar file following this doc:
http://docs.oracle.com/javase/8/docs/technotes/guides/jweb/security/deployment_rules.html#gethash

Deployment Rule Set Centrally Managed location of .jar file?

Hello,
We are currently looking at implementing the Deployment Rule Set in our company and I was wondering if there is a way to centrally manage the Deployment Rule Set?
Having to keep up with deploying the jar file for every change and expiring certificates isn't ideal
Thanks!

And your OS doesn't have a file search feature, which might have given you the answer faster than waiting for a response on these columns?
db

Deployment Rule Sets do not properly launch the latest available version from the JRE6 family when the jpi-version is specified by the RIA

Issue Summary
In Java 1.7 Update 71, Java 1.7 Update 72 and Java 1.8 Update 25 Deployment Rule Sets do not properly launch the latest available version from the JRE6 family when the jpi-version is specified by the RIA. We've noticed this with Oracle Forms and Reports 11g where we have forms that specify Java 1.6 Update 20. We used to be able to specify Java 1.6 Update 26 in our Ruleset, but now the only version a that works in our ruleset is Java 1.6 Update 20 which is the same version requested by the JPI-Version attribute of the jar. The long term solution would be to upgrade Oracle Forms and Reports, however this isn't currently in the cards.
RuleSet.xml Test
Ruleset.xml
1
2
3
4
5
6
7
8
9
10
11
<ruleset version="1.0+">
<rule>
   <id location="*.javatester.org" />
   <action permission="run" version="1.6*" />
</rule>
<ruleset version="1.0+">
<rule>
   <id location="*.internaldomain.name" />
   <action permission="run" version="1.6*" />
</rule>
</ruleset>
Test 1 (Control)
Installed Java Versions:
– 1.7 Update 51 b13 (both x86 and x64 however x86 is invoked)
– 1.6 Update 26 b03 (both x86 and x64 however x86 is invoked)
Deployment Ruleset works as expected for both URLs
Test 2
Installed Java Versions:
– 1.7 Update 72 (both x86 and x64 however x86 is invoked)
– 1.6 Update 26 b03 (both x86 and x64 however x86 is invoked)
The RuleSet works for JavaTester.org however on internaldomain.name we get the following error:
With the trace logging turned on, I suspected the version attribute supplied by the RIA. I was able to trick Java by adding the following to my system deployment.properties file:
deployment.javaws.jre.0.product=1.6.0_20
deployment.javaws.jre.0.path=C\:\\Program Files (x86)\\Java\\jre6\\bin\\javaw.exe
deployment.javaws.jre.0.enabled=true
Because the RIA requests 1.6.0_20 it matches 1.6* from the deployment ruleset sooner than 1.6.0_26. However, if 1.6.0_20 is not available 1.6.0_26 should match according to the Deployment Rule Set documentation:
http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/security/deployment_rules.html
The version of the JRE that is used is determined by the following order of precedence:
1. The current version of the JRE is used if it is available and matches both the version attribute and the version requested by the RIA.
2. The latest available version of the JRE is used if it matches both the version attribute and the version requested by the RIA.
3. The current version of the JRE is used if it is available and matches the version attribute.
4. The latest available version of the JRE is used if it matches the version attribute.
If no version is available that meets the criteria, then the RIA is blocked, and a message is shown to the user. To provide a custom message, include the message element.
As a result:
If Java 1.6.0_20 is listed in the version requested by the RIA and 1.6.0_20 is listed in the deployment.properties file, #1 matches.
If Java 1.6.0_20 is listed in the version requested by the RIA, but 1.6.0_20 is NOT listed in the deployment.properties file the #1 SHOULD match, but doesn’t. It used to match up-to and including JRE 1.7 Update 51 however the ruleset appears to no longer match in subsequent versions.
#2 should never match with our current Deployment Ruleset. It would match if we specified 1.7* as a version in the Ruleset.xml.
#3 used to be broken as well after JRE 1.7 Update 51 however this bug has been marked as fixed. See: http://bugs.java.com/view_bug.do?bug_id=8032781
I have reproduced this issue with Java 1.7 Update 71, Java 1.7 Update 72, and Java 1.8 Update 25 when one of these versions are installed with Java 1.6 Update 26.

I can't seem to edit this post anymore, for some odd reason.
So here goes;
I found this post in NVIDIA's knowledge base;
When installing an after-market graphics card into a certified Windows 8 PC with UEFI enabled, the s...
The interesting parts in this post are as follows;
When an after-market graphics card is installed into a motherboard with UEFI enabled in the system BIOS, or if the system is a certified Windows 8 PC with Secure Boot enabled, the system may not boot.
UEFI is a new system BIOS feature that is provided on most new motherboards. A UEFI system BIOS is required in order for the Windows 8 Secure Boot feature to work. Secure boot is enabled by default on certified Windows 8 PCs.
In order to get the PC to boot with a graphics card that does not contain UEFI firmware, the end-user must first disable the secure boot feature in the system's SBIOS before installing the graphics card.
Note: Some system SBIOS's incorporate a feature called compatibility boot. These systems will detect a non-UEFI-enabled firmware VBIOS and allow the user to disable secure boot and then proceed with a compatibility boot. If the system contains a system SBIOS the supports compatibility boot, the user will need to disable secure boot when asked during boot process
This leads me to believe that the BIOS update that wrecked my setup was 9SKT58A/9SJT58A, which only contains one change;
"Adds support for updating BIOS from a WIN7 BIOS to a WIN8 BIOS".
I've just ordered a cheap UEFI-compatible GT640 from Gainward, so I hope I'll be able to try that out this weekend.

Deployment Rule Set broken with Java 7u55

Hello!
I'm using Deployment Rule Set in my company environment, its signed by code signing certificate that is given out by internal CA. After I upgraded to Java 7u55, the Deployment Rule Set does not recognize older statically installed Java version.
Versions I have:
7u45 - install directory: C:\Program Files\Java\jre1.7.0_45
7u51 - install directory: C:\Program Files\Java\jre1.7.0_51
7u55 - install directory: C:\Program Files\Java\jre1.7.0_55 or C:\Program Files\Java\jre7\ - neither does not work
When I go to site described in Ruleset and that has to use Java 7u45, then I receive an message "Deployment Rule Set required Java version 1.7.0_45 not available. In the same way it doesn't recognize 1.7.0.51 or even Java version 6.
When I uninstall Java 7u55, everthing works fine again.
My ruleset looks like this:
<ruleset version="1.0+">
     <rule>
          <id location="first.site.com" />
          <action permission="run" version="1.7.0_45" />
     </rule>
     <rule>
          <id location="second.site.com" />
          <action permission="run" version="1.7.0_51" />
     </rule>
     <rule
          <id />
          <action permission="default" />
     </rule>
</ruleset>
Anyone knows what's wrong or is it a bug?

costlow - I disagree. If I'm using IE, then I only need the internal certficate used to sign the jar to be also insalled on the machine in question in the windows CA Certs store. If the cert was the issue, why does it work with 7u51. If it was a bad cert, it should fail with every version. Plus, I think the pop up has a different error message if it has a cert issue.
I'm having the exact same issue as the OP described and it all started with 7u55. Here's what I've found:
- With 7u55 or 7u60 installed, the error will come up rergardless of what prior version is being requested.
- If 7u51 is the latest installed, it works
- If 8u05 is installed with 7u55 and/or 7u60, it works
- If I install the 7u60 EA b15, it works
Something in the final release is being added that blocks this functionality, but for some odd reason only in the 7 family starting with 7u55.
Any insight you could give would be very helpful. In the meantime, I am deploying 8u05 to cover this up, but it does pose issues for some apps that don't work with the new 8 family plugin.

7u45: MacOS X: Deployment Rule Set not found?

Per the Deployment Rule Set packaging instructions:
http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/deployment_rules.html#package
"Install the DeploymentRuleSet.jar file on your users' systems in the following directories:
On Windows platforms, install the file in the <Windows-directory>\Sun\Java\Deployment directory, for example, c:\Windows\Sun\Java\Deployment.
On Mac OS X and UNIX platforms, install the file in the /etc/.java/deployment directory.
To view the active rule set, see the Security section of Java Control Panel."
I am able to use and view the rule set on Windows and Linux platforms, but the deployment rule set is not seen under MacOS X (10.9 Mavericks).
I placed it in:
/etc/.java/deployment/DeploymentRuleSet.jar and yes, it is properly signed, in the correct format, etc. Identical file works fine under Windows and Linux.
Anyone else have this issue?

Hurray!! I finally found out how to get the JCP to display the DeployementRuleSet.jar file.
The path in the documentation (/etc/.java/deployment) is wrong (at least on Mac OSX 10.7.5)!.
I went through the decompilation of the ControlPanel source code, and found out that the expected path for the jar file is
/Library/Application Support/Oracle/Java/Deployment
Note:The Deployment directory has to be created

Getting Deployment Rule Sets to work

So, I'm struggling trying to get Java deployment rule sets working as follows:
Here is my simple ruleset.xml:
<ruleset version="1.0+">
<rule>
<id location="javatester.org" />
<action permission="run" version="1.6.0_35" />
</rule>
</ruleset>
I have gotten this same ruleset working using 3 different older versions of jre7 (7u45, 7u35, 7u9) where javatester.org website will display the specified version, even when a newer version is present. However, this seems to break when I try to specify a jre6 version (tried both 6u35 & 6u27).
For example, when I try 6u35, the javatester.org website displays
Error. Click for details
When I click, a blank pop up windows briefly pops up then disappears, with a title bar "Application Error". I have made the Java console visible for testing purposes, and both the 1.7.0_51 & 1.6.0_35 consoles pop up, but I can't find anywhere why this might not work. I am assuming it's not a certificate issue, as I imported my self-signed certificate into the Signer CA store and can see it in both the Java 7u51 control panel, and the Java 6u35 control panel.
Any thoughts? Anyone else get this working?

Hello,
can you show me your "ruleset.xml"?
I had similar problems when I had an error in there (invalid XML). You have to be extra careful that it is valid UTF-8 too. I already got a problem because of an invalid umlaut,
Regards
Markus

Error while uploading standard text files for the Global rule set

Hi all,
As part of Post Installation Activities we have uploaded standard text files for business process, functions, risks and rule set obtained with the installable Software.
While uploading the text files we have uploaded the Basis Functions Authorizations first and then R/3 text files.
When we checked no actions are appearing in the rule architect under respective functions except for the BASIS Module.
Is this because we have uploaded the Basis functions before the R/3 text files?If yes, how to replace the Basis with the R/3 ones.
We tried to replace the Basis function authorizations by re-uploading the R/3 text files again but we got the below error message u201CORA-00001:unique constraint (SAPSR3DB.SYS_C004479) violatedu201D
Can somebody please help in this regard how to get the standard rule set in our system?
Thanks and Best Regards,
Srihari.K

Hi Sri,
you should upload first the static text files and the authorization objects first and then the GRC standard rule set files following the instructions of the SAP Configuration Guide available in Service Market Place under http://service.sap.com/instguides .
The GRC standard rule set contains files named Basis_functions_action.txt and R3_function_action.txt. The first one contains ONLY function definitions in terms of transcation codes for basis only, whereas the second one contains functions definition for basis AND ERP modules. The same holds for the *_function_permission.txt files. There are also function definition files for other SAP solutions such as APO, CRM, HR etc.
You can open a customer message and request a deletion script for the rule sets files you have uploaded already. After their application of this script all rule set data will be deleted from your database. If you have uploaded static text and authorization files correctly, you can then upload the GRC standard rule set files as needed again.
best regards,
Frank

IView Deployment - how to set maximum file size?

Hello,
we have a problem while deploying iViews and uploading files to enterprise portal . The maximum upload file size seems to be limited to 1 MB. I have to deploy an iView greater than 1 MB. While deploying with netweaver developer studio I get following error message
in logfile of developer studio:
[19.10.04 / 13:33] #ERROR LEVEL#
com.sap.portal.developmentTools.ideSpecific.eclipse.wizards.sapmakepar.SAPMPWizard$1 > No Information
java.io.IOException: Error writing to server
The direct upload of *.par with EP Component Manager also does not work. After clicking upload-button I get a standard http error page "aktion abgebrochen".
Also on upload of any other document, for example personal documents which are bigger than 1 MB, I get this error.
If I reduce file size of portal archiv lower than 1MB I can deploy and upload the iView.
How canI set maximum upload file size in Enterprise Portal?
Our Version: 6.0.2.4.7.Enterprise_Portal_Service_Pack_2
Thanks for helping me,
Nicole

You need to use a precision argument:
String foo = "a long name to print";
System.out.printf("foo say: %.8s", foo); // 8 maxhttp://java.sun.com/j2se/1.5.0/docs/api/java/util/Formatter.html#syntax

Reading rule sets from an XML file

Hi all,
How can I read rule sets from an XML file? I have been given some rules in XML
format and using those I have to query some content. I am using WLP4.0
Also how can I code rules in java?
Thanks in advance.

You can have the following classes:
Players class deriving from Vector (or containing a vector), and then
Player class with attribute 'name'.
class Players
           Vector myVector = new Vector();
            void addPlayer(Player p)
                  myVector.add(p);
            Player getPlayer(int index)
                  myVector.get(index);
class Player
         private String myName = null;
         Player(String name)
                this.myName = name;
         String getName()
                return myName;
}Then while handling the SAX events you can do the following:
class MySAXHandler implements ContentHandler (or whatever the itnerface is)
             public void startElement(String name,....)
                      Players p = null;
                      if(name.equals("Players"))
                             p = new Players();
                     else if (name.equals("Name"))
                            p.add(new Player(value));
}HTH,
Kalyan.

Trying to comprehend the use of Automatic Deployment Rules

I am having a hard time trying to conceptualize ADRs. I would appreciate it if someone can let me know if I am on the right track here.
The way I see it is I can set up an ADR for every 2nd Tuesday of every month (Patch Tuesday) to run to build my initial deployment to a pilot test group. Then I have to build subsequent deployments after that since ADRs can only build one deployment (the
one for my pilot test group).
My question is, should an ADR be used only for a pilot test deployment and not a production deployment?
Thank you very much everyone, I appreciate your help

I thought during the wizard it allows you to specify which type of patches you want to deploy such as Security, etc?
You select the update filter and criteria in the ADR wizard:
http://blogs.technet.com/b/configmgrdogs/archive/2012/05/08/configmgr-2012-automatic-deployment-rules.aspx
An example scenario:
http://technet.microsoft.com/en-us/library/jj134348.aspx#BKMK_Step2
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

[Solved] Windows Firewall rule that allows Windows Update

Can anyone kindly give me a Windows Firewall rule that allows Windows Update? Assume I'm running MMC's "Windows Firewall with Advanced Security" snap-in as Administrator. Note that a "solution" that takes down the outbound firewall is
not acceptable.
Thank You.
===== Solution =====
Suppose that, as the default, you've set the outbound firewall to block (see
To close the outbound firewall, below). In order for Windows Update to check whether an update is available and then to download the update files, you first need an outbound firewall
allow-rule that allows the Windows Update service to pass through the outbound firewall.
Prerequisite: Knowledge of the Microsoft Management Console (MMC) and its "Windows Firewall with Advanced Security" plug-in.
What you will do: You will use the "Windows Firewall with Advanced Security" MMC plug-in to create an outbound firewall rule that
allows '%SystemRoot%\System32\svchost.exe' (the generic service driver) to pass through the outbound firewall on behalf of 'wuauserv' (the name of the specific service that performs the update).
Warning: If you don't know what I'm writing about, get help.
Name: Allow Windows Update (...or any name you prefer - it doesn't matter)
Group:
Profile: Public
Enabled: Yes
Action: Allow
Program: %SystemRoot%\System32\svchost.exe
Local Address: Any
Remote Address: Any
Protocol: Any
Local Port: Any
Remote Port: Any
Allowed Computers: Any
Status: OK
Service: wuauserv
Rule Source: Local Setting
Interface Type: All interface types
Excepted Computers: None
Description:
To open the outbound firewall:
More accurate wording would be
Outbound connections are allowed unless explicitly blocked by a rule.
If you look at the standard rules you will find no block-rules. That means that nothing is blocked, everything is allowed, and the outbound firewall is wide open.
To close the outbound firewall:
More accurate wording would be
Outbound connections are blocked unless explicitly allowed by a rule.
If you look at the standard rules you will find only allow-rules that have been crafted to allow the vital Windows connections to pass through the outbound firewall. To an informed observer it's obvious that the firewall engineers crafted these
allow-rules so that users who closed the outbound firewall wouldn't have to write them. But the firewall engineers left out Windows Update.

Hi mark,
Thanks for sharing, it will help other users who have similar issue.
Regards

Disable "Allow files on this drive to have contents indexed in addition to file properties" for Mointpoints

Hey Guys,
I wandt to optimize all our SQL Servers and so I want to disable the "Allow files on this drive to have contents indexed in addition to file properties" option in the Volume Properties.
The SQL Server is installed under D:\SQLSERVER which is a normal folder.
For the root and sub directories d:\ the following solution works:
https://social.technet.microsoft.com/Forums/en-US/bf99c428-7fbc-4cd5-9a4a-0c6b69e906ab/disable-allow-files-on-this-drive-to-have-contents-indexed-in-addition-to-file-properties?forum=ITCG&prof=required
But we have Mountpoints for the Data and Log Files under D:\SQLUSRDATA and D:\SQLUSRLOG. When I use the NotContentIndexed Attribute on this direcotry there is no error message. But when I go to Properties of the Mountpoint folder under General >
Properties The "Allow files..." option is still activated.
Is there a solution to deactivate Indexing on Mointpoints via Powershell?

Your question has nothing to do with scripting.
I recommend that all SQLServer systems have a GP applied that sets the minimum requirements for the server. This would include disabling the indexing service which serves no purpose on a SQLServer based system. You should also disable all AV
scanning of SQLServer folders as this can create performance issues and may make SQLServer unstable. Many AV products will skip database files on purpose.
The indexer will not index SQLServer files unless you have altered its behavior so, mostly, what you are doing is unnecessary.
Post you issues in the SQLServer forum to get the latest requirements and settings for you implementation.
Again thisis not a scripting issue and it should not bemanaged via a script. It is a deployment issue and should bemanaged in that way. YOu can use PowerShell V4 and later DSC SDK to set a standard "Desired State" for you SQLServers.
Use of DSC with SQLServer should also be worked out with the SQLServer forum MVPs and others there.
¯\_(ツ)_/¯

Auto Deployment Rule download failed (0X87d20417) Failed to download the update from internet. Error = 16389

Hi there,
I have massive problems with Auto Deployment Rules.
I get the Error from above.
ruleengine.log says:
Failed to download the update from internet. Error = 16389 SMS_RULE_ENGINE 3/11/2015 11:41:57 AM 5608 (0x15E8)
Failed to download ContentID 16936340 for UpdateID 16953422. Error code = 16389 SMS_RULE_ENGINE 3/11/2015 11:41:57 AM 5608 (0x15E8)
Failed to download any update SMS_RULE_ENGINE 3/11/2015 11:41:58 AM 5608 (0x15E8)
Failed to download update contents. SMS_RULE_ENGINE 3/11/2015 11:41:58 AM 5608 (0x15E8)
No new update was added to the package. Package "00000116" would not be updated. SMS_RULE_ENGINE 3/11/2015 11:41:58 AM 5608 (0x15E8)
Failed to run the DownloadAction for the AutoDeployment. SMS_RULE_ENGINE 3/11/2015 11:41:58 AM 5608 (0x15E8)
STATMSG: ID=8706 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_RULE_ENGINE" SYS=NE-SCCM-02.services.internal SITE=000 PID=3392 TID=5608 GMTDATE=Mi Mrz 11 10:41:58.606 2015 ISTR0="SMS Rule Engine" ISTR1="Failed to download one or more content files" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_RULE_ENGINE 3/11/2015 11:41:58 AM 5608 (0x15E8)
CRuleHandler: Enforcing Actions for Rule 16777227 failed!
Failed to download the update from internet. Error = 16389 SMS_RULE_ENGINE 3/11/2015 11:51:03 AM 5608 (0x15E8)
Failed to download ContentID 16936340 for UpdateID 16953422. Error code = 16389 SMS_RULE_ENGINE 3/11/2015 11:51:03 AM 5608 (0x15E8)
CRuleHandler: Enforcing Actions for Rule 16777230 failed! SMS_RULE_ENGINE 3/11/2015 11:51:10 AM 5608 (0x15E8)
CRuleHandler: ResetRulesAndCleanUp() SMS_RULE_ENGINE 3/11/2015 11:51:10 AM 5608 (0x15E8)
Updated Failure Information for Rule: 16777226 SMS_RULE_ENGINE 3/11/2015 11:51:10 AM 5608 (0x15E8)
Updated Failure Information for Rule: 16777227 SMS_RULE_ENGINE 3/11/2015 11:51:10 AM 5608 (0x15E8)
Updated Failure Information for Rule: 16777230 SMS_RULE_ENGINE 3/11/2015 11:51:10 AM 5608 (0x15E8)
whereas in WSUSCTRL.log i get:
System.Net.WebException: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host~~ at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)~~ --- End of inner exception stack trace ---~~ at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)~~ at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)~~ at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream, Boolean probeRead)~~ --- End of inner exception stack trace ---~~ at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~ at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer()~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber)
System.Net.WebException: The request failed with HTTP status 503: Service Unavailable.~~ at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~ at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer()~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber) SMS_WSUS_CONTROL_MANAGER 3/11/2015 11:57:04 AM 6032 (0x1790)
Failed to set WSUS Local Configuration. Will retry configuration in 1 minutes SMS_WSUS_CONTROL_MANAGER 3/11/2015 11:57:04 AM 6032 (0x1790)
Attempting connection to local WSUS server SMS_WSUS_CONTROL_MANAGER 3/11/2015 11:57:04 AM 6032 (0x1790)
System.Net.WebException: The request failed with HTTP status 503: Service Unavailable.~~ at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~ at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer()~~ at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber) SMS_WSUS_CONTROL_MANAGER 3/11/2015 11:57:04 AM 6032 (0x1790)
Failures reported during periodic health check by the WSUS Server XYZ. Will retry check in 1 minutes SMS_WSUS_CONTROL_MANAGER 3/11/2015 11:57:04 AM 6032 (0x1790)
ooGDoo

There only is Patchdownloader.log under
\\SCCMSERVER\C$\Program Files\SMS_CCM\LOGS\Patchdownloader.log
Do you mean this Log?
Failed to move \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050.1 to \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050, error 64 Software Updates Patch Downloader 3/11/2015 11:50:33 AM 5608 (0x15E8)
Will retry in 10000ms Software Updates Patch Downloader 3/11/2015 11:50:33 AM 5608 (0x15E8)
Failed to move \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050.1 to \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050, error 5 Software Updates Patch Downloader 3/11/2015 11:50:43 AM 5608 (0x15E8)
Will retry in 10000ms Software Updates Patch Downloader 3/11/2015 11:50:43 AM 5608 (0x15E8)
Failed to move \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050.1 to \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050, error 5 Software Updates Patch Downloader 3/11/2015 11:50:53 AM 5608 (0x15E8)
Will retry in 10000ms Software Updates Patch Downloader 3/11/2015 11:50:53 AM 5608 (0x15E8)
Failed to move \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050.1 to \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050, error 5 Software Updates Patch Downloader 3/11/2015 11:51:03 AM 5608 (0x15E8)
MoveFile() failed to rename \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050.1 to \\teg.teda\admin\SCCM\SU\Baseline\Patches\e7b56916-3356-4f59-ac71-be7ef2159050 with GetLastError() = 5 Software Updates Patch Downloader 3/11/2015 11:51:03 AM 5608 (0x15E8)
ERROR: DownloadContentFiles() failed with hr=0x80004005 Software Updates Patch Downloader
ooGDoo

How can I deploy the setting of clear cache on exit for all users?

How can I deploy the setting of clear cache on exit for all users?

Note that Firefox disables the disk cache if you use "Clear history when Firefox closes" to clear the cache (see about:cache), so you can either disable the disk cache via its related pref or set the prefs related to clearing this data,but then other items that have a check-mark by default are cleared as well.
*browser.cache.disk.enable
*privacy.clearOnShutdown.cache
*privacy.sanitize.sanitizeOnShutdown
You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a local-settings.js file in the defaults\pref folder where also the channel-prefs.js file is located to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes
See also:
*http://kb.mozillazine.org/Locking_preferences
*http://mike.kaply.com/2012/03/16/customizing-firefox-autoconfig-files/
*http://mike.kaply.com/2014/01/08/can-firefox-do-this/

Deployment Rule Set - Allow file://

Similar Messages

Maybe you are looking for