Missing Baseline Patches

Question

Hi Guys,
We have just started testing with ZCM Patch Management and experience a problem with our Baselinepatches. We are currenly at ZCM 10.3.2. and clients are Windows XP SP3 and have the Adaptive Agent 10.3.2.41992. What is happening is that we started testing with a small Baseline of 26 Microsoft Critical patches which is applied to a testgroup. These 26 critical Microsoft patches all show as vulnerabilties for these clients.
This testgroup has about 10 clients as members. Of these 26 patches only 13 are being implemented at these clients, the other 13 patches are never installed at these clients.
We have no problems with the Patch Management Process itself. The subscription service is working fine and is scheduled daily. The Discover Applicable Updates Windows-x86-nl-XPsp3 Patch Bundle is working, Patch Managemement is running on the clients and the Clients get the Fingerprints correctly which are being presented in ZCC in the Patches Tab of the Workstation objects.
The 26 mentioned Baseline patches are:
1. MS 940289 (Dutch) Office Compatibility Pack Service Pack 1
2. MS 942288 Windows Installer 4.5 (All Languages)
3. MS 953331 (Dutch) Office Compatibility Pack Service Pack 2 (Rev 2)
4. MS 973472 Workaround for Vulnerability in Microsoft Office Web Components
5. MS10-031 Security Update for Microsoft Office XP (KB976380)
6. MS10-045 Security Update for Microsoft Outlook 2002 (KB980371)
7. MS10-063 Security Update for Microsoft Office XP (KB2288608)
8. MS10-079 Security Update for Microsoft Word 2002 (KB2328360)
9. MS10-080 Security Update for Microsoft Excel 2002 (KB2345017)
10. MS10-087 Security Update for Microsoft Office XP (KB2289169)
11. MS10-088 Security Update for Microsoft PowerPoint 2002 (KB2413272)
12. MS10-096 Security Update for Windows XP (KB2423089)
13. MS10-097 Security Update for Windows XP (KB2443105)
14. MS10-099 Security Update for Windows XP (KB2440591)
15. MS10-103 Security Update for Microsoft Publisher 2002 (KB2284692)
16. MS10-105 968095 2289162 (Dutch) Security Update for Microsoft Office 2002
17. MS11-002 Security Update for Windows XP (KB2419632)
18. MS11-003 Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2482017)
19. MS11-006 Security Update for Windows XP (KB2483185)
20. MS11-007 Security Update for Windows XP (KB2485376)
21. MS11-010 Security Update for Windows XP (KB2476687)
22. MS11-011 Security Update for Windows XP (KB2393802)
23. MS11-012 Security Update for Windows XP (KB2479628)
24. MS11-013 Security Update for Windows XP (KB2478971)
25. MS11-014 Security Update for Windows XP (KB2478960)
26. Microsoft Office Compatibility Pack Service Pack 2 (SP2)
Of these, the following 13 patches are never installed on these clients:
12. MS10-096 Security Update for Windows XP (KB2423089)
13. MS10-097 Security Update for Windows XP (KB2443105)
14. MS10-099 Security Update for Windows XP (KB2440591)
16. MS10-105 968095 2289162 (Dutch) Security Update for Microsoft Office 2002
17. MS11-002 Security Update for Windows XP (KB2419632)
18. MS11-003 Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2482017)
19. MS11-006 Security Update for Windows XP (KB2483185)
20. MS11-007 Security Update for Windows XP (KB2485376)
21. MS11-010 Security Update for Windows XP (KB2476687)
22. MS11-011 Security Update for Windows XP (KB2393802)
23. MS11-012 Security Update for Windows XP (KB2479628)
24. MS11-013 Security Update for Windows XP (KB2478971)
25. MS11-014 Security Update for Windows XP (KB2478960)
These 13 patches remain visible in ZCC in the Patches tab of the devices with a Green color and the status "Not Patched". I also checked the status of the missing Patches locally on the clients, they are definitive not installed locally. We tried Multiple refreshes of the Adaptive Agent, used the "Recalculate Baseline" option multiple times and tried clean imaging and a clean import in the zone of these clients. Just waiting for a few days to see if the process is running later makes no difference. We also tried the "Update cache" options several times for these 13 patches in ZCC.
I noticed the following things on the clients:
1. In the "Bundles" option of the properties of the Adaptive Agent on these clients the missing patches are not shown.
2. I checked the c:\program files\Novell\zenworks\zpm folder on the clients and noticed that for all the 26 Patches the corressponding .PLS files are present. For the 13 Patches that are being installed i also noticed a corresponding .pls_results.txt files which has only one line: SUCCES. For the 13 missing patches no such files exists.
So we do not seem to be able to install these critical Microsoft Patches on the clients. Does anyone has any suggestions we could try?
Thanking you in advance for your suggestions,
Marcel van den Berg
Netherlands

Answer 1

janbrouwer,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/