Remote patch management issues - AD required??

We are using ZCM10 and we're having problems with deploying patches remotely. That is running PM after hours by waking a PC, logging, deploying the patch and closing down. Something I was given to believe that ZCM would handle.
I'm being told by colleagues the reason that its not working is that we don't have AD and therefore MS patches won't work. We only have eDirectory for logins/GroupWise/ authentication etc.
So is it really necessary to have a domain running so that ZCM can wake up PC's login, deploy the patches, remediate and move on?
Many thanks

AD is by no means required for any MS Patches using ZPM or even not
using ZPM. Best to post details on the failures and ZCM version so your
issue can troubleshot.
Also try to narrow down your issue.
Is the Issue the WOL? Logging On? The Patches Applying ever, even when
the PC is manually powered on and logged into?
On 1/6/2011 12:36 PM, turners wrote:
>
> We are using ZCM10 and we're having problems with deploying patches
> remotely. That is running PM after hours by waking a PC, logging,
> deploying the patch and closing down. Something I was given to believe
> that ZCM would handle.
>
> I'm being told by colleagues the reason that its not working is that we
> don't have AD and therefore MS patches won't work. We only have
> eDirectory for logins/GroupWise/ authentication etc.
>
> So is it really necessary to have a domain running so that ZCM can wake
> up PC's login, deploy the patches, remediate and move on?
> Many thanks
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Similar Messages

Patch management for your remote/mobile workforce

Curious to know how folks are handling patch management for their remote users. Many of my laptop users are not tied to our local office or even to our VPN connection. They are however more often than not connected to the internet so it would be nice to find a patching product that can patch them over the internet. I know logmein has a patch management module but there's no way I'm upgrading to that level.
Any other options out there?
This topic first appeared in the Spiceworks Community

873768 wrote:
Hi, gurus:
What is a good Apps DBA should be doing as far as it relates to patch management. What are the proactive tasks we would perform, what are the
monthly deliverables we would provide, etc?
Thank you for your advice in advance.
What's the Best Way to Patch an E-Business Suite Environment?
https://blogs.oracle.com/stevenChan/entry/general_patching_strategies_for_e
Identifying Recommended Patches for E-Business Suite Environments
https://blogs.oracle.com/stevenChan/entry/recommended_patches_for_oracle_e
Oracle Applications Current Patchset Comparison Utility - patchsets.sh [ID 139684.1]
Thanks,
Hussein

Remote Access Management Console - configuration issue with Network Location Server

2012 Std R2
The remote Access management console operation status shows all green except for network location server .
Error: There is no response from the network location server URL. DirectAccess connectivity might not work as expected, and DirectAccess clients located inside the corporate network might not be able to reach internal resources.
Resolution listed as:
1. Configure the network location server on a server that is highly available to clients on the internal network.
2. If the network location server is running on the Remote Access server, ensure that IIS is running, and that the URL is available.
The remote access server is located on this server. IIS is running. What URL: show I be looking at?
Any other thoughts so I can get remote access working.
l also am getting a remote access error for IPV6, could this be a cause:
RoutingDomainID- {00000000-0000-0000-0000-000000000000}: Unable to add the interface {D37062B2-A3E0-4496-A459-9E0BBCE5423C} with the Router Manager for the IPV6 protocol. The following error occurred: Cannot complete this function.
John Lenz

Hi John,
please follow the steps to reinstall TCP/IP stack.
1.Restart your PC into Safe Mode with Networking.
2.
Edit your registry. Delete the following keys:
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Winsock
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Winsock2
3.
Open the nettcpip.inf file in your %winroot%/inf folder
(%winroot% is usually c:/windows).
Find the [MS_TCPIP.PrimaryInstall] section. Change the Characteristics value from 0xA0 to 0x80.
Open the properties of the network connection you want to fix. In the General tab, click on the Install button. Click on the Have Disk button, and point the location to %winroot%/inf. After that select TCP/IP (not version 6).
4.
Now you would notice that you can uninstall TCP/IP!
Do that, then restart the PC.
Go back to your network connection, and install TCP/IP again as per the above. After another reboot, you should be up and running.
I also noted that the XP network repair tool may yank out the ISA 2004 firewall client stuff. Just run the firewall clinet repair or install it again to fix that problem after you did your reboot. Before you do this kind of crazy stuff.
5.
This along with a TCP/IP reset using the netsh command:
netsh int ip reset resetlog.txt
wish you have a nice thanksgiving too
Regards,
Mike
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

ZCM Patch Management Patch Status Inaccuracies

We currently have issues with ZCM Patch Management incorrectly reporting the status of a couple of Microsoft updates. Specifically, we have firm evidence of this for the following patches (but suspect there may be more):
Microsoft Office 2007 SP3 - Microsoft Baseline Security Analyzer shows it as required, ZCM says its already applied.
MS11-049 InfoPatch 2007 - Microsoft Baseline Security Analyzer shows it as required, ZCM says it's not applicable.
We are checking the ZCM status in both the {guid}.state file on the device (which has today's date stamp) and in ZCC - both of these places show the same, incorrect, status.
We see this issue on multiple managed devices. The zone is 10.3.3. Devices have 10.3.3 with Patch Management Agent Update 2.
This isn't a timing issue, as we have left things several days before checking the status again.
I am raising a call with our Novell reseller, but am interested to find out if anyone else is seeing similar issues.
Thanks,
Martin

metheridge,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Patches Vanish to "Missing/Required" Status

Hello,
I recently had an issue where SharePoint 2010 CA flagged an issue with missing patches on one of my WFEs.
Within CA I went to "Manage Patch Status." Under this particular WFE every single patch is showing "Missing/Required" under the status. This is absurd, as I manually installed all of these patches myself. Furthermore, on all the other
WFEs all of the patches show as installed. This server has been around for four years and has been patched with PSConfig run every time. I have been to the "Manage Patch Status" page many times over the years and they certainly weren't red before
with "Missing/Required." Yet, all of them seemed to vanish overnight.
I logged into the WFE and all of the patches show up as present.
What would make them disappear from the configuration database? After reading other threads, I tried running: Get-SPProduct -Local. That didn't rectify the situation, however.
Thoughts?
Thanks,
Joseph Irvine

Hi Joseph,
There might be files missing from windows installer cache folder on server.
Please refer to the links below and manually repair the msi files on issue server:
http://blogs.technet.com/b/paulpaa/archive/2010/03/26/sharepoint-2007-hotfix-failed-with-an-error-the-detection-failed-this-can-be-due-to-a-corrupted-installation.aspx
Similar issue:
http://social.technet.microsoft.com/Forums/en-US/a7919b10-e4fe-4911-9016-bb6b81cf4194/sharepoint-patch-update-issue
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

Remote Desktop Management service not starting. service-specific error: %%2284126209 - Event ID: 7024

Hi Forum members,
We have a client that has intermittent issues with RDS on a 2012 R2 server.
As an overview of the environment, the client has a single VMWare host support 2 x Windows 2012 R2 VMs one is the File/Print/Email server and the 2nd is the RDS server used to allow the client to run MYOB Enterprise. Both servers have the AD DS role and
DNS roles amongst others.
The 1st issue is that the RD Connection Broker shows the error: "The server pool does not match the RD Connection Brokers that are in it. and then "1. Cannot connect to any of the specified RD Connection Broker servers".
The above issue seems to be caused by the RDMS service not starting. When you attempt to start it, the service stops and the error in the title is logged in the "System" event log. Full transcript below:
Log Name:      System
Source:        Service Control Manager
Date:          21/01/2015 4:50:32 PM
Event ID:      7024
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      intentionally removed.local
Description:
The Remote Desktop Management service terminated with the following service-specific error: %%2284126209
Event Xml:
<Event xmlns="
<System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7024</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-21T05:50:32.129949400Z" />
    <EventRecordID>53721</EventRecordID>
    <Correlation />
    <Execution ProcessID="568" ThreadID="12436" />
    <Channel>System</Channel>
    <Computer> intentionally removed.local</Computer>
    <Security />
</System>
<EventData>
    <Data Name="param1">Remote Desktop Management</Data>
    <Data Name="param2">%%2284126209</Data>
    <Binary>520044004D0053000000</Binary>
</EventData>
</Event>
In addition in the "Application" event log, the following error is logged:
Log Name:      Application
Source:        MSSQL$MICROSOFT##WID
Date:          21/01/2015 5:24:47 PM
Event ID:      18456
Task Category: Logon
Level:         Information
Keywords:      Classic,Audit Failure
User:          NETWORK SERVICE
Computer:      intentionally removed.local
Description:
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. Reason: Could not find a login matching the name provided. [CLIENT: <named pipe>]
Event Xml:
<Event xmlns="
<System>
    <Provider Name="MSSQL$MICROSOFT##WID" />
    <EventID Qualifiers="49152">18456</EventID>
    <Level>0</Level>
    <Task>4</Task>
    <Keywords>0x90000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-21T06:24:47.000000000Z" />
    <EventRecordID>4228336</EventRecordID>
    <Channel>Application</Channel>
    <Computer>intentionally removed.local</Computer>
    <Security UserID="S-1-5-20" />
</System>
<EventData>
    <Data>NT AUTHORITY\NETWORK SERVICE</Data>
    <Data> Reason: Could not find a login matching the name provided.</Data>
    <Data> [CLIENT: <named pipe>]</Data>
    <Binary>184800000E0000001F00000055004E0047004500520045005200410055005300530056005200300033005C004D004900430052004F0053004F0046005400230023005700490044000000070000006D00610073007400650072000000</Binary>
</EventData>
</Event>
I have been attempting to resolve these errors for some time, without success. I have read the many KBs and forum entries related to the above and applied a number of the suggested fixes, including the one which suggests to add the NT SERVICE\ALL SERVICES
to the "Logon as a Service" in the "User Rights Assignment" of the "Default Domain Policy" which is linked to the domain level, that both servers are objects of.
My question to the forum is, can anyone come up with a solution to resolve the above issues and all the RDMS service to start which will then hopefully resolve the broker error?
Regards,
David West.

Hi David,
If virtual machines on the server are Windows Server 2012, then it is not supported to install Remote Desktop Connection Broker on a Domain Controller.
More information for you:
Remote Desktop Services role cannot co-exist with AD DS role on Windows Server 2012
http://support.microsoft.com/kb/2799605/de
Guidelines for installing the Remote Desktop Session Host role service on a computer running Windows Server 2012 without the Remote Desktop Connection Broker role service
http://support.microsoft.com/kb/2833839
If the VMs are Windows Server 2012 R2, I suggest you install RDS on a separate machine to see if the issue persists.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Handling of pending reboot, exclusive updates for patch management with SCCM 2012

Hello,
Planning to use SCCM 2012, I would like to understand how smart is SCCM 2012 when dealing with specific patch management situation.
Assuming I have the following:
- A given server to be patched is missing a lot of updates, several being mutually exclusive. This typical case will require several reboot / patching to properly obtain a server fully up to date.
- A given server to be patched is in pending reboot state because the local admin installed new software and has not restarted the server yet as requested
- Those servers have configured maintenance windows of 2 hours during each night. I scheduled a deployment of missing patches authorizing restart.
--> when the maintenance window will be reached:
- will the server first be restarted to clean the pending reboot ?
- will the the server be patched / restarted several times as required to fully meet the updates to be deployed.
Another scenario on workstation side:
- can I enforce deployment of updates at a given time, do not automatically restart the workstation during patch deployment, but after deployment schedule a mandatory restart with a countdown if there is a pending reboot... From end-user perspective, it
would have the following behavior. For instance:
- patches are automatically installed on Monday at 10 AM
- as soon as deployment is done, warning message is displayed to ask users to reboot
- then user has up to 48h to restart his computer by himself. If he does not do it, it will be automatically done after countdown expires.
--> Can such a scenario be managed by SCCM 2012 ?
Regards.

Hi,
I have a related question about deploying Microsoft Security Updates to workstations via SCCM 2012. Is there a way to deploy the MS updates to workstations and only suppress reboots for machines with users logged on or locked? There seems to
be only 2 different options for reboots, Suppress them all or don't suppress them at all. We would like SCCM to reboot the machines that are logged off, but suppress the reboot for those that are logged on, while at the same time, provide the user with
a notification that their machine needs to be rebooted (at their convenience).
We've tried applying the Domain GPO "No auto-restart with logged on users for scheduled automatic updates installations" (Enabled) and "Configure Automatic Updates" (Disabled), but the logged on/locked machines still receive the restart countdown with no
option to postpone or delay.
This is a show stopper for us since we have an environment where we are absolutely not allowed to reboot a logged on machine.
For a little background, we are coming from SMS 2003 and the Distribute Software Updates (ITMU) way of deploying MS Updates, where we could always set the program to run "Only when no user is logged on".
Please tell me there is a way to achieve our desired result.
Thanks,
Dan

Windows Server 2012 Standard - Remote Desktop Management service won't start

Dear colleges, I'm seeking your help in resolving a weird issue with Remote Desktop.
The Remote Desktop Management service gives the following error message any time it is attempted to start:
"The Remote Management Service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs."
The Event Viewer error message is as follows:
"The Remote Desktop Management service failed to start. Error code: 0x88250001"
Whenever I connect to the server with RD I get error message that the Remote Desktop Licensing Server isn't configured and that the RD trill will expire in N-days. The server is up to date updates wise and has been licensed for 5 RD CALs. The server hosts DNS
server and has AD DS role installed, is virtualized to have one Hyper-V server.
I read some blogs about having both DNS and AD DS on one box is a bad sea and a root cause of the issue. Well, that very well may be, but for me that's an option as I'm not going to get a box to just host DNS. There should a solution to this as I shouldn't
only one suffering from this issue.
I also read about KB2871777 - Servicing stack update supposedly addressign this issue. Well, it's on my system and the issue is there too. :)
Will I loose ability to RD when the trial expires or it's just another misleading MS message that can be ignored?
How do I mend Remote Desktop Management service to start?
Appreciate your help!

Hi,
Thank you for posting in Windows Server forum.
Can administrators perfectly connect to RDS environment?
In meantime please check that you have properly configured and activated RD License role service and install RDS CAL on it. It might also possible that you have configured RD License server but it server can’t find it and giving you error due to certificate
also. Please check that you have properly configured certificate on your RDS Server. Try to install and update below hotfix for License related issue.
No RDS license when you connect to an RDS farm in Windows Server 2012
http://support.microsoft.com/kb/2916846
If you have configured both RDS and AD DS on single server then also you may find some error reading this. If so please try to setup both roles on different server and check the result. In addition to this, please check below articles.
What's New in Remote Desktop Services in Windows Server 2012
http://technet.microsoft.com/en-in/library/hh831527.aspx
Install Remote Desktop Services Failed on Windows 2012 Server
http://social.technet.microsoft.com/Forums/windowsserver/en-US/bbf47aa2-8ae5-4f22-9827-afee5a11417a/install-remote-desktop-services-failed-on-windows-2012-server?forum=winserverTS
Hope it helps!
Thanks.
Dharmesh Solanki

What is the best approach for patch management

Hi,
I'm new about patch management. I would like to ask you how manage patch on few Solaris 10 servers using command line.
I would like to know:
1. Using only command line how to download latest patches
2. There are some dependencies how to check this and install only those patches which meets dependecy requirements?
3. Is there possiblity to atomate this?
4. Is it possible to have one patch server and others servers will download and install this patches?
5. What if some patches are not installed?
6. How to find out which patches are necessary and which patches don't have to be installed? Or maybe or patches to be installed?
7. Could you please describe your approach for managing patches? Or maybe you can recommend some books/web page/articles that can help me to understand patch management.
Thanks in advance,
Daniel

smpatch is the command line tool to manage solaris patching. first you need to register yours system - this can be done using sconadm, detailed here:
http://sunsolve.sun.com/search/document.do?assetkey=1-9-82688-1
smpatch analyze will list all required patches and resolve dependencies. smpatch download will download all the required patches, and smpatch update will apply them. You can set up a Local Patch Server to download patches, then your clients will download the patches they require from it. This is detailed in chapter 6 of the update connection admin guide

ZCM Patch Management Dashboard blank

I'm using ZCM 10.2 RC1 and am trying to test Patch Management. I have patch management working, patches have downloaded and DAU is running. One thing that is not working is the dashboard. I have flash installed but the dashboard is blank. Are there any special requirements for the dashboard? Has anyone else got it working?
BTW, I'm running ZCM under Windows Server 2003 Standard x64 SP2.
Jim Webb

Originally Posted by jwebb
I'm using ZCM 10.2 RC1 and am trying to test Patch Management. I have patch management working, patches have downloaded and DAU is running. One thing that is not working is the dashboard. I have flash installed but the dashboard is blank. Are there any special requirements for the dashboard? Has anyone else got it working?
BTW, I'm running ZCM under Windows Server 2003 Standard x64 SP2.
Jim Webb
Which browser are you running? There is a known bug affecting IE...

Difficulty in installing Patch manager 2 on Solaris 9

Hello,
I have a Solaris 9 machine on which I am trying to install Patch Manager
2. I have PatchPro 2.2 also installed on the same machine.
Since PatchManager2 requires some patches to be installed previously
like: 112945 117593 117595, I tried to install these. The last one
117595 if I understood correctly contains the patch manager itself. The
problem is that I installed 112945-40 which the patch manager doesn't
like and would instead require 112945-27. I tried patchrm 112945-40 and
patchrm -f 112945-40 but invain. I also tried patchadd 112945-27 and
patchadd -u 112945-27 but invain also.
# patchadd -u 112945-27
Checking installed patches...
Executing prepatch script...
Verifying sufficient filesystem capacity (dry run method)...
Patch 112945-27 failed to install due to a failure produced by pkgadd.
See /var/sadm/patch/112945-27/log for details
Patchadd is terminating.
The following is the log file:
Package not patched:
PKG=SUNWdclnt
Original package not installed.
Package not patched:
PKG=SUNWlvma
Original package not installed.
Package not patched:
PKG=SUNWmga
Original package not installed.
Package not patched:
PKG=SUNWpmgr
Original package not installed.
Package not patched:
PKG=SUNWwbdev
Original package not installed.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
PaTcH_MsG 1 Patch number 112945-27 is superceded by the already
applied 112945-40.
Dryrun complete.
No changes were made to the system.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
WARNING: /etc/rc0.d/K36wbem <no longer a regular file>
WARNING: /etc/rc1.d/K36wbem <no longer a regular file>
WARNING: /etc/rc2.d/S90wbem <no longer a regular file>
WARNING: /etc/rcS.d/K36wbem <no longer a regular file>
Dryrun complete.
No changes were made to the system.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
I am really confused as what I need to do since even trying to install
117595-03 gives:
# patchadd 117595-03
Checking installed patches...
One or more patch packages included in
117595-03 are not installed on this system.
Patchadd is terminating.
Can anyone help me out please?
Regards,
Darren

Similar problems with patch manager...
Since PPro is being decommisioned and the suggestion is to go with PM 2, I went ahead and uninstalled PPro.
Now, for PM, the required patch is 112945-35 or higher, which I had on the system, excep that I have no smpatch command anywhere.. I backed out 112945-40 and reinstalled it, only to get the following:
Checking installed patches...
Executing prepatch script...
Verifying sufficient filesystem capacity (dry run method)...
Installing patch packages...
Patch number 112945-40 has been successfully installed.
See /var/sadm/patch/112945-40/log for details
Executing postpatch script...
cp: cannot access //usr/sadm/lib/wbem/providerutility.jar
cp: cannot access //usr/sadm/lib/wbem/sunwbem.jar
Unable to access "/usr/sadm/lib/wbem/providerutility.jar"
Usage:
smccompile -c <beanname>
smccompile -j tool|service [-n <altname>] <jarfile>
smccompile -j library [-n <altname>] ALL|ALLTOOL|ALLSERVICE|<tool or ser
vice bean to attach to> <jarfile>
Patch packages installed:
SUNWdclnt
SUNWlvma
SUNWmccom
SUNWwbapi
SUNWwbcor
SUNWwbmc
TIA...

ZCM 11.2.4 - 11.3.1FRU1 Patch Management Agent Update 1

Tried the "updated" exe files, patch management now says all of our win7 machines with Office 2007 are missing SP3 (KB2526086) which is completely wrong.
https://download.novell.com/Download...d=G072RdrX4b0~

dtemple-sgi,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com

Spiceworks Patch Management

Does anyone have a built in tool for Spiceworks Patch Management of 3rd Party Software?
With all of these Zero-day's coming from Adobe Flash I'm really looking into this issue more and more. Managing 120 devices for a major security patch, every month now for the past several months has been very tiresome.
Is there any functionality like this. Are they are good open source tools. The reporting is useful enough, but still a lot of overhead to perform the work.
This topic first appeared in the Spiceworks Community

Fishoil,
checkout the pathc I posted today -
http://download.novell.com/Download?...d=7DjPTWpuxeM~ - could it be
this?
Shaun Pond

Patch Manager for Solaris 9 9/05

I am trying to locate the Patch Manager download for Solaris 9 9/05 but all I have been able to locate on the downloads site is the version for Solaris 8. Does anyone have a link to the Solaris 9 version? Thanks.

Exactly, whith that configuration all works well (if my server is connected to Internet).
The problem is when I have another server, not connected to Internet, that requires new patches.
If I have good understood I can install patch manager(2.0) on that server, require patches to my local patch server and if the patches required aren't on the disk the local patch server requires them to Sun. During this request it seems that my local patch server doesn't connect trough the proxy (snoop doesn't report connections). even if the configuration is set. (I have tried a reboot too).

Eval of Patch Management in ZCM 11.2

Hi
I'm currently running an evaluation copy of ZCM 11.2, trying to get a
feel for the Zenworks Patch Management product. I have a couple of
questions/problems that I hope can be answered here.
First, there seems to be quite a lot of trouble getting patches to
cache. The process just stops in the middle of a patch and hangs until
I reboot the zcm server. I've seen references to some ftf patches that
help - is this a common problem that's helped by the ftf?
Second, the number of vendors for which patches are available seems
quite limited. Most of the commonly attacked ones are there, Microsoft,
Adobe, etc., but many more are not. Google, for example is not listed.
Some patching products have many more vendors in their database. Does
Lumension/Novell have any strategy to expand this list?
Lastly, the available patches for each vendor are often very out of
date. For Sun (should be Oracle), JRE 1.7 is available, and 1.6.31, but
not 1.6.32. 1.6.31 is a really bad version - it was a vulnerability in
it that started us looking at patch management products in the first
place! The Citrix list has the 12.0 client, but no Citrix Receiver,
which is their current client..
There's a lot of really good features in ZPM, but the problems I've
experienced so far has made me a bit wary.
Regards,
Phillip E. Thomas

Phillip,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Remote patch management issues - AD required??

Similar Messages

Maybe you are looking for