Jump to content
steveohmygod

Patching being stopped by KB2887535 - Svr 2008 and Win 7

Recommended Posts

http://support.microsoft.com/kb/2887535

 

I have seen that this set of windows updater updates from 7.6.7600.256 to .320 and others have caused some issues if they are NOT applied -- i have seen KB2937636 listed in the LT Patch Manager for Windows 8 and Server 2012, but NOT the one KB2938066 for Windows 7 or Server 2008.

 

As a result, Server 2008 and Windows 7 computers do NOT take patches from LabTech Patch Manager UNTIL the updater update is applied and the device rebooted -- it will only see a handful of patches until that is performed, but the Patch Report does see the full gambit of patches that are needed (and that are shown after the updater update is completed)

 

Has anyone encountered this, and if so, how to make sure it is applied to all devices ??

 

Steve Olson

BlackPoint IT Services

Share this post


Link to post
Share on other sites

I can confirm at least that labtech does not seem to be able to update the agent, I am fairly certain I have been able to update the agent in the past by running the install windows update agent command but it had no effect in my limited testing. This is a pretty big issue, would love to hear some ideas of how we might be able to script or otherwise automate the process of updating the agent?

Share this post


Link to post
Share on other sites

I would love to know about this too.

 

Seems I am not the only one hitting my head against the wall :-)

 

Has this been raised with LT Support?

 

I had an issue with Microsoft Updates with Windows Updates. IE Office not getting updated. You did it manually and it worked.

 

I havent actually had a chance to test this but this is the link which it looks like will do the trick.

 

I am however not sure this will update the Windows Update - as this is usually a seperate issue - but this might also help if you have had issues with MS Office not patching correctly. That said I am not sure if you first need to update the Windows Update, to enable this in the first place! Joy of Technology!!!

 

http://docs.labtechsoftware.com/documentation/knowledgebase/article/7286

Share this post


Link to post
Share on other sites

Try this script using the standalone updates. It has not been tested much as I only had an hour to throw it together, it WILL REBOOT the machine so run after hours or add the switch /norestart to the shell lines and keep in mind the WUA will not actually be updated until it is rebooted. Get the standalone installers here http://blogs.technet.com/b/configmgrteam/archive/2014/07/14/how-to-install-the-windows-update-agent-on-client-computers.aspx, the Windows 7 and Server 2008 links are the same patch so just grab one each x86 and x64. There is an EDF at the computer level that will be imported to pull the WUA version. Test in house before deploying.

 

*EDIT* Added newer version, turns out the original did not reboot as intended. This version is the one I ended up using in our environment and it has updated ~800 agents so far.

Update WUA Win7 2008v2.zip

Edited by Guest

Share this post


Link to post
Share on other sites

Updated Ryan's script to update to the 7.6.7601.19016 agent version for 2008/7.

 

You can grab the downloads for these here:

https://support.microsoft.com/en-us/kb/3083710

 

Attached is a completely new script in case you guys need the old.

 

-Tyler

 

EDIT: Added a V2.. the first checks for 2008, but this will only update for 2008 R2.

 

EDIT 2: Added a V3. Updated the version check, woops. :P

Update WUA Win7 2008 to 19016v3.zip

Share this post


Link to post
Share on other sites

Patch Remedy from squidworks has changed my entire patching situation. It is working so well and it is doing all the hard work for me. In the advanced configuration the thread How I got 95% patch efficiency in Eight Easy(?) steps is where it all started. I suggest giving that a read.

Share this post


Link to post
Share on other sites

Yes, we are continuing to update and make better Patch Remedy which is a plugin for managing WUA across all windows systems. It helps identify the troubled systems and allows for both repair of and update of WUA.

 

Our installers will try to update windows 7,8 and 2012 systems with updated versions of WUA and will run daily tests against the patch database tables to determine is there are odd behaviors happening with systems.

 

Some very cool stuff!. And hey it's free... We know how LabTech Geeks like their free stuff.

 

Cubert :ugeek:

 

http://www.squidworks.net/2015/11/patch-remedy-wua-manager-plugin-for-labtech/

Share this post


Link to post
Share on other sites

Sounds like a great product, I decided to try it but getting an error that an unhandled exception has occurred (inpute string was not in a correct format.) using Labtech 2013 control center v60.276. I can continue to launch the Plugin but it doesn't show any information inside the plugin so not sure that it's working. Is this a known issue and any plans to get it fixed?

 

-Eugene :cry:

Share this post


Link to post
Share on other sites

After extensive patching investigation over the past several weeks, I've determined that with Ignite installing all security, critical, def. etc. patches by default, the computers are being patched at least 85% (out of 1400 agents). The issues i am running into are issues where the computers will not install patches, not necessarily with LT patching itself.

Share this post


Link to post
Share on other sites
After extensive patching investigation over the past several weeks, I've determined that with Ignite installing all security, critical, def. etc. patches by default, the computers are being patched at least 85% (out of 1400 agents). The issues i am running into are issues where the computers will not install patches, not necessarily with LT patching itself.

 

Cubert's Patch Remedy plugin will also assist with this issue - it has a remediation script that has solved MOST of my patching issues.

 

http://www.squidworks.net/2015/11/patch-remedy-wua-manager-plugin-for-labtech/

Share this post


Link to post
Share on other sites
After extensive patching investigation over the past several weeks, I've determined that with Ignite installing all security, critical, def. etc. patches by default, the computers are being patched at least 85% (out of 1400 agents). The issues i am running into are issues where the computers will not install patches, not necessarily with LT patching itself.

 

Cubert's Patch Remedy plugin will also assist with this issue - it has a remediation script that has solved MOST of my patching issues.

 

http://www.squidworks.net/2015/11/patch-remedy-wua-manager-plugin-for-labtech/

 

I looked at the squidworks plugin. I then checked the WUA version for as many agents as I could. Looks like majority are currently on 7.6.7601.19077 (which is latest as of Dec 2015): https://support.microsoft.com/en-us/kb/3112343

 

So, these must have been automatically updated at some point.

Share this post


Link to post
Share on other sites

how does labtech check for the latest version? through the normal routine where the PCs will check for the updates and find them if they need them?

Share this post


Link to post
Share on other sites

That is correct.

 

Patch Remedy is no longer free, but the cost is minimal, and the hours saved by using the plugin are enormous.

 

This plugin is the best investment I think we have made to date.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×