5 Replies Latest reply on Sep 24, 2015 12:49 PM by Rob Slattery

    Issues installing Windows Patches

    Artur Kominek

      Hallo,

       

      first of all I am really new at BSA

       

      I have some issues installing Patches on Windows Server 2008.

      I am using BSA 8.6.00.216 and a Windows Helper Server for patching.

      I have set up proxy and "Downloaded" Shavlik files in Patch Global Configuration.

      I have imported all 3 Shavlik files in Depot (hf7bxml, pd5.xml and oemcatalog.zip).

      I have created the cataloges in offline mode.

      I have created a Patch Catalog Smart Group for Critical Bulletins.

       

      The Analysis job works fine but the Remediation job fails every time.

      I have changed Reboot options for the Deploy Job several times and als rebooted the Server manualy but again the remediations wont finish.

      In the analysis job there are 6 of 8 missing Q-numbers which are present on the server.

      As far as I know there may be issues with Jobs using the List option, so I included the "??Superseded_by??equals Null" options in the smart group but the result was the same.

       

      Anybody an idea?

      Thx a lot for help and sry for my bad english

       

       

      Info               19.03.2015 15:24:16                       The job '----2008 Kritisch------10.131.133.241-20045421 @ 2015-03-19 15-19-43-282+0100->----2008 Kritisch------10.131.133.241-20045421 @ 2015-03-19 15-19-43-282+0100' has failed on server 10.131.133.241                              

      Error             19.03.2015 15:24:16                       APPLY failed for server 10.131.133.241. Exit code = -4001                                

      Warning     19.03.2015 15:24:16                       Deploy partially succeed with failure items. Preserve on failure not enabled; cleaning up staging area.

      (Time in agent's deploy log:: 03/19/2015 15:24:11)                                               

      Warning     19.03.2015 15:24:16                       Apply Partially Succeeded. There are failed items: ActionOnFailure = Continue. Job status = Apply Failed

      (Time in agent's deploy log:: 03/19/2015 15:24:11)                                               

      Warning     19.03.2015 15:24:16                       Processing of package restarted after last completed item. This is expected if the system rebooted, entered or exited Single User Mode. In any other cases, please check the deploy logs for potential errors.

      (Time in agent's deploy log:: 03/19/2015 15:24:11)                                               

      Warning     19.03.2015 15:24:16                       Reboot in progress

      (Time in agent's deploy log:: 03/19/2015 15:23:32)                                               

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:23:32)                        9                        Windows6.1-2008-R2-SP1-KB3000483-x64.msu-MS15-011-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: 2359302 (Time in agent's deploy log:: 03/19/2015 15:23:32)    9                        Windows6.1-2008-R2-SP1-KB3000483-x64.msu-MS15-011-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:23:14)                        8                        Windows6.1-2008-R2-SP1-KB3011780-x64.msu-MS14-068-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: 2359302 (Time in agent's deploy log:: 03/19/2015 15:23:14)    8                        Windows6.1-2008-R2-SP1-KB3011780-x64.msu-MS14-068-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:22:55)                        7                        Windows6.1-2008-R2-SP1-KB2868116-x64.msu-MSWU-805-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: 2359302 (Time in agent's deploy log:: 03/19/2015 15:22:55)    7                        Windows6.1-2008-R2-SP1-KB2868116-x64.msu-MSWU-805-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:22:38)                        6                        Windows6.1-2008-R2-SP1-KB2798162-x64.msu-MSWU-753-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: 2359302 (Time in agent's deploy log:: 03/19/2015 15:22:38)    6                        Windows6.1-2008-R2-SP1-KB2798162-x64.msu-MSWU-753-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:22:20)                        5                        Windows6.1-2008-R2-SP1-KB2677070-x64.msu-MSWU-629-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: -2145124329 (Time in agent's deploy log:: 03/19/2015 15:22:20)                  5                        Windows6.1-2008-R2-SP1-KB2677070-x64.msu-MSWU-629-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:22:02)                        4                        Windows6.1-2008-R2-SP1-KB2653956-x64.msu-MS12-024-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: 2359302 (Time in agent's deploy log:: 03/19/2015 15:22:02)    4                        Windows6.1-2008-R2-SP1-KB2653956-x64.msu-MS12-024-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:21:45)                        3                        Windows6.1-2008-R2-SP1-KB2631813-x64.msu-MS12-004-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: 2359302 (Time in agent's deploy log:: 03/19/2015 15:21:45)    3                        Windows6.1-2008-R2-SP1-KB2631813-x64.msu-MS12-004-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       ActionOnFailure = Continue. Continuing deploy job (Time in agent's deploy log:: 03/19/2015 15:21:28)                        2                        Windows6.1-2008-R2-SP1-KB2534366-x64.msu-MSWU-514-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Error             19.03.2015 15:24:16                       Command returned non-zero exit code: 2359302 (Time in agent's deploy log:: 03/19/2015 15:21:28)    2                        Windows6.1-2008-R2-SP1-KB2534366-x64.msu-MSWU-514-de-WINDOWS SERVER 2008 R2 DATACENTER (X64)-SP1

      Warning     19.03.2015 15:24:16                       [stderr: 1]                         Ein Unterverzeichnis oder eine Datei mit dem Namen "shavlik" existiert bereits. (Time in agent's deploy log:: 03/19/2015 15:21:10)               1                     remediate-2007313-2008 Kritisch2015-03-19 14-10-07-779+01002015-03-19 15-19-38-302+0100

      Warning     19.03.2015 15:23:34                       Unexpected TJM Message: [03/19/2015 15:23:32 VM2041 2700 ----2008 22:"Kritisch------20045421"]                             

      Warning     19.03.2015 15:23:34                       Unexpected TJM Message: [03/19/2015 15:23:32 VM2041 2700 ----2008 22:"Kritisch------20045421"]                             

      Info               19.03.2015 15:20:05                       Started running the deploy step job '----2008 Kritisch------10.131.133.241-20045421 @ 2015-03-19 15-19-43-282+0100->----2008 Kritisch------10.131.133.241-20045421 @ 2015-03-19 15-19-43-282+0100' on application server 'vlt61242.test.bwk.zivit.zivb.net'(2,000,000) against target server '10.131.133.241'                                               

        Info               19.03.2015 15:20:05                       Deploy Apply Job (Pre-Execute):----2008 Kritisch------10.131.133.241-20045421 @ 2015-03-19 15-19-43-282+0100; Server:10.131.133.241; PkgID:"e608d7c7-5d21-4e13-b2d8-21a938ee1e1f-2004594.1"; UUID:aa25779278ee3b89afea4ff203d158b2  

        • 1. Re: Issues installing Windows Patches
          Artur Kominek

          info.

          Just tested with catalog for Server 2012.

          Same settings on catalog , analysis, deploy job,

          everything works fine.

          • 2. Re: Issues installing Windows Patches
            Jim Wilson

            If you have Internet access from the BSA environment, use the Onlne Mode Patch Catalog

            Run the catalog update job (this will pick up the latest patch data definitions - there were some logic detection correction in the update released on 17th March)

            Ensure that the target has been rebooted sine the last Patch Deploy

            In the Patch Analysis job , select Group => Security Patches and leave the Includes/Exclude empty

            Run the Patch Analysis Job and see if the same patches are still shown as missing.

            • 3. Re: Issues installing Windows Patches
              Artur Kominek

              Hallo Jim,

               

              unfortunately we dont have the posibility to use the online mode so I redownloaded the files and updates using the offlinepatchpownloader and updated the patchcatalogs.

              That made the remediation run without any issues.

              Thank you for your help.

              • 4. Re: Issues installing Windows Patches
                Rob Slattery

                This is extremely interesting to me especially since our organization uses a smartgroup to patch.

                 

                Also, the errors we seem to consistently receive are, 'Deploy partialy succeed with failure items.' and 'Apply Partially Succeeded.  There are failed items:'

                 

                Some of these servers are trying to patch MS Bulletins from 2006, 2007, and older, so it seems they've missed patches.

                 

                Are you suggesting that if we remove the 'List' item and just patch based off the Catalog itself, many of these errors will go away and, we can go back to using a 'List' item because our targets will be up-to-date sort of speak?

                • 5. Re: Issues installing Windows Patches
                  Rob Slattery

                  I also read KBKA353940 which also seems this may resolve some of our warnings and patching failures:

                   

                  Partially superseded Bulletins show as Superseded in the Windows Catalog.

                  This affects users that rely on whitelist patching (use of Include Filter to patch their systems). Using the Include Filter disables supersedense, meaning the Patch Analysis Job no longer filters out the old patches, so if the old patch is in the Include Filter, it will be reported in the analysis.
                  In order to filter out superseded patches from the Include Filter, the Smart Group in the Catalog (which is used as Include Filter in the Job) is configured to not show bulletins for which IS_SUPERSEDED property is set to True. This works most of the time, but may cause issues for some bulletins which are not completely old therefore are partially superseded. Some KBs within such bulletins are still active, and filtering this Bulletin will filter out some new active patches from the results.