Quantcast
Channel: Shavlik User Community : Document List - All Communities
Viewing all 1352 articles
Browse latest View live

How To: Change Group By Selection in Patch for SCCM 2.4

$
0
0

Purpose

 

The purpose of this document is to show how to change the Group By selections in the Patch for SCCM 2.4 plugin.

 

Description

 

By default, Patch for SCCM will have all updates listed in a grid format without any grouping.

 

 

Instructions

 

     1. By default, the Group by panel is not visible. To show this panel, right-click any column, then select 'Show Group Panel'.

 

     2. The Group Panel will then show as seen below:

     3. To select a column to group by, either click and drag the column in to the 'Group Panel' or right-click a column and selecting 'Group By This Column'.

 

Click and Drag

 

Group By This Column

 

     1. Right-click a column, then click 'Group By This Column'.

 

     2. Once a column has been selected to be grouped, the view will look similar to below, based on the column selected.

 

Multiple columns may be grouped together. Drag additional columns into the group panel to add additional filtering/grouping.

 

     3. To ungroup by a given column, either click-and-drag a column out of the group panel or right-click a column name then select 'Ungroup'.

 

Click and Drag

Ungroup

 

 

Affected Product

 

Ivanti Patch for SCCM 2.4


URL exception list for Shavlik Protect - Ivanti Patch for Windows Servers (04-10-2018)

$
0
0

Overview

 

This document provides a list of required URL addresses for Shavlik Protect and Ivanti Patch for Windows Servers to allow:

 

  • Patch executable download.
  • Patch content definition download.
  • Online license activation or license refresh.
  • Home page RSS feed.
  • Product check for update.

 

URL List

 

The following URLs may be used to download updates and must allowed through firewalls, proxies and web filters:

 

ftp://ftp.attglobal.net
ftp://mozilla.stu.edu.tw
ftp://releases.mozilla.org
http://34e34375d0b7c22eafcf-c0a4be9b34fe09958cbea1670de70e9b.r87.cf1.rackcdn.com
http://a1540.g.akamai.net
http://aimp.su
http://airdownload.adobe.com
http://app.oldfoss.com
http://app.oldfoss.com:81
http://appldnld.apple.com
http://appldnld.apple.com.edgesuite.net
http://archive.apache.org
http://ardownload.adobe.com
http://au.v4.download.windowsupdate.com
http://azure.download.pdfforge.org
http://bitbucket.org
http://cache.lumension.com
http://cache.pack.google.com
http://cache-download.real.com
http://ccmdl.adobe.com
http://cdn01.foxitsoftware.com
http://cdn02.foxitsoftware.com
http://cdn04.foxitsoftware.com
http://cdn09.foxitsoftware.com
http://cdn1.evernote.com
http://citrixreceiver491000.html
http://classicshell.net
http://content.ivanti.com
http://content.rim.com.edgesuite.net
http://d.7-zip.org
http://dist.divx.com
http://dl.google.com
http://dl2.xmind.net
http://dl3.xmind.net
http://download.accusoft.com
http://download.adobe.com
http://download.autodesk.com
http://download.betanews.com
http://download.ccleaner.com
http://download.cdburnerxp.se
http://download.documentfoundation.org
http://download.dymo.com
http://download.filezilla-project.org
http://download.gimp.org
http://download.imgburn.com
http://download.macromedia.com
http://download.microsoft.com
http://download.newaol.com
http://download.nullsoft.com
http://download.oldfoss.com
http://download.oldfoss.com:81
http://download.pdfforge.org
http://download.piriform.com
http://download.royalapplications.com
http://download.skype.com
http://download.splunk.com
http://download.teamviewer.com
http://download.techsmith.com
http://download.videolan.org
http://download.virtualbox.org
http://download.windowsupdate.com
http://download.winzip.com
http://download2.operacdn.com
http://download3.operacdn.com
http://download3.vmware.com
http://download3.xnview.com
http://download4.operacdn.com
http://download-akm.skype.com
http://downloadarchive.documentfoundation.org
http://download-origin.cdn.mozilla.net
http://downloads.hpe.com
http://downloads.pdf-xchange.com
http://downloads.sourceforge.net
http://downloadus1.teamviewer.com
http://downloadus2.teamviewer.com
http://en.community.dell.com
http://files2.zimbra.com
http://fpdownload.macromedia.com
http://ftp.adobe.com
http://ftp.gimp.org
http://ftp.opera.com
http://ftp.ussg.indiana.edu
http://g.live.com
http://get.geo.opera.com
http://get.videolan.org
http://gigenet.dl.osdn.jp
http://hotfixv4.microsoft.com
http://install.nitropdf.com
http://jaist.dl.sourceforge.net
http://javadl.oracle.com
http://javadl.sun.com
http://jsimlo.sk
http://knowledge.autodesk.com
http://localhost
http://localhostnt4w
http://mirror.clarkson.edu
http://mirror.nexcess.net
http://mirror.os6.org
http://mirror2.layerjet.com
http://mirror6.layerjet.com
http://mirrors.syringanetworks.net
http://mozilla.stu.edu.tw
http://mozy.com
http://olive.download.pdfforge.org
http://openoffice.cs.utah.edu
http://orange.download.pdfforge.org
http://osdn.dl.osdn.jp
http://pnotepad.googlecode.com
http://prodesigntools.com
http://pspad.poradna.net
http://pumath.dl.osdn.jp
http://purple.download.pdfforge.org
http://qtinstall.info.apple.com
http://releases.mozilla.org
http://silverlight.dlservice.microsoft.com
http://software-dl.real.com
http://sourceforge.net
http://superb-dca2.dl.sourceforge.net
http://support.citrix.com
http://support.citrixonline.com
http://support1.uvnc.com
http://supportdownload.apple.com
http://swupdl.adobe.com
http://tcpdiag.dl.sourceforge.net
http://teal.download.pdfforge.org
http://tenet.dl.sourceforge.net
http://ufpr.dl.sourceforge.net
http://up.autodesk.com
http://upgrade.skype.com
http://us.download.nvidia.com
http://white.download.pdfforge.org
http://wl.dlservice.microsoft.com
http://www.7-zip.org
http://www.aimp.ru
http://www.apache.org
http://www.coreftp.com
http://www.cutepdf.com
http://www.dotpdn.com
http://www.download.windowsupdate.com
http://www.filesetups.com
http://www.fosshub.com
http://www.getpaint.net
http://www.goodsync.com
http://www.jam-software.com
http://www.microsoft.com
http://www.mirrorservice.org
http://www.peazip.org
http://www.piriform.com
http://www.rarlab.com
http://www.realvnc.com
http://www.tightvnc.com
http://www.uvnc.com
http://www.uvnc.eu
http://www.wireshark.org
http://xh.yimg.com
http://xml.shavlik.com
https://2.na.dl.wireshark.org
https://airdownload.adobe.com
https://allwaysync.com
https://archive.apache.org
https://assets.cdngetgo.com
https://astuteinternet.dl.sourceforge.net
https://atlassian.jfrog.io
https://ayera.dl.sourceforge.net
https://bitbucket.org
https://cdn.gomlab.com
https://cdn1.evernote.com
https://clientupdates.dropboxstatic.com
https://content.ivanti.com
https://cytranet.dl.sourceforge.net
https://d1ilhw0800yew8.cloudfront.net
https://data-cdn.mbamupdates.com
https://desktopassets.prezi.com
https://dl.bandicam.com
https://dl.google.com
https://dl.tvcdn.de
https://dl1.cdn.filezilla-project.org
https://dl3.xmind.net
https://download.cdburnerxp.se
https://download.gimp.org
https://download.microsoft.com
https://download.royalapplications.com
https://download.skype.com
https://download.splunk.com
https://download.sublimetext.com
https://download.teamviewer.com
https://download.techsmith.com
https://download.tortoisegit.org
https://download.visualstudio.microsoft.com
https://download3.vmware.com
https://download3.xnview.com
https://downloadmirror.intel.com
https://downloadplugins.citrix.com
https://downloads.arduino.cc
https://downloads.bluebeam.com
https://downloads.hpe.com
https://downloads.plex.tv
https://downloads.sourceforge.net
https://downloadus1.teamviewer.com
https://downloadus2.teamviewer.com
https://downloadus4.teamviewer.com
https://e3.boxcdn.net
https://endpoint920510.azureedge.net
https://files.zimbra.com
https://fpdownload.macromedia.com
https://ftp.osuosl.org
https://github.com
https://hipchat-ops.s3.amazonaws.com
https://knowledge.autodesk.com
https://launch.getgo.com
https://master.dl.sourceforge.net
https://media.inkscape.org
https://meetings.webex.com
https://na19.salesforce.com
https://neevia.com
https://nmap.org
https://nodejs.org
https://notepad-plus-plus.org
https://packages.vmware.com
https://phoenixnap.dl.sourceforge.net
https://pilotfiber.dl.sourceforge.net
https://pkware.cachefly.net
https://s3.amazonaws.com
https://secure.logmein.com
https://secure.mozy.com
https://secure-appldnld.apple.com
https://slack-ssb-updates.global.ssl.fastly.net
https://sourceforge.net
https://storage.googleapis.com
https://superb-dca2.dl.sourceforge.net
https://superb-sea2.dl.sourceforge.net
https://support.citrix.com
https://support.microsoft.com
https://swdl.bluejeans.com
https://technet.microsoft.com
https://telerik-fiddler.s3.amazonaws.com
https://the.earth.li
https://vorboss.dl.sourceforge.net
https://web.mit.edu
https://www.citrix.com
https://www.dotpdn.com
https://www.fosshub.com
https://www.goodsync.com
https://www.hipchat.com
https://www.jam-software.com
https://www.microsoft.com
https://www.mozypro.com
https://www.piriform.com
https://www.rarlab.com
https://www.realvnc.com
https://www.scootersoftware.com
https://www.telerik.com
https://www.tracker-software.com
https://www.uvnc.eu
https://www.wireshark.org

 

Additional Information

 

  • To obtain the IP for vendor sites you can ping the vendor site or contact the vendor to obtain this information. We are unable to provide a list of IP addresses due to the varied dynamic IP addresses being used by the vendors. It may be easier to create an exception for an entire domain rather than entering all specific URLs, you can usually do so by entering the exception in this format:
    • *.domain.com.

 

Affected Product(s)

 

Shavlik Protect

Ivanti Patch for Windows Servers

URL exception list for Shavlik Patch For Microsoft System Center - Patch for SCCM (04-10-2018)

$
0
0

Purpose

 

This article provides a list of URLs that may be required to download catalog content and patches when using Shavlik Patch for Microsoft System Center and Ivanti Patch for SCCM.

 

Description

 

The following URLs may be used to download updates and must allowed through firewalls, proxies and web filters.

 

ftp://ftp.mozilla.org
http://34e34375d0b7c22eafcf-c0a4be9b34fe09958cbea1670de70e9b.r87.cf1.rackcdn.com
http://aimp.su
http://airdownload.adobe.com
http://app.oldfoss.com
http://appldnld.apple.com
http://ardownload.adobe.com
http://cache.lumension.com
http://cache-download.real.com
http://ccmdl.adobe.com
http://cdn01.foxitsoftware.com
http://cdn02.foxitsoftware.com
http://cdn09.foxitsoftware.com
http://cdn1.evernote.com
http://classicshell.net
http://content.ivanti.com
http://d.7-zip.org
http://dl.google.com
http://dl2.xmind.net
http://download.adobe.com
http://download.betanews.com
http://download.ccleaner.com
http://download.cdburnerxp.se
http://download.documentfoundation.org
http://download.filezilla-project.org
http://download.gimp.org
http://download.imgburn.com
http://download.macromedia.com
http://download.microsoft.com
http://download.nullsoft.com
http://download.oldfoss.com
http://download.oldfoss.com:81
http://download.pdfforge.org
http://download.piriform.com
http://download.royalapplications.com
http://download.skype.com
http://download.splunk.com
http://download.teamviewer.com
http://download.techsmith.com
http://download.videolan.org
http://download.virtualbox.org
http://download.windowsupdate.com
http://download.winzip.com
http://download2.operacdn.com
http://download3.operacdn.com
http://download3.vmware.com
http://download3.xnview.com
http://download4.operacdn.com
http://downloadarchive.documentfoundation.org
http://download-origin.cdn.mozilla.net
http://downloads.hpe.com
http://downloads.pdf-xchange.com
http://downloads.sourceforge.net
http://downloadus2.teamviewer.com
http://files2.zimbra.com
http://fpdownload.macromedia.com
http://ftp.adobe.com
http://ftp.mozilla.org
http://ftp.opera.com
http://ftp.ussg.indiana.edu
http://ftp.utexas.edu
http://get.geo.opera.com
http://gigenet.dl.osdn.jp
http://install.nitropdf.com
http://jaist.dl.sourceforge.net
http://javadl.oracle.com
http://javadl.sun.com
http://jsimlo.sk
http://mirror.clarkson.edu
http://mirror.nexcess.net
http://mirror.os6.org
http://mirror2.layerjet.com
http://mirror6.layerjet.com
http://mirrors.syringanetworks.net
http://mozy.com
http://olive.download.pdfforge.org
http://openoffice.cs.utah.edu
http://orange.download.pdfforge.org
http://osdn.dl.osdn.jp
http://packages.vmware.com
http://pspad.poradna.net
http://pumath.dl.osdn.jp
http://purple.download.pdfforge.org
http://releases.mozilla.org
http://sourceforge.net
http://support.citrix.com
http://support.citrixonline.com
http://support1.uvnc.com
http://supportdownload.apple.com
http://teal.download.pdfforge.org
http://tenet.dl.sourceforge.net
http://ufpr.dl.sourceforge.net
http://www.7-zip.org
http://www.apache.org
http://www.coreftp.com
http://www.cutepdf.com
http://www.fosshub.com
http://www.goodsync.com
http://www.jam-software.com
http://www.mirrorservice.org
http://www.peazip.org
http://www.piriform.com
http://www.rarlab.com
http://www.realvnc.com
http://www.tightvnc.com
http://www.uvnc.com
http://www.uvnc.eu
http://www.wireshark.org
http://xh.yimg.com
https://airdownload.adobe.com
https://allwaysync.com
https://archive.apache.org
https://assets.cdngetgo.com
https://astuteinternet.dl.sourceforge.net
https://atlassian.jfrog.io
https://ayera.dl.sourceforge.net
https://bitbucket.org
https://cdn.gomlab.com
https://cdn1.evernote.com
https://clientupdates.dropboxstatic.com
https://content.ivanti.com
https://d1ilhw0800yew8.cloudfront.net
https://data-cdn.mbamupdates.com
https://desktopassets.prezi.com
https://dl.bandicam.com
https://dl.google.com
https://dl.tvcdn.de
https://dl1.cdn.filezilla-project.org
https://dl3.xmind.net
https://download.cdburnerxp.se
https://download.gimp.org
https://download.microsoft.com
https://download.royalapplications.com
https://download.skype.com
https://download.splunk.com
https://download.sublimetext.com
https://download.teamviewer.com
https://download.techsmith.com
https://download.tortoisegit.org
https://download3.vmware.com
https://download3.xnview.com
https://downloadplugins.citrix.com
https://downloads.hpe.com
https://downloads.plex.tv
https://downloads.sourceforge.net
https://downloadus2.teamviewer.com
https://downloadus4.teamviewer.com
https://e3.boxcdn.net
https://endpoint920510.azureedge.net
https://fpdownload.macromedia.com
https://ftp.mozilla.org
https://ftp.osuosl.org
https://github.com
https://hipchat-ops.s3.amazonaws.com
https://knowledge.autodesk.com
https://launch.getgo.com
https://master.dl.sourceforge.net
https://media.inkscape.org
https://meetings.webex.com
https://neevia.com
https://nmap.org
https://notepad-plus-plus.org
https://packages.vmware.com
https://phoenixnap.dl.sourceforge.net
https://s3.amazonaws.com
https://secure.logmein.com
https://secure.mozy.com
https://secure-appldnld.apple.com
https://slack-ssb-updates.global.ssl.fastly.net
https://storage.googleapis.com
https://superb-dca2.dl.sourceforge.net
https://superb-sea2.dl.sourceforge.net
https://support.citrix.com
https://swdl.bluejeans.com
https://telerik-fiddler.s3.amazonaws.com
https://the.earth.li
https://web.mit.edu
https://www.citrix.com
https://www.fosshub.com
https://www.goodsync.com
https://www.hipchat.com
https://www.jam-software.com
https://www.mozypro.com
https://www.piriform.com
https://www.realvnc.com
https://www.scootersoftware.com
https://www.uvnc.eu
https://www.wireshark.org

 

Additional Information

 

  • license.shavlik.com is required for activation the license on the product.
  • If using the Shavlik Patch plugin with SCCM or Ivanti Patch for SCCM, you may also want to review the following for certificate site requirements:  Certificate verification sites to allow for Shavlik Patch
  • To obtain the IP for vendor sites you can ping the vendor site or contact the vendor to obtain this information. It may be easier to create an exception for an entire domain rather than entering all specific URLs, you can usually do so by entering the exception in this format: *.domain.com.

 

Affected Product(s)

 

Ivanti Patch for SCCM

Shavlik Patch for Microsoft System Center

How To: Setup and Configure Alert Subscriptions in Patch for SCCM 2.4

$
0
0

Purpose

 

The purpose of this document is to discuss the setup and configuration of alerts in Ivanti Patch for SCCM 2.4.

 

Description

 

Initial Configuration

 

     1. In order to best utilize the alerts, you will want to make sure SCCM has email subscriptions configured. Go to Administration > Site Configuration > Sites > Configure Site Components > Email Notification.

 

 

     2. Configure Email settings according to local SMTP setup.

 

     3. Once email settings are configured, go to Monitoring > Ivanti Patch > Manage Alerts to view available alerts.

 

 

Available Alerts

 

There are a total of 3 alerts that can be configured. They are as follows:

 

  1. Catalog Update Failure - This alert is to notify you when an error occurs during the downloading or importing of a new catalog.
  2. Updates Published - This alert is to notify you when updates for products you have chosen to publish in an automated task have been published and are available for deployment.
  3. Publication Failure - This alert is to notify you when updates you've chosen to publish have failed to publish.

 

Alert Configuration

 

Each alert has the following options to uniquely configure each alert.

 

 

  1. Enabled - This specifies whether the alert is disabled or enabled. If an alert is disabled, the Active check box is not used and no email notifications are sent.
  2. Active - This setting is to make the alert active or inactive.
    1. Last triggered on and Last triggered at indicate which SCCM server the alert was triggered by and when the alert was triggered in an MM/DD/YYYY HH:MM:SS UTC time format.
  3. Severity - This setting is to customize the priority/importance level you wish to place on a given alert.
    1. Informational - This only indicates that an event has occurred
    2. Warning - This indicates an event that could potentially interrupt service if unattended.
    3. Critical - This indicates a configuration problem preventing Ivanti Patch for SCCM from working properly
  4. Manage subscriptions - This is used to add/remove any email addresses that you want to receive an email notification when an alert is triggered.
    1. To add an email, type in a valid email address in the email address box, then click add. This will show in the 'Current subscribers to this alert' field.
    2. To remove an email, highlight an email address, then click 'Remove Subscriber'.

 

If using Shared settings, any emails configured in Manage subscriptions can be viewed by all other users of the console.

 

  • Example Email Alert

 

Additional Information

 

Microsoft TechNet Article on Configuring Alerts - Configuring Alerts in Configuration Manager

 

How To: Configure and Use Shared Settings Between Users in Patch for SCCM 2.4

 

Affected Product

 

Ivanti Patch for SCCM 2.4

How To: Configure and Use Shared Settings Between Users in Patch for SCCM 2.4

$
0
0

Purpose

 

The purpose of this document is to discuss the Shared settings options available in the Patch for SCCM 2.4 release. This version can be downloaded here.

 

Description

There are 6 unique settings that can be configured to be shared amongst users. Those settings are:

 

  1. WSUS Server name and Port (Includes Timestamp settings)
  2. License activation key
  3. Scheduled Task (Scheduled Publishing)
  4. Offline Settings
  5. Composite and Smart Filters
  6. Alert Subscriptions

 

Be extremely careful when changing any of these shared settings, as it will affect all other Patch for SCCM administrators who are also using shared settings.

Initial Configuration

 

     1. Install/Upgrade your Patch for SCCM plugin to the 2.4 version.

     2. Once upgraded, open Settings, then click on Shared Settings.

    3. Click the box for 'Use Shared Settings' to enable this feature.

 

This setting will need to be checked under any additional users after first install or upgrade from version 2.3.

 

WSUS Server Name and Port (Includes Timestamp settings)

 

  • Within the WSUS configuration, the WSUS server name whether its set as Hostname, FQDN, or IP, will be retained across users.
  • Port Number will also be retained across accounts. This will also include the SSL settings, if applicable
  • The WSUS Signing certificate, as long as it is in the Local Certificate store, the certificate data will be retained.
  • If used, a timestamp server/URL will be retained to be used for timestamping packages.

 

 

 

License Activation Key

 

 

 

Scheduled Task

 

 

  • For any previously created scheduled task, the Schedule tab will show the following:

 

  • If a user clicks 'Modify task', the following message is seen.

 

Please make note that the user modifying the task will become the owner of the task and will delete the previously scheduled task. The user making the change will show in the Task created by 'Domain\Username' for machine 'Machinename' at the top of the window.

 

Offline Settings

 

  • Local Source folder configuration will be retained across users. If using a network folder versus a local folder on the SCCM server, you will need to ensure that all users have access to the share to avoid any access errors or publishing issues.

 

  • If you are running the plugin in a disconnected environment, make sure 'Run disconnected' is selected.
  • For more information on Offline options, please visit the help page here

 

Composite and Smart Filters

 

  • When creating a composite or smart filter for the first time, when creating a new smart filter or composite filter, select the option for Shared to allow the filter to be shared with other users.

 

 

  • Any shared filters, will be listed with (Shared) at the end of the name. ex: Chrome (Shared)

 

  • If a new filter is created as a shared template, and later is needed to be made private, open the edit window for the filter and click 'Copy to Private Filters'.

 

  • If a filter was created before upgrading to Patch for SCCM 2.4, the filter will be stored as private. In order to make the template available to be shared, open the edit window for the filter and select 'Copy to Shared Filters' at the bottom of the window.

 

  • After copying to a shared state, both the private filter created before upgrade and the shared filter will be listed in the list of filters.

 

Alert Subscriptions

 

  • To access Ivanti Patch Alerts, go to Monitoring > Ivanti Patch > Manage Alerts

 

  • By default, all alerts are enabled, but only Updates Published is active.
  • Any changes made to active state or emails in 'Manage subscriptions' will be available to all users.

 

 

Additional Information

 

WSUS Server - Help page

How to activate or update Ivanti Patch for SCCM 2.3+ Licensing

How to Process a Manual (Offline) Activation for Ivanti Patch for Windows 9.3 or Patch for SCCM 2.3+

How to Set Up an Automatic Schedule for Publishing and Synchronizing Updates

Offline Options - Help page

How To: Use Smart Filters and Composite Filters in Shavlik Patch

How To: Setup and Configure Alert Subscriptions in Patch for SCCM 2.4

Shared Settings - Help page

 

Affected Product

 

Ivanti Patch for SCCM 2.4

Patch for SCCM Scheduled Publication Task - Failed to schedule the task using the Microsoft Scheduler.

$
0
0

Purpose

 

The purpose of this document is to discuss the cause of the error "Failed to schedule the task using the Microsoft Scheduler. Please verify the user name and password." when trying to schedule an automated publication task in the Patch for SCCM plugin.

 

Symptoms

 

When attempting to schedule a publication task, the error mentioned will appear when trying to save the task.

 

 

In the Shavlik Patch.log file, the logs would show the following:

 

Exception: Task Scheduler  -  A specified logon session does not exist. It may already have been terminated. (Exception from HRESULT: 0x80070520)      Shavlik Patch      4/10/2018 10:22:15 AM 1 (0x0001)

Some domain policy settings prevent scheduled tasks.  Check with your network administrator or if applicable, try using the setting of 'Now'.      Shavlik Patch      4/10/2018 10:22:15 AM 1 (0x0001)

 

Cause

 

This issue is caused by a setting in Local Security Policy that prevents storage of passwords and credentials being enabled. 

 

 

 

Resolution

 

Change the setting forNetwork access: Do not allow storage of passwords and credentials for network authentication from Enabled to Disabled.This change can be done from Local Security Policy on a specific machine or from GPO.

 

Local Security Policy

 

     1. Launch a run window (Win+R) and search secpol.msc

 

     2. When Local Security Policy loads, go to Local Policies > Security Options.

 

     3. Find the setting 'Network access: Do not allow storage of passwords and credentials for network authentication' in the list. Right-click and go to Properties.

 

     4. In the properties window, change the setting from 'Enabled' to 'Disabled'. Then click 'Apply' to save the change.

 

 

Group Policy Editor

 

     1. Load Group Policy Management from a domain controller or machine with RSAT tools installed.

 

     2. Right-click on the policy that you wish to modify, then click 'Edit'.

 

 

     3. Go to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

 

 

     4. Find the setting 'Network access: Do not allow storage of passwords and credentials for network authentication' in the list. Right-click and go to Properties.

 

     5. In Properties window, check the box for 'Define this policy setting' and ensure the setting is configured to 'Disabled'. Click 'Apply' to save the changes.

 

 

     6. After saving, go to SCCM server and force the Group Policy to be updated by opening an admin command prompt, then run the command: gpupdate /force

 

 

     7. After making the change, return to the Ivanti Patch for SCCM plugin, and save the scheduled auto-publishing task. If successful, the following message will show:

 

 

Additional Information

 

https://blogs.technet.microsoft.com/askperf/2012/04/18/task-scheduler-error-a-specified-logon-session-does-not-exist/

 

 

Affected Products

 

Ivanti Patch for SCCM 2.3+

How to activate or update Ivanti Patch for SCCM 2.3+ Licensing

$
0
0

Purpose

 

This document outlines how to activate or update the license for Shavlik Patch 2.3.

 

Steps to Activate or Update the license

 

  1. Open the SCCM Console, and navigate to Software Library
  2. Under Software Updates, right-click Ivanti Patch and select Settings
  3. Navigate to the License tab, and click Enter / refresh license key
  4. If needed, click Configure proxy to setup proxy information
  5. Enter your license key under 2. Enter your activation key(s)


    1. You can add multiple licenses using the + button
    2. You can remove expired licenses using the X button
  6. Once all licenses are updated, click Activate online now

Additional Information

 

If you need to perform an offline license activation, please see the article:  How to Process a Manual (Offline) Activation for Ivanti Patch for Windows 9.3 or Patch for SCCM 2.3+

 

Affected Products

 

Ivanti Patch for SCCM 2.3

Ivanti Patch for SCCM 2.4

How to Process a Manual (Offline) Activation for Ivanti Patch for Windows 9.3 or Patch for SCCM 2.3+

$
0
0

                                                                                                         

Purpose

 

This document provides steps to perform an offline or manual activation of the Ivanti Patch for Windows 9.3 or Patch for SCCM 2.3+.

 

Description

 

If you are unable to activate Ivanti Patch for Windows 9.3 or Patch for SCCM 2.3+. over an Internet connection for any reason, you have to option to choose the "Manual Activation" function. Use the steps below to perform a manual (or offline) activation of Shavlik Protect.  If file transport from the secure offline network to an online network is not allowed, follow instructions to use the DisconnectedLicenseInfo.txt file.

 

Open the license activation window:

Protect - click "Help" > "Enter/refresh license key"

Patch - click "Software Library" > "Software Updates", right-click "Shavlik Patch" and choose "Settings", click the "License" tab, then click "Enter/refresh license key"

 

 

Steps to create a license activation file

    1. Select an activation mode (either "Product or bundle license" or "Trial mode")
    2. Paste or type your key into the "Enter your activation key(s)" field
    3. Select "Manual activation"
    4. Click "Create request"
    5. Files named LicenseInfo.xml and DisconnectedLicenseInfo.txt are generated and saved to the desktop of your console computer. These files contain the information needed to make an offline activation request
    6. Move the LicenseInfo.xml file to a computer with Internet access. If file transport from the secure offline network is not allowed, follow instructions under "If Secure to Non Secure network file transfer is not allowed" to use the information in DisconnectedLicenseInfo.txt
    7. On the Internet-connected computer, open a browser and go to https://license.shavlik.com/OfflineActivation
    8. Upload the LicenseInfo.xml file
    9. Download the processed license file and move it to the offline console computer
    10. Open the license activation window and import the processed license file to the console by selecting 'Import offline license' and selecting the processed license file

 

If Secure to Non Secure network file transfer is not allowed

Go to https://license.shavlik.com/OfflineActivation to enter this data as shown below:

disconnectlic.JPG

  • The web portal will process the license information and generate a license file
  • Download the processed license file and move it over to the offline console computer.
  • In the license activation window, click 'Import offline license' and select the processed license file

 

If for some reason you are unable to activate using the offline activation portal mentioned above, please open a case with support and send your manual activation file in using the support portal: support.ivanti.com

Please see this article if you need assistance registering: http://community.shavlik.com/docs/DOC-2265

 

Further details about activating the program can be found in the following pages from our online user guides:

Protect - https://help.ivanti.com/sh/help/Protect/OnlineHelp/92/enu/EN/Activation.htm

Patch - https://help.ivanti.com/sh/help/Patch/OnlineHelp/23/enu/PAT.htm#EN/License_Tab.htm

 

Affected Products

 

Shavlik Protect 9.2

Ivanti Patch for Windows 9.3

Ivanti Patch for SCCM 2.3

Ivanti Patch for SCCM 2.4


How to Set Up an Automatic Schedule for Publishing and Synchronizing Updates

$
0
0

Purpose

 

This document is intended to provide a basic walk-through of setting up and using automatic scheduling to publish and synchronize software updates via Ivanti Patch for SCCM, and to describe how some of this process works.

 

Setting Up an Automatic Schedule

 

1) Right click on the Ivanti Patch section, then choose Settings.

2) Go to the Schedule tab.

3) Check the box 'Schedule Download and/or Publication'.

4) Set up the schedule for the time(s) when you prefer this to take place.

5) Set up the 'At the scheduled time' section.

  • Publish the updates selected by this filter
    • Default filter is '*Latest not-published'
    • You can click the drop-down to choose any filters you've created to be used.
  • Checking 'Accept all metadata updates in the catalog' will allow the automatic publication to accept all revisions on updates previously published.
  • Checking 'Synchronize updates' will initiate a synchronization of software updates after publishing is complete.

  • 'Schedule the task to run as' will allow you to choose the account that the scheduled task will be run as.
    • If you set the 'Logged on user', you just need to type in the password. It will pull any required proxy authentication from the settings on the Proxy tab.
      • Example above
    • If you set a 'Different user' you'll need to set both User and password, and you will also be given the option to set proxy authentication for that user if needed.
      • Example below

 

Information Worth Noting

 

  • You can view the scheduled task(s) set up from Shavlik Patch within the Task Scheduler (taskschd.msc) on the system where Shavlik Patch is installed.
    • Expand Task Scheduler Library > click Shavlik Patch to see scheduled tasks set up for Shavlik Patch.

3.JPG

  • Only one automatic schedule can be set up at a time per logged on user.
  • If you want to stop or delete the automatic schedule that is set up, you can either;
    • Within Ivanti Patch Settings > Schedule tab, uncheck the 'Schedule Download and/or Publication' box.
      • The scheduled task should be deleted by doing the above.
    • Or, you can just go into Task Scheduler and delete the scheduled task.
  • There may be other scheduled tasks displayed because every time you run a publish, even 'publish now', Ivanti Patch for SCCM uses a scheduled task to run the operation.
  • If you are checking for tasks or history of tasks that were run within Task Scheduler, you may need to 'Enable All Tasks History'.

Untitled.jpg

 

 

Additional Information

 

Additional Information for Ivanti Patch for SCCM use and requirements can be found in the online documentation.

 

Affected Products

 

Ivanti Patch for SCCM 2.3

Ivanti Patch for SCCM 2.4

Scheduled Task Runs One Week Early or Not At All

$
0
0

Purpose

 

The purpose of this document is to highlight a Microsoft Windows Task Scheduler bug that can cause your scheduled console tasks to run a week early or not at all.

 

Symptoms

 

The Ivanti Patch for Windows Servers console is installed on Windows Server 2016 or Windows 10, and you have a monthly console task that is set to run on a specific occurrence of a day of the week (4th Wednesday, 2nd Saturday, etc.).  Occasionally, this task executes exactly one week early or not at all.

 

Cause

 

Microsoft has confirmed a bug in the Windows Server 2016/Windows 10 Task Scheduler that will execute scheduled tasks one week early or not at all when specific conditions are met:

 

  • The month does not start on Sunday
    • NOTE: This condition is stated by Microsoft, but we have had customers report this happening on months that began on Sunday as well
  • The monthly task is set to execute on a specific occurrence of a day of the week (4th Wednesday, 2nd Saturday, etc.)
  • The date the task is scheduled to execute is a multiple of 7 (7th, 14th, 21st, or 28th)

 

If these conditions exist and the task is scheduled to execute on the 7th, the task will not run.

If these conditions exist and the task is scheduled to execute on the 14th, 21st, or 28th, the task will execute one week early.

 

This calendar from Microsoft's TechNet post regarding the issue illustrates the affected days of 2018.  Tasks scheduled days circled in red will execute one week early, while tasks scheduled on the days circled in grey will not execute.

As noted above, we have had customers report that this bug affected days in April, even though the month started on Sunday.  We recommend planning as though the bug will affect you in any month.

 

Resolution

 

There is no workaround, but Microsoft is aware of the issue and is working on a resolution.

 

Additional Information

 

Microsoft has acknowledged this issue and describes it further on their TechNet AskCore Japan blog:

https://blogs.technet.microsoft.com/askcorejp/2017/12/11/mouthly_tasks_issue/

 

Affected Product(s)

 

Shavlik Protect 9.2.x

Ivanti Patch for Windows Servers 9.3.x

How To: Use Smart Filters and Composite Filters in Ivanti Patch for SCCM 2.3+

$
0
0

Purpose

 

This document is intended to act as a basic guide on how you can use Smart Filters and Composite Filters in Ivanti Patch for SCCM.

 

Creating and Using a Smart Filter

 

The default Filter that is set to be used when viewing Ivanti Patch for SCCM items is "*All", which is intended to display all products and updates. However, it can make it easier to set up some filters that you can use to access certain information more quickly. There are a few default filters already set up, but for creating your own the simplest filtering to set up is a "Smart Filter". Here's how:

 

1) Click the 'New Smart Filter' button.

01.jpg

2) Create the filter with the rules you'd like to use. In this example, we're creating a basic filter to only show Mozilla Firefox updates by using the rule;

     Product > contains > Firefox

3) You can click 'Add Rule' if you want your smart filter to contain multiple rules. Click Save when you're done.

02.JPG

3) Click the 'Filter' drop-down and choosing the filter you want to use.

     You can see in the example below the filter Mozilla Firefox now only shows updates where the product contains "Firefox".

03.jpg

 

Creating and Using Composite Filters

 

Sometimes you may want a little more complicated filtering or need to combine multiple Smart Filters that you've set up. Composite Filters are the method to complete this.

 

1) For this example we're showing how you can use a Composite Filter to combine multiple Smart Filters, so let's set up another Smart Filter first. This one is intended as a filter to show only updates that are marked as superseded, using the rules; Is Superseded > contains > Yes.

04.JPG

2) Now click 'New Composite Filter'.

05.jpg

3) We are creating a filter that will combine the use of the other two previously created Smart Filters so we can display all Firefox updates that are superseded, using the rules;

     Start with updates selected by SmartFilter: 'Mozilla Firefox' then Filter again using SmartFilter: 'Superseded Updates'

4) Click Save when done.

06.JPG

5) Check the results of your new Composite Filter by choosing it from the Filter drop-down.

     In the example, you can see this filter successfully shows all the Firefox updates that are currently superseded.

07.jpg

 

Editing a Filter

 

1) Ensure the filter you want to edit is chosen in the drop-down, then click the 'Edit Filter' button.

     For the example we are editing our Composite Filter "All Superseded Firefox Updates".

08.jpg

2) You can edit existing rules/settings in the filter, but for this example we are going to add a filter into the mix so that the filter shows all the superseded Firefox updates from only the last 30 days.

3) Click the 'Add filter' button.

4) Set up the rules for the additional filter. In the example we use; Filter again using SmartFilter: 'Last 30 days'.

5) Change the name of the filter if you wish, then click Save.

09.JPG

6) If you changed the name of the filter, you will be prompted by the 'Save Filter' window stating the name of the filter was changed. It will provide you the old and new name.

7) Click 'Rename the existing filter' if you want to overwrite the old filter with the new one, or choose 'Save a copy with the new name' to save it separately.

10.JPG

8) You can see that the edited filter now displays only the Firefox updates that are superseded from the last 30 days.

11.jpg

9) As an alternate example showing how you can use some of the logic rules, we are editing the filter once more so that it shows any Firefox updates from within the last 30 days except those updates that are superseded. Rules in the example below;

Start with the updates selected by SmartFilter 'Mozilla Firefox' then 'Remove' updates slected by SmartFilter 'Superseded Updates then Filter again using SmartFilter: 'Last 30 days'

12.jpg

10) We renamed the filter again so the prompt comes up. We are saving this as a copy with a new name.

13.JPG

11) You can see now the list shows only the Firefox updates from the last 30 days that are NOT superseded.

14.jpg

 

That should be enough to get you started using the filters available in Ivanti Patch for SCCM. Try playing around with the logic rules and fields available to come up with your own Smart or Composite filters you like using best.

 

If there's anything you feel is missing from this feature, please feel free to submit a feature request at our Ivanti User Voice portal here.

 

 

Affected Products

 

Ivanti Patch for SCCM 2.3

Ivanti Patch for SCCM 2.4

Office 365 Support for Shavlik Protect/Ivanti Patch for Windows Servers

$
0
0

Overview

 

Support for Office 365 has been added to Shavlik Protect 9.2 and Ivanti Patch for Windows Servers 9.3.x

 

By default, Click-to-Run for Office 365 installations are automatically updated, but most administrators change the update source to control which updated builds are deployed and when they are deployed.  Now administrators can scan for and initiate these updates from Shavlik Protect 9.2 and Ivanti Patch for Windows Servers 9.3.x

 

Caveats

 

Office 365 patching:  The Office 365 patching process is different than other Microsoft patches.  Office 365 updates are installed by initiating the Microsoft Office 365 Click-to-Run update process which prompts the target machine to download the patch and install itself.

 

Where the Office 365 updates are downloaded from:  Updates are download from default source Microsoft Content Delivery Network (CDN) which requires a connection to the internet on the target machine.  Administrators who do not want their clients downloading from the internet can set their own download source.

 

 

Offline Virtual Machines: Due to the nature of this update, we do not support Office 365 patching on hosted offline virtual machines (VM).

 

Regarding Current Channel updates:  Most companies won't be using this channel in production due the higher update frequency. These updates interfere with line-of-business applications, add-ins and macros so time to test the updates is required any time there is an updated version of Office 365 ProPlus. Here is what is supported for customers who do use the Current Channel:

 

  • Build 6868.2060 and higher are supported.  (Released on May 4th, 2016)
  • Build 6769.2040 and lower are not supported.  (Released April 28th, 2016)

 

Regarding Deferred Channel updates:  This is more common channel customers will be using.  Updates for this channel are less frequent to allow time for testing.

 

  • We support all versions of the deferred channel.

 

Additional Information

 

 

Affected Product(s)

 

Shavlik Protect 9.2

Protect SDK 9.2

Ivanti Patch for Windows Servers 9.3.x

Why Office 365 Q numbers have D, FD or C appended to them

$
0
0

Purpose

 

The purpose of this document is to explain what it means when a D, FD, or C are appended to an Office 365 update Q Number.

 

Symptoms

 

Office 365 updates show up in scan results and reports with a D, FD, or C appended to the end of them.

 

Cause

 

The new letters indicate the following about the updates:

  • D - The update is deferred.
  • C - The update is current.
  • FD - The update is first release deferred.

 

Please see the following document for more information about patching Office 365 Office 365 Support for Shavlik Protect/Ivanti Patch for Windows Servers.

 

Affected Products

 

Ivanti Patch for Windows Servers 9.3.x

Shavlik Protect 9.2

Ivanti Patch Definition Naming Convention for Microsoft Patches

$
0
0

Overview

 

We have seen numerous changes to how Microsoft content was being organized through 2016 and 2017, the two main changes being the following:

 

1. On October 2016, Microsoft moved to a security bundle and monthly patch rollup model for Windows 7 and newer, supplying a single KB each respective branch.

2. On April 2017, Microsoft abandoned the Security Bulletin model that had been used for nearly 20 years.

 

The Ivanti Content team has worked hard to accommodate these changes, while attempting to preserve the previous bulletin organization. This allowed our customers to navigate these drastic changes with confidence, ensuring the updates released each month were properly accounted for. It has been a year since the last major change to Microsoft’s patching model.In response to this, the Ivanti Content team is normalizing our content to be more consistent each month. The more readable bulletin model is preserved, with the Microsoft KB appended to the end.

 

  • Starting on Patch Tuesday April 10, 2018 the ID names will change to follow the description below.
  • Windows 10 and Office updates are now under their own ID and content can be searched by KB numbers after Tuesday April 10, 2018

The new Security Bulletin mappings our products will be using: MS[YY]-[MM]-[PP]-[KB]

  • MS = Microsoft
  • YY = Year
  • MM = Month Released
  • PP =  Product
  • Followed by the KB number

 

Here are some examples:

  • MS18-03-OFF-3114416
    • All Office patches
  • MS18-03-IE-4089187
    • All IE patches
  • MS18-03-AFP-4088785
    • All Microsoft released Flash patches
  • MS18-03-W10-4088776
    • All Windows 10 patches, rollups and Deltas
  • MS18-03-SO7-4088878
    • Security Only Update for Windows 7 and Server 2008 R2
  • MS18-03-SO8-4088880
    • Security Only Update for Server 2012
  • MS18-03-SO81-4088879
    • Security Only Update for Windows 8.1 and Server 2012 R2
  • MS18-03-MR7-4088875
    • Monthly Rollup for Windows 7 and Server 2008 R2 (this is the rollup that includes non-security fixes)
  • MS18-03-MR8-4088877
    • Monthly Rollup for Server 2012 (this is the rollup that includes non-security fixes)
  • MS18-03-MR81-4088876
    • Monthly Rollup for Windows 8.1 and Server 2012 R2 (this is the rollup that includes non-security fixes)

 

  .NET Patches will follow a slightly different naming scheme:

  • MS[YY]-[MM]-[TT][PP]-[KB]
    • YY = Year
    • MM = Month
    • TT = Type (Security Only or Monthly Rollup)
    • PP = Product (.NET)
    • KB = Parent KB
  • MS17-12-SONET-1234567 MS17-12-MRNET-1234567
    • Security only patches associated with that parent KB
    • Security patch type
    • Monthly Rollup associated with that parent KB
    • Non-Security patch type

 

Non-security .NET Patches also have a slightly different naming scheme:

  • MSNS[YY]-[MM]-[TT][PP]-[KB]
    • YY = Year
    • MM = Month
    • TT = Type (Quality Preview or Quality Rollup)
    • PP = Product (.NET)
    • KB = Parent KB
  • MSNS17-12-QPNET-1234567 MSNS17-12-QRNET-1234567
    • Quality Preview patches associated with that parent KB
    • Non-Security patch type
    • Quality Rollup associated with that parent KB
    • Non-Security patch type

 

Additional Information

 

Additional Naming Conventions

  • QP = Quality Preview
  • NS = Non-Security

 

Microsoft released the following article for FAQ on the changes made: Security Updates Guide dashboard and API:

 

Q: Why is the security bulletin ID number (e.g. MS16-XXX) not included in the new Security Update Guide?

A: The way Microsoft documents security updates is changing. The previous model used security bulletin webpages and included security bulletin ID numbers (e.g. MS16-XXX) as a pivot point. This form of security update documentation, including bulletin ID numbers, is being retired and replaced with the Security Update Guide. Instead of bulletin IDs, the new guide pivots on vulnerability ID numbers and KB Article ID numbers.

 

Affected Products

 

Shavlik Protect

Ivanti Patch for Windows Servers

Ivanti Patch for SCCM

 

 

        

How to list Software Distribution patches in Ivanti Patch for Windows Servers

$
0
0

Purpose

 

The purpose of this document is to create an up to date list of Software Distribution patches in Ivanti Patch for Windows Servers using a Smart Filter in View > Patches.

 

Instructions

 

1.  Navigate to View > Patches and click on the New Smart Filter icon.

 

Creating a Smart Filter to list Software Distribution patches that are:

  • Not replaced by newer patches.
  • Available for download.
  • Specifically marked as Software Distribution.

 

1.   The Smart Filter will look like this.  Click Save/Rename once you configure the filter with these settings:

 

Creating a Smart Filter to list Software Distribution patches that are:

  • May or may not be replaced by newer patches.
  • Available for download.
  • Specifically marked as Software Distribution.

 

1.  The Smart Filter will look like this.  Click Save/Rename once you configure the filter with these settings:

 

Additional Information

 

 

Affected Product

 

Ivanti Patch for Windows Server 9.3.x


How To: Configure and Use Shared Settings Between Users in Patch for SCCM 2.4

$
0
0

Purpose

 

The purpose of this document is to discuss the Shared settings options available in the Patch for SCCM 2.4 release. This version can be downloaded here.

 

Description

There are 6 unique settings that can be configured to be shared amongst users. Those settings are:

 

  1. WSUS Server name and Port (Includes Timestamp settings)
  2. License activation key
  3. Scheduled Task (Scheduled Publishing)
  4. Offline Settings
  5. Composite and Smart Filters
  6. Alert Subscriptions

 

Be extremely careful when changing any of these shared settings, as it will affect all other Patch for SCCM administrators who are also using shared settings.

Initial Configuration

 

     1. Install/Upgrade your Patch for SCCM plugin to the 2.4 version.

     2. Once upgraded, open Settings, then click on Shared Settings.

    3. Click the box for 'Use Shared Settings' to enable this feature.

 

This setting will need to be checked under any additional users after first install or upgrade from version 2.3.

 

WSUS Server Name and Port (Includes Timestamp settings)

 

  • Within the WSUS configuration, the WSUS server name whether its set as Hostname, FQDN, or IP, will be retained across users.
  • Port Number will also be retained across accounts. This will also include the SSL settings, if applicable
  • The WSUS Signing certificate, as long as it is in the Local Certificate store, the certificate data will be retained.
  • If used, a timestamp server/URL will be retained to be used for timestamping packages.

 

 

 

License Activation Key

 

 

 

Scheduled Task

 

 

  • For any previously created scheduled task, the Schedule tab will show the following:

 

  • If a user clicks 'Modify task', the following message is seen.

 

Please make note that the user modifying the task will become the owner of the task and will delete the previously scheduled task. The user making the change will show in the Task created by 'Domain\Username' for machine 'Machinename' at the top of the window.

 

Offline Settings

 

  • Local Source folder configuration will be retained across users. Use a network share here to ensure that all users have access to the directory.

 

  • If you are running the plugin in a disconnected environment, make sure 'Run disconnected' is selected.
  • For more information on Offline options, please visit the help page here

 

Composite and Smart Filters

 

  • When creating a composite or smart filter for the first time, when creating a new smart filter or composite filter, select the option for Shared to allow the filter to be shared with other users.

 

 

  • Any shared filters, will be listed with (Shared) at the end of the name. ex: Chrome (Shared)

 

  • If a new filter is created as a shared template, and later is needed to be made private, open the edit window for the filter and click 'Copy to Private Filters'.

 

  • If a filter was created before upgrading to Patch for SCCM 2.4, the filter will be stored as private. In order to make the template available to be shared, open the edit window for the filter and select 'Copy to Shared Filters' at the bottom of the window.

 

  • After copying to a shared state, both the private filter created before upgrade and the shared filter will be listed in the list of filters.

 

Alert Subscriptions

 

  • To access Ivanti Patch Alerts, go to Monitoring > Ivanti Patch > Manage Alerts

 

  • By default, all alerts are enabled, but only Updates Published is active.
  • Any changes made to active state or emails in 'Manage subscriptions' will be available to all users.

 

 

Additional Information

 

WSUS Server - Help page

How to activate or update Ivanti Patch for SCCM 2.3+ Licensing

How to Process a Manual (Offline) Activation for Ivanti Patch for Windows 9.3 or Patch for SCCM 2.3+

How to Set Up an Automatic Schedule for Publishing and Synchronizing Updates

Offline Options - Help page

How To: Use Smart Filters and Composite Filters in Shavlik Patch

How To: Setup and Configure Alert Subscriptions in Patch for SCCM 2.4

Shared Settings - Help page

 

Affected Product

 

Ivanti Patch for SCCM 2.4

Obtaining and viewing logs for issues related to Patch for SCCM

$
0
0

Purpose

 

This document is meant to provide information about where to obtain logging related to Patch for SCCM.

 

Description

 

Starting with Microsoft System Center 2012 there is a new log reading tool available called CMTrace.

 

You can locate this on your Configuration Manager server under:

C:\Program Files\Microsoft Configuration Manager\tools\cmtrace.exe

 

We recommend creating a shortcut to this or setting this as the default log reader.

 

Locations of log files and useful information:

 

  • System Center Configuration Manager (SCCM) Server:
    • C:\Program Files\Microsoft Configuration Manager\logs
      • Contains all logs related to operations of Configuration Manager
      • Most useful log(s) when troubleshooting issues with Shavlik Patch:
        • wsyncmgr.log - WSUS synchronization operations
    • C:\Users\*SCCM-Admin*\Shavlik\Shavlik Patch
      • Contains both logs and datafiles/binaries used by Shavlik Patch plugin.
        • Logs found here:
          • AutoPublish.log - Contains logging of publishing process.
          • Shavlik Patch.log - Contains logging of Shavlik Patch plugin operations.
  • Client
    • For trouble with deployment of dependent action patches (Java or Apple) it can be beneficial to obtain the following:
      • C:\Windows
        • WindowsUpdate.log
      • C:\ProgramData\Shavlik\Installation
        • Contains files related to deployment of dependent action patches (Java, Apple). Collect and zip everything in this folder.
        • Note: This folder is automatically cleaned out after 30 days
      • C:\ProgramData\Ivanti\Patch\Installation (Applicable to Patch 2.4 published updates)

 

    • For trouble with scan and deployment of standard definitions, it can be beneficial to obtain the following:
      • C:\Windows\CCM\Logs
        • UpdatesDeployment.log - Deployments, SDK, UX.
        • UpdatesHandler.log - Updates, Download.
        • ScanAgent.log - Online/Offline scans, WSUS location requests.
        • WUAHandler.log - Update status (missing/installed - verbose logging), WU interaction.
        • UpdatesStore.log - Update status (missing/installed).
        • %windir%\WindowsUpdate.log - Scanning/Installation of updates.

 

The below table will help in understanding what log(s) may be most helpful during certain workflows:

 

ShavPatchLogTable.JPG

(Click to Enlarge)

 

Product(s)

 

Ivanti Patch for SCCM

Shavlik Patch for Microsoft System Center

(Formerly SCUPdates)

Report Views Guide

$
0
0

Purpose

 

This document describes how to use database views within SQL Server database queries to generate custom reports for Shavlik Protect/Ivanti Patch for Windows Servers (PWS).

 

When you install Protect/PWS it creates a number of defined views in the Protect SQL Server database. You can reference these views within custom queries that you write to extract exactly the information you want. By executing the custom queries and exporting the results to the format of your choice you effectively create your own customized reports for Protect/PWS.

The benefits of writing your own database queries are:

  • You can data mine the Protect database for the exact information you want.
  • You can go beyond the predefined reports provided within the console. While the predefined reports are sufficient for many organizations, you may have the need to produce one or more custom reports that provide more specific information about the status of your machines.
  • You can export the query results and present the information in the format of your choosing.
  • You can, of course, opt to write custom queries without using the Protect views. When you add the use of Protect views to your custom queries, however, you gain a number of other benefits:
    • The schema views will not change in future versions of Protect/PWS.
    • Future versions of the software may modify the tables in the database. By referencing Protect views in your queries rather than the tables, you will be guaranteed that your custom queries will not break when upgrading to future versions.
    • The queries are not as complex and are easier to write.
    • The views do some of the work for you. Your custom queries will not need to reference as many Protect database tables. The views join multiple tables to gather relevant information and they pull different columns from multiple tables.
    • Ivanti will continue to build out the Protect views in future versions, providing greater capabilities.
    • Custom queries can be shared by trusted members of the Shavlik/Ivanti community.

 

The process for creating a custom report is as follows:

  1. Familiarize yourself with the SQL Server database views that are provided with Protect/PWS.
  2. Write a database query that references the Protect views and that generates the information you want.
  3. Export the query results into the user-friendly format of your choosing.

 

Affected Products

 

Shavlik Protect Version 9.2

Ivanti Patch for Windows Servers 9.3

Ivanti Patch for SCCM (Formerly Shavlik Patch) Version History

$
0
0

Ivanti Patch for SCCM 2.4

Build 2.4.1488.0

Released April, 2018

New Features

The add-in to Configuration Manager 2012 contains the following new features:

  • Alerts: Alerts are now available that notify you of important events. You can customize the severity level of each alert configuration as you see fit: Informational, Warning, or Critical. You view active alerts within the product, and you can choose whether you want to receive alert notifications via email.
  • Shared Settings, Filter and Tasks: In previous releases, all settings, user-defined filters and recurring tasks were stored on a per-user, per-console basis. It is now possible to share these items between users and across consoles. This simplifies the setup process for other users and for yourself if you move between consoles. It also allows everyone to share useful filter definitions.

Users who opt-in to shared settings will take advantages of these changes:

    • Shared Settings: When one user opts-in to shared settings, key settings become available to all users at all consoles. These settings simplify setting up Ivanti Patch for all users on all consoles connected to the same site.
    • User-Defined Filters: Once you’ve opted-in to shared settings, you have the ability to create shared filters and to turn any private filters into shared filters. They instantly become available to you at other consoles and to all other users who opt-in to shared settings.
    • Shared Task: When a user opts-in to shared settings and schedules a recurring task to automatically publish updates, that task will be visible and editable on all consoles. It will also become the single recurring task for all users who opt in to shared settings.
  • Timestamp Server: You can now apply a timestamp to your WSUS packages during the publication process. One benefit to providing a timestamp is that you will not need to re-sign update packages when a WSUS signing certificate expires. This is because the timestamp allows the signature to be verified even after the signing certificate has expired.
  • New Grid Control: Information is now presented using a new grid control system.This provides many more capabilities for displaying, grouping, organizing and filtering your data columns.
  • Real-Time Status: Real-time status of tasks performed on the console is now shown in the grid.
  • Relaxed Version Matching Requirement: When using Patch for SCCM in an environment in which the WSUS Server and the SCCM console reside on different machines, the operating system versions of the two machines no longer need to match.
  • Updated Search Tool: The search tool used to locate updates in the top pane of the grid has been improved. It contains an updated syntax and has a new look.
  • Full Ivanti Rebrand: Images and icons have been updated to reflect the Ivanti brand. In addition, all references to Shavlik and LANDESK have been removed. Directory paths, folder names and scheduled tasks are automatically updated during the upgrade process.

 

Ivanti Patch for SCCM 2.3, Update 2

Build 2.3.974.0

Released August, 2017

 

This build resolves an incompatibility with System Center Configuration Manager version 1706.

Ivanti Patch for SCCM 2.3, Update 1

Build 2.3.960.0

Released March, 2017

 

New Features

The add-in to Configuration Manager 2012 contains the following new features:

  • Unlimited Third-Party Categories: The previous limit of 100 third-party vendor and product categories has been removed. You may now publish to as many third-party categories as are in your environment.
  • Rebranded to Ivanti Patch for SCCM
  • Resolved Several Issues: See the Ivanti Patch for SCCM Update 1 Release Notes  for details.

 

Shavlik Patch 2.3

Build 2.3.837.0

Released October, 2016

New Features

The add-in to Configuration Manager 2012 contains the following new features:

  • New Approach to Licensing:A Protect Cloud account is no longer needed to access and download the full Shavlik Patch catalog. Instead, a license key is now used to activate the program and access all required files.
  • Third-Party and Custom Catalogs:Shavlik Patch now supports the use of third-party catalogs and custom catalogs. A new Catalogs tab is provided on the Settings dialog and it shows which update catalogs are currently being used by the program. The Shavlik Catalog, which is the primary catalog, will always be available. Information about catalogs from other vendors may be provided by Shavlik and will appear on the Catalogs tab. You can also provide information about your own custom catalogs and catalogs from other vendors.

  • Bundles and Detectoids:Shavlik Patch now provides support for bundles and detectoids. A bundle is a collection of one or more updates. A detectoid is a type of update that can serve as a prerequisite check for other updates. These items are not currently contained within the primary Shavlik catalog, but they may apply to certain third-party catalogs.

  • Disconnected Environments (Offline Mode):Shavlik Patch now supports environments that do not have an Internet connection.

This capability is configured using the new Offline Options tab on the Settings dialog. A new File Downloader PowerShell script is provided to help you manually download catalog files and update files from an Internet-connected machine and move them to the disconnected console machine.

 

Shavlik Patch 2.2

Build 2.2.568.0

Released March, 2016

New Features

The add-in to Configuration Manager 2012 contains the following new features:

  • Manage Products: This new dialog enables you to:
    • View and edit which third-party vendor and product categories are being synchronized with the WSUS server and are deployable
    • Select the categories you want to be synchronized with Configuration Manager
    • Initiate a synchronization with WSUS
    • Delete product and vendor categories
  • Update Editor:Provides the ability to edit an individual update. This feature is targeted at advanced users who want to modify an update’s metadata and specify pre- and post-installation commands.

  • Local Source Folder:A local source folder can be defined to store updates. You might use this to:
    • Manually download updates prior to publication in order to speed the publication process

    • Manually download updates on a connected network and then move the updates to a secure, isolated network

    • Create an archive of all your published updates

  • New Toolbar Buttons:The following toolbar buttons are now available:
    • Edit: Used to modify an individual update’s metadata and to create and attach custom install scripts to an update.
    • Manage Products: Used to launch the Manage Products dialog.

    • Download: Used to download the selected update(s) to the folder specified on the Local Source tab of the Settings dialog.

    • Publish: Used to manually publish one or more third-party updates.

    • Unselect All: Used to unselect all updates that are currently selected in the Shavlik Patch grid.

    • Expire: Used to expire third-party updates.

    • Republish: Used to publish updates that were previously published.

    • Re-sign: Used to re-sign updates if your signing certificate has changed or has been renewed.

    • Delete: Use to delete an update from all deployments, deployment packages, Software Update Groups and WSUS.

    • Online Help: Used to access the Shavlik Patch user documentation and video tutorials that are available on the Shavlik website.

  • Search Tool:The Search tool enables you to quickly locate updates contained in the top pane of either the Shavlik Patch or the Published Third-Party Updates grid.

  • Metadata-Only Publication:When publishing an update, you now have the option to publish detection logic for the update but not the actual software update binaries. A new column in the Shavlik Patch and the Published Third-Party Updates grids indicates if an update has been published as metadata-only.
  • Enhancements to the Bottom Pane:New information is now contained in the bottom “details” pane, including the URL of the published CAB file, the name of the installable item file, and IAVA IDs.
  • Copy Contents:You can copy the content in the top and bottom panes to your computer’s clipboard. This enables you to paste that content into an email message, a spreadsheet program, etc.
  • Warn About Expiring Certificate:A warning will appear if your signing certificate is nearing its expiration date. The warning will advise you to install and distribute a new certificate so that you do not lose the ability to publish third-party updates.

 

Shavlik Patch 2.1

Build 2.1.810.0

Released February 24, 2015

 

This build contains two changes:

  • Support for New Certificate: Supports a change in the Shavlik SSL certificate.

  • Publishing Process: If you choose to publish an update Now (as opposed to scheduling the update for publication), you no longer need to specify credentials and the Microsoft Scheduler is no longer used.

Build 2.1.801.0

Released November, 2014

New Features

The add-in to Configuration Manager 2012 contains the following new features:

  • Configuration Checker: This utility is typically run immediately after Shavlik Patch is first installed. It is used to determine if you meet all requirements for using Shavlik Patch.
  • Composite Filters: A composite filter consists of two or more filters that are linked and that run in series. You can repeatedly narrow or expand your search of the updates within the Shavlik Patch grid by automatically running two or more filters back-to-back. A composite filter enables you to perform searches that involve both OR and AND logic.

  • Details Pane: A new bottom pane is provided whenever a single update is selected in the Shavlik Patch grid. This bottom pane contains detailed information about the selected patch.

  • Proxy Configuration: A new Proxy tab enables you to test and modify the proxy settings used by Shavlik Patch when accessing the Internet using your Web browser.

  • Supersedence: A new column in the Shavlik Patch grid indicates if an update has been superseded by another update. Detailed supersedence information is provided in the Details pane.

  • Metadata: Shavlik Patch now looks for metadata revisions whenever a new copy of the catalog is downloaded. You have the option to either immediately revise the updates in WSUS or ignore the new metadata.

  • Languages: A new Languages tab lets you choose which languages to display for those updates that have different packages for different languages. In addition, a Languages column is now provided in the Shavlik Patch grid. This new column identifies the different language versions that are available for each update.

  • End of Life Notification: If the version of Shavlik Patch that you are using is nearing its end of life date, a message will be displayed when you start Shavlik Patch. The message will indicate when the version will expire and it will provide a link to get the latest version.

Shavlik Patch 2.0

Build 2.0.574.0

Released February, 2014

New Features

The add-in to Configuration Manager 2012 contains the following new features:

  • An add-in is now available that allows you to manage the patching process for both Microsoft and non-Microsoft completely from within Microsoft System Center Configuration Manager. For customers who are using Configuration Manager 2012 or later, Shavlik Patch is no longer reliant upon System Center Updates Publisher (SCUP).
  • The add-in automatically acquires content updates from Shavlik each time Configuration Manager is opened (or once a day if Configuration Manager hasn’t been closed in that time).
  • The add-in includes the capability to automatically as well as manually publish third-party application updates to WSUS. Filters can also be applied that allow users to automatically publish only updates from certain vendors (e.g. publish only Java and Adobe updates).
  • The add-in provides robust support for Java updates when Java is in use.
  • The user can select updates to be expired, which removes published updates from WSUS. This is beneficial in cases where an update is superseded or for general file management on the WSUS server.
  • Provides streamlined handling of Apple updates to support applications such as Apple application support and Apple mobile device support.

Resolved Issues

  • When applying Java and certain Apple updates via the add-in configuration, users will no longer be required to perform manual steps to install updates. The updates are packaged in such a manner as to detect the need to automatically perform certain actions such as shutting down Java prior to installing an update.

How To: Delete Published Third-Party Updates in Ivanti Patch for SCCM

$
0
0

Purpose

 

The purpose of this document is to show how to delete previously publish updates in Patch for SCCM.

 

Description

 

     1. Go to Software Library > Software Updates > Published Third-Party Updates.

 

     2. Select the update(s) you wish to delete by checking the box to the left of the update.

 

     3. After selecting the update(s), proceed to click 'Delete' at the top of the window.

 

 

     4. A confirmation message will be presented. Click 'Ok' to proceed.

 

5. To check the status of the deletion, open the AutoPublish.log file. This log can be found in C:\Users\{CurrentUser}\Shavlik\Shavlik Patch.

 

Begin deleting updates. AutoPublish 3/12/2018 1:51:37 PM 6 (0x0006)

Expiring updates.... AutoPublish 3/12/2018 1:51:37 PM 6 (0x0006)

Successfully expired update: Cisco WebEx Meeting Center 32.11.0.388 AutoPublish 3/12/2018 1:51:38 PM 6 (0x0006)

Successfully expired 1 of 1 selected updates. AutoPublish 3/12/2018 1:51:38 PM 6 (0x0006)

Removing updates from deployments AutoPublish 3/12/2018 1:51:39 PM 6 (0x0006)

The updates are not in any Software Update Group AutoPublish 3/12/2018 1:51:39 PM 6 (0x0006)

Delete '\\PatchSCCM.Swanson.com\WsusContent\84/2FF1D4BC6EAC0825A6F8DA629A858965C71ED584.cab' : Success AutoPublish 3/12/2018 1:51:41 PM 6 (0x0006)

Delete '\\PatchSCCM.Swanson.com\UpdateServicesPackages\717a9676-8413-43c6-a8c7-b330de391b85' : Success AutoPublish 3/12/2018 1:51:41 PM 6 (0x0006)

Delete 'Cisco WebEx Meeting Center 32.11.0.388' : Success AutoPublish 3/12/2018 1:51:41 PM 6 (0x0006)

Category synchronization: starting AutoPublish 3/12/2018 1:51:57 PM 3 (0x0003)

Category synchronization: Complete AutoPublish 3/12/2018 1:52:24 PM 6 (0x0006)

Finish deleting updates. AutoPublish 3/12/2018 1:52:24 PM 6 (0x0006)

AutoPublish returned code 0:  Success AutoPublish 3/12/2018 1:52:24 PM 1 (0x0001)

Deleting updates will both expire from WSUS and remove the update(s) from any Software Update Group they existed in.

Additional Information

 

 

Affected Product(s)

 

Shavlik Patch for SCCM 2.3.x

Ivanti Patch for SCCM 2.3.x

Viewing all 1352 articles
Browse latest View live