Quantcast
Channel: Configuration Manager 2012 - Security, Updates and Compliance forum
Viewing all 6382 articles
Browse latest View live
↧

Software updates fail to install...

November 7, 2013, 2:04 pm
$
0
0

Howdy...

Trying to test a couple updates deployed to 5 computers and 4 of them fail with the following error:

Error Code:  0X87D00664

Error Description:  Updates handler job was cancelled.

Any thoughts???

The log file says in RED:  Execution cancelled by job.  Update will not be monitored.

Here's the Updateshandler.log file

ContentAvailable notification received from CAS. UpdatesHandler11/7/2013 2:56:53 PM4880 (0x1310)
Contents downloaded successfully for Update (45dd224d-d9fc-421d-a885-1788fd05f92a).UpdatesHandler11/7/2013 2:56:53 PM4880 (0x1310)
ContentAvailable notification received from CAS. UpdatesHandler11/7/2013 2:56:53 PM1392 (0x0570)
Contents downloaded successfully for Update (e0ed4bab-1c29-4e00-8a22-4502d10810f9).UpdatesHandler11/7/2013 2:56:53 PM1392 (0x0570)
Download completed for the job ({2D60929F-765F-4BC9-BDE2-047BAEFE045D}).UpdatesHandler11/7/2013 2:56:53 PM4880 (0x1310)
Successfully sent job ({2D60929F-765F-4BC9-BDE2-047BAEFE045D}) success completion to the SdmAgentUpdatesHandler11/7/2013 2:56:53 PM1392 (0x0570)
CompleteJob received from SDM.UpdatesHandler11/7/2013 2:56:53 PM4880 (0x1310)
Complete - Job ({2D60929F-765F-4BC9-BDE2-047BAEFE045D}) Cleanup.UpdatesHandler11/7/2013 2:56:53 PM4880 (0x1310)
CompleteJob - Job ({2D60929F-765F-4BC9-BDE2-047BAEFE045D}) removed from job manager list.UpdatesHandler11/7/2013 2:56:53 PM4880 (0x1310)
Initiating updates scan for checking applicability.UpdatesHandler11/7/2013 2:56:54 PM4196 (0x1064)
Successfully initiated scan.UpdatesHandler11/7/2013 2:56:54 PM4196 (0x1064)
Updates scan completion received, result = 0x0. UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Method (Apply) called from SDM.UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Starting job with id = {59209229-A0D3-49F9-A01C-78DA0F259F04}UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Initiating Scan. Forced = (0)UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Successfully initiated scan for job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Scan completion received for job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Evaluating status of the updates for the job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Initiating download for the job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Starting download on action (INSTALL) for Update (45dd224d-d9fc-421d-a885-1788fd05f92a)UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Ignoring update state (DOWNLOAD_READY) change in job state (2)UpdatesHandler11/7/2013 2:56:54 PM4196 (0x1064)
Contents already available.UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Starting download on action (INSTALL) for Update (e0ed4bab-1c29-4e00-8a22-4502d10810f9)UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Contents already available.UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Download completed for the job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Job in ready state. Triggering software update policy.UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
IMaintenanceCoordinator::GetTaskState failed because MTC job has not been created yet.UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Request a MTC task for execution request request id: {37CBE4F6-C75C-489A-9F95-4123BFF99C92}UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
MTC task with id {37CBE4F6-C75C-489A-9F95-4123BFF99C92}, changed state from 0 to 4UpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
Job {59209229-A0D3-49F9-A01C-78DA0F259F04} is starting executionUpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
Sending ack to MTC for task with id: {37CBE4F6-C75C-489A-9F95-4123BFF99C92}UpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
Job ({59209229-A0D3-49F9-A01C-78DA0F259F04}) already connected, start processingUpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
Initiating Scan. Forced = (0)UpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
Successfully initiated scan for job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
MTC task with id {37CBE4F6-C75C-489A-9F95-4123BFF99C92}, changed state from 4 to 5UpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
No change in the handle state. Ignoring.UpdatesHandler11/7/2013 2:56:54 PM4348 (0x10FC)
Scan completion received for job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
Evaluating status of the updates for the job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
CDeploymentJob::InstallUpdatesInBatch - Batch or non-batch install is not in progress for the job ({59209229-A0D3-49F9-A01C-78DA0F259F04}). So allowing install..UpdatesHandler11/7/2013 2:56:54 PM4880 (0x1310)
CDeploymentJob::InstallUpdatesInBatch - Resetting install flag to false as method is completeUpdatesHandler11/7/2013 2:57:21 PM4880 (0x1310)
Job {59209229-A0D3-49F9-A01C-78DA0F259F04} is cancelling executionUpdatesHandler11/7/2013 3:12:54 PM6540 (0x198C)
CancelProcessing for job ({59209229-A0D3-49F9-A01C-78DA0F259F04}) - Finishing the updates processing.UpdatesHandler11/7/2013 3:12:54 PM6540 (0x198C)
Execution cancelled by job. Update will not be monitoredUpdatesHandler11/7/2013 3:12:54 PM6540 (0x198C)
Raising event:
[SMS_CodePage(437), SMS_LocaleID(1033)]
instance of SMS_SUMAgentUpdateError_Internal_Mom
{
ClientID = "GUID:57638E3E-A16A-4A7B-8311-DD83D1147B33";
DateTime = "20131107211254.488000+000";
MachineName = "LAB-APPSENSE";
ModelName = "Site_720F847F-DBAB-43FE-BC06-ABA85246D7E5/SUM_45dd224d-d9fc-421d-a885-1788fd05f92a";
ProcessID = 3996;
SdmPackageVersion = "1";
SiteCode = "CHI";
ThreadID = 6540;
UpdateId = "45dd224d-d9fc-421d-a885-1788fd05f92a";
Win32ErrorCode = 2278557284;
};
UpdatesHandler11/7/2013 3:12:54 PM6540 (0x198C)
Execution cancelled by job. Update will not be monitoredUpdatesHandler11/7/2013 3:12:54 PM6540 (0x198C)
Raising event:
[SMS_CodePage(437), SMS_LocaleID(1033)]
instance of SMS_SUMAgentUpdateError_Internal_Mom
{
ClientID = "GUID:57638E3E-A16A-4A7B-8311-DD83D1147B33";
DateTime = "20131107211254.550000+000";
MachineName = "LAB-APPSENSE";
ModelName = "Site_720F847F-DBAB-43FE-BC06-ABA85246D7E5/SUM_e0ed4bab-1c29-4e00-8a22-4502d10810f9";
ProcessID = 3996;
SdmPackageVersion = "1";
SiteCode = "CHI";
ThreadID = 6540;
UpdateId = "e0ed4bab-1c29-4e00-8a22-4502d10810f9";
Win32ErrorCode = 2278557284;
};
UpdatesHandler11/7/2013 3:12:54 PM6540 (0x198C)
Execution completed for the job ({59209229-A0D3-49F9-A01C-78DA0F259F04}).UpdatesHandler11/7/2013 3:12:54 PM6540 (0x198C)
Successfully sent job ({59209229-A0D3-49F9-A01C-78DA0F259F04}) success completion to the SdmAgentUpdatesHandler11/7/2013 3:12:54 PM4872 (0x1308)
CompleteJob received from SDM.UpdatesHandler11/7/2013 3:12:54 PM4040 (0x0FC8)
Complete - Job ({59209229-A0D3-49F9-A01C-78DA0F259F04}) Cleanup.UpdatesHandler11/7/2013 3:12:54 PM4040 (0x0FC8)
CompleteJob - Job ({59209229-A0D3-49F9-A01C-78DA0F259F04}) removed from job manager list.UpdatesHandler11/7/2013 3:12:54 PM4040 (0x0FC8)

↧
Search

How to download "Microsoft Security Bulletin MS16-039" using ADR for June Month

June 16, 2016, 6:23 am
$
0
0

This update Microsoft Security Bulletin MS16-039 was first released in April and has been rereleased in June. As I run my ADR giving the criteria "date Released or revised as Last 1 month", I don't see this in my software update group.

Since it has been re-released by Microsoft, we need to apply them this month as well to make our systems compliant. Any idea how to get these updates downloaded to the Software update group?

Thanks

↧
↧

ConfigMgr 1602 error 0x87D00666(-2016410010) while installing Update

June 22, 2016, 9:06 pm
$
0
0

Dear Folks,

As i have recently upgraded to Config Mgr 1602 and it went very smooth upgrade. But after a few days found annoying issue regarding updates. PC's esp with Windows 10 are not installing updates. Every time trying to manual install it prompts this error as shown in snapshot  

As per error description, 

2016410010 2278557286 0x87D00666 Software updates cannot be install outside service window

But i have not configured any service windows on any collection. Then which service window is preventing from updates to instal. Furthermore, no error found in any logs file. Almost gone through all files.

I hope raised concern is clear. Waiting for your help and suggestion

Thank You

REGARDS DANISH DANIE


↧

Clients sending Huge data to SUP

June 23, 2016, 6:50 am
$
0
0

We get sometimes complaints from Remote Sites that the bandwidth gets choked as certain computer is sending Huge Data to the SUP.

I checked for top cs-uri -stem talkers for that particular IP and found below:

cs-uri-stem                                                SUM(ALL cs-bytes) 
---------------------------------------------------- -----------------
/ClientWebService/client.asmx                        969745331

The thing I don't get is why client will send this much data for /ClientWebService/client.asmx?

PS: Frequent Errors in WUAHandler for the affected PC:

Scan failed with error = 0x8024400a.

Scan failed with error = 0x80072efe.


↧

Windows Server 2003 patching after EOL - WSUS Issue

August 16, 2015, 7:23 am
$
0
0

Hi,

I am asking WSUS question here hoping someone might have tried it before and had same experience. We are SCCM 2012 R2 SP1 shop and trying to patch Windows servers 2003 with Microsoft Connect program. I have downloaded the CAB and SUs but when I run CSAIMPORT command then I always get following error no matter what I do

 "Directory not found: %1. Please check if you specified the full path".

I have tried following commands with no luck

WSUSUtil CSAIMPORT "%location_of_cab_file%" "%location_of_payload_folder%" "%location_of_working_dir%"

I have moved around cab and payload to different locations, ran command with and without working dir but no luck. I have also noticed following in SoftwareDistribution.log after it spits out above error on screen.

"WsusTestKeys.PreformCheckAuest.cab signature is invalid

WsusUtil.1WsusTestKeys.AreTestKeysAllowedServer Test key check: test keys are NOT allowed"

Anyone like to shed some lights on? BTW, SCCM is synching with MS without any problem on the same server but it wouldn't do when manually imported.

Thanks


↧
↧

Windows updates default to microsoft servers instead of local DP

June 23, 2016, 7:22 am
$
0
0

I have a System Center 2012 R2 Configuration Manager SP1 installed as a single server with MP and DP configured locally.

I have been plagued by updates preferring microsoft WSUS servers instead of our local DP, which is a problem since some of m my servers are blocked out of the local domain.

I have tried almost everything I could think of apart from reconfigure the software update point which I would like to avoid. I suspect that it could have something to do with my IIS settings, since it seems to not receive content location from DP and defaults to WSUS servers as it is configured in the deployment rules.

If anyone would be so kind as to point me in a direction that might also be the problem I would be greatly appreciated and if anybody could link to or explain what steps the configuration manager takes when downloading updates so I could go step by step and see where it stops.

↧

Impoting Custom Support Updates in Windows Server 2012 R2 with WSUS 4.0 installed

June 23, 2016, 8:51 am
$
0
0

Hello All,

I was trying to import custom support security updates using Wsusutil.exe in to our Windows Server 2012 R2 environment with WSUS 4.0 installed.

I was using the batch file consists of following : "C:\Program Files\Update Services\Tools\WsusUtil.exe" csaimport <Cab file location> <Payload directory> . Cab file location and Payload directory was given shared location initially. The batch file didn't run. Then i just created a empty folder on local machine and given it as Payload Directory .Strange that Payload directory is Empty folder but command ran. The batch file ran and it got executed. Then i found out that the updates got imported to SCCM. When i tried to download them, it gave an HTTP Error 404. When i was surfing through net, i found that 404 is not found error. Tried couple of times but gave the same error. Then i was trying many methods and suddenly saw the updates were downloaded. Can anyone suggest was the command used by me to import the updates is correct and also Why isn't shared location not working for Payload Directory.

Any help would be much appreciated.

Thank you,

Girish K

↧

SCCM 2012 R2 to R2 Sp1 What needs to be backed up

June 23, 2016, 6:37 pm
$
0
0

Hello,

I have found some great post of how to upgrade sccm 2012 r2 to r2 sp1. I realize I need to make a back up the database residing on a separate server.  In addition, I need take vm snapshots of the primary, and secondary servers, before upgrading.  But what about taking vm snapshot of distribution servers or wsus servers? are they effected? What about backing up the wsus sql express database before the upgrade?  Does the upgrade require a reboot of any of these servers?

Thanks so much for your help,

Mark

↧
Search

Internet Based Clients and Software Updates

June 24, 2016, 10:35 am
$
0
0
We are in the process of trying to manage our DMZ servers using SCCM. We have communication between our Primary Site/DP and the DMZ client systems. The systems are able to install applications pushed via SCCM, but when pulling updates they attempt to pull from Windows Update.  Unfortunately, they can not reach Windows Update because have external communications blocked at the firewall. I was under the impression that if the systems failed to reach Windows Update they would fallback to the assigned DP, but that is not happening. Am I wrong in my understanding?
↧
↧

compliance 3 - update group (per update)

June 24, 2016, 5:38 am
$
0
0
trying to pull compliance report for one of my site. while generating report it asking me for software update group name and collection. I put the proper software update group and collection name but my problem is actually I have 59 systems in that collection but when report pulled it is showing only 15 systems instead of 59.
↧

Computers not installing updates, but applications deploy.

June 13, 2016, 12:52 pm
$
0
0

I'm having issues with one of our Primary sites, where the updates are not installing, but deploying applications seems to be working just fine.  I've checked a couple computers logs, and I have found the following:

For the C:\Windows\WindowsUpdate.log; this log for the most part either the log shows no errors and stats that 0 updates found, or they are getting the following error of 8024400D.

2016-06-13	17:16:42:005	1028	10d0	Report	Uploading 1 events using cached cookie, reporting URL = http://servername.domain:8530/ReportingWebService/ReportingWebService.asmx
2016-06-13	17:16:42:020	1028	10d0	PT	WARNING: ReportEventBatch failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2016-06-13	17:16:42:020	1028	10d0	PT	WARNING: SOAP Fault: 0x00012c
2016-06-13	17:16:42:020	1028	10d0	PT	WARNING:     faultstring:Fault occurred
2016-06-13	17:16:42:020	1028	10d0	PT	WARNING:     ErrorCode:InvalidCookie(1)
2016-06-13	17:16:42:020	1028	10d0	PT	WARNING:     Message:(null)
2016-06-13	17:16:42:020	1028	10d0	PT	WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/ReportEventBatch"
2016-06-13	17:16:42:020	1028	10d0	PT	WARNING:     ID:bab75319-3475-402a-a859-e35bd72240a4
2016-06-13	17:16:42:020	1028	10d0	Report	WARNING: Reporter failed to upload events with hr = 8024400d.

In the loactions.log file, I get the following.

Current AD site of machine is ADSITE	LocationServices	6/13/2016 6:51:24 PM	4232 (0x1088)
sRelatedContentIDs is <RelatedContentIDs><RelatedContentID ID="Content_b789cb05-d808-440a-a954-38ec92434754.1"/></RelatedContentIDs>. Length = 110.	LocationServices	6/13/2016 6:51:24 PM	4232 (0x1088)
Calling back with empty distribution points list	LocationServices	6/13/2016 6:51:24 PM	4232 (0x1088)
Created and Sent Location Request '{D8888DA9-603D-43E8-8F7C-143128C4A3A4}' for package {C3D664A8-AE37-491A-8D0F-7519E9C3ABC8}	LocationServices	6/13/2016 7:47:55 PM	5712 (0x1650)
Executing Task LSRefreshLocationsTask	LocationServices	6/13/2016 7:51:21 PM	4128 (0x1020)

The Current AD Site will be in the log about 50+ times over the course of a few seconds, then the process repeats every hour.  Every once in a while I'll get a line, Failed to cancel WSUS location request.  In the Updateshandler.log I get the following:

Successfully initiated scan.	UpdatesHandler	6/10/2016 8:14:12 PM	6068 (0x17B4)
CUpdatesAgent::FinalConstruct entered	UpdatesHandler	6/10/2016 10:49:03 PM	3172 (0x0C64)
Initiating updates scan for checking applicability.	UpdatesHandler	6/10/2016 10:49:04 PM	2592 (0x0A20)
This just repeats every 4 hours. On new computers WUAHandle.log doesn't get created on those that have it, it doesn't get updated.  I thought it was a client issue, perhaps a bad update agent so I reset the Update Services on the computers, and reset the service, deleted SoftwareDistribtuion folder and reset Windows updates.  WSUS is operating normal, the app pool is running. I can get to the website.  There is a GPO that has the WSUS server and port, I tested without applying that to computer, without success.  All SCCM components are reporting healthy. I'm not sure where to look next,  I am running a CAS with 2 Primaries, the Primary in question is Server 2012, the other two are Server 2012 R2, with SCCM 2012 R2 SP1 with CU3.  Any suggestions on next steps?


↧

SCEP Client for Linux Definition updates

June 26, 2016, 7:24 pm
$
0
0
Hi there we have installed all of the clients and wanted to create a definition mirror on an Internet facing RHEL we have configuration appears quite simple except what URL do I point the SCEP client on the Internet facing box so it can pull down definitions and place them in the Directory other non internet facing RHEL servers will point to for Definitions?

Edward

↧

Help with modifying an existing SCCM 2012 compliance report

June 26, 2016, 5:33 pm
$
0
0

Hi All

Complete newb with SQL queries and SRSS.

I would like to modify the existing SCCM 2012 built report (Management 2 - Updates required but not deployed).

Basically i need a report like this, but shows all required updates for a collection, whether it is downloaded or not, or deployed or not.

Have duplicated this report with a different name, but struggling which part to modify in query.

Your help would be much appreciated.

Thanks, DM.

↧
↧

Update Scan not scanning all the updates

June 27, 2016, 4:51 am
$
0
0

Hi,

We are using SCCM 2012 R2 SP1 CU2 . We are patching our Windows servers with latest updates using SCCM.

We have taken outage of 8 hours to update critical servers.

below is problem description:

At first time maximum updates are downloaded and installed and server restarted and servers are showing compliant. We ran manual scan /evaluation cycle but no update, all servers are showing compliant in SCCM report "Update enforcement history"

Now suddenly after 1 or 2 day , machine are showing 1-2 updates  are installed and pending for restart and compliant status changed to pending restart.

Now this is the problem , Application Owner escalated it why it is showing pending restart now , it should have been updated in given 8 hours outage window.

It should scan and update all required updates immediately. I also noticed there was not error while agent scanning /evaluating updates. Can someone help to get rid of the update scan issue.? what can be the fix?

Regards

Pankaj

MS Forum, PankajR

↧

KB2446710 - needed by clients but showing as superseeded

January 4, 2016, 3:00 am
$
0
0

Hi,

I've been doing a review to make sure all our boxes are getting the correct updates applied.  Everything looks good apart from kb2446710.  If I make a server perform an update check against Windows Update it says it is applicable but SCCM doesn't offer it up and the log shows that it is superseeded:

Skipped update c7db1d28-9160-4e63-9eae-2c7df322dc00 - Security Update for .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2446710) because it was superseded.  $$<SMS_WSUS_SYNC_MANAGER><01-04-2016 10:18:41.755+00><thread=2164 (0x874)>

The WU catalog shows that the above update has been replaced by:

Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2604115)

KB2604115 is in SCCM and deployed to the systems in question.

This is causing me a spot of bother as scans from Secunia or Nessus are showing it as missing.  Sure I can download it and make a package but I'd like to what is going on here.

Thanks


↧
Search

Applying CU5 to SP1

June 27, 2016, 11:34 am
$
0
0
If we do an in-place update to SCCM 2012 SP1 (5.00.7804.1000) with CU5 will the client agents be required to be updated as well? I would rather just do the CU5 to allow for Server 2012 functionality, and plan a new installation at the current version as a larger project.

↧

Software center Wrong Time

November 11, 2015, 7:20 pm
$
0
0

Just one server its showing me "available after 1/1/0001"   ,  why is this?

We use SCCM2012 R2

↧
↧

SCCM 2012R2 - To Find Linux Machines with Encrypted or Non-Encrypted Disk or Volume

June 27, 2016, 3:53 pm
$
0
0

I have total 800 Windows machines in SCCM, I tried to include 10 Linux machines in my SCCM environment and they all are now visible in the Console Device Collection. There are 2 machines with disk/volume encrypted using "LUKS"and all other 8 machines are non-encrypted.

I need to find out if there is a way to distinguish between encrypted and non-encrypted machines looking at the "Resource Explorer" properties or finding from Attributes or its Value or any other reporting method?

Has anyone had any success or experience with this? 

Angur J Patel



↧

Modifying SCCM default report "Infected Computer" for endpoint protection to get all computers except cleaned.

June 28, 2016, 2:53 am
$
0
0

Hi Everyone,

Please help me to get the infected computers reports except the rows having cleaned in Remediation column.  I was trying to modify in report builder but unable to do.

Please suggest whether to add to filter to the columns or need to modify the below query.

Query:

select 
ResourceID,
ComputerName, 
ComputerStatus, 
EngineVersion,
MIN(DetectionTime) as FirstDetection, 
MAX(DetectionTime) as LastDetection, 
LastFullScanDateTimeStart,
LastFullScanDateTimeEnd,
LastQuickScanDateTimeStart,
LastQuickScanDateTimeEnd,
COUNT(*) as InfectionCount
from
(
   select 
        t.ResourceID,
        ISNULL(s.Netbios_Name0 + '.' + s.Full_Domain_Name0, s.Netbios_Name0) as ComputerName,
        ai.ComputerStatus, 
        ah.AntivirusSignatureVersion EngineVersion, 
        ah.LastFullScanDateTimeStart LastFullScanDateTimeStart, 
        ah.LastFullScanDateTimeEnd LastFullScanDateTimeEnd, 
        ah.LastQuickScanDateTimeStart LastQuickScanDateTimeStart, 
        ah.LastQuickScanDateTimeEnd LastQuickScanDateTimeEnd, 
        t.DetectionTime,
        (case when t.ActionSuccess=0 then 1 else 0 end) as Failed,
        (case when t.ActionSuccess=1 and t.PendingActions!=0 then 1 else 0 end) as Pending,
        (case when t.ActionSuccess=1 and t.PendingActions=0 then 1 else 0 end) as Cleaned        
   from v_GS_Threats t
   join fn_rbac_R_System(@UserSIDs)  s on t.ResourceID=s.ResourceID
   join fn_rbac_FullCollectionMembership(@UserSIDs)  c on t.ResourceID=c.ResourceID
   left join fn_rbac_ThreatCatalog(@UserSIDs)  tc on t.ThreatID=tc.ThreatID
   left join v_GS_AntimalwareHealthStatus ah on t.ResourceID = ah.ResourceID
   left join v_GS_AntimalwareInfectionStatus ai on t.ResourceID = ai.ResourceID
   where c.CollectionID=@CollectionID 
      and DATEADD(day, 0, DATEDIFF(day, 0, t.DetectionTime)) between @StartDate and @EndDate
      and (@ThreatName is NULL or @ThreatName='' or tc.Name=@ThreatName or t.ThreatName=@ThreatName) 
      and (@CleaningAction is NULL or t.CleaningAction=@CleaningAction )
      and (@UserName is NULL or @UserName='' or t.UserName=@UserName) 
) as Infections

group by ResourceID, ComputerName, ComputerStatus,EngineVersion, LastFullScanDateTimeStart, LastFullScanDateTimeEnd, LastQuickScanDateTimeStart, LastQuickScanDateTimeEnd
having (@InfectionStatus is  NULL)
or (@InfectionStatus=1 and SUM(Failed)>0)
or (@InfectionStatus=2 and SUM(Pending)>0 and SUM(Failed)=0)
or (@InfectionStatus=3 and SUM(Cleaned)>0 and SUM(Pending)=0 and SUM(Failed)=0)
order by FirstDetection


↧

updates compliance in a client

June 27, 2016, 11:56 pm
$
0
0

Hi all

i have got a question regarding the windows update compliance.

If any update uninstalled manually in a client , will the same be reflected in SCCM or WSUS compliance? What happens when the wua scans for the updates? will the uninstalled update get installs again or not?

Thanks in advance.


↧
Viewing all 6382 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>