Deployment Failures Caused By Blocked Files

Version 9

    Purpose

     

    This document addresses an issue where patches fail to install, but others succeed

     

    Symptoms

     

    Deployed patches remain stuck at Executing the Deployment Tracker. Windows Update is set according to this document:Best Practice: Windows Automatic Updates and other patches will report back as installed.

     

    Cause

     

    Patches may be blocked because they come from an online location. This can be determined in the file's properties, under the General tab.

    Screenshot_12.png

     

    Your patch download location can be found  by going to Tools > Operations, and checking the "Patch Download Directory" under the "Downloads" tab. The default location is C:\ProgramData\LANDESK\Shavlik Protect\Console\Patches.  If a patch is blocked, the installation will start, but will prompt the user with a security warning. Since Protect installs patches under the Local System account, such a prompt will go unanswered and the install will wait until the machine is rebooted.  This will prevent the deployment process from continuing.

     

    Resolution

     

    Agentless Deployments

     

    • Remove the file from C:\Windows\ProPatches\Patches on all affected machines.
    • This document outlines how to remove a specific file with Custom Actions: Custom Action - Delete Specific File
    • On the Protect Console, under C:\ProgramData\LANDESK\Shavlik Protect\Console\Patches, navigate to the file and unblock it.
    • Proceed with the deployment, and the unblocked file will then be pushed out to the target machines.

     

    Agent Deployments Using Distribution Servers

     

    • Remove the file from C:\ProgramData\LANDesk\Shavlik Protect\Agent\Patch\PatchData on all affected machines - Note: Agents cannot run Custom Actions
    • On the Protect Console, under C:\ProgramData\LANDESK\Shavlik Protect\Console\Patches, navigate to the file and unblock it.
    • On the Distribution Server used by the agent, remove the patch file.
    • Re-run a Patch Downloads sync under Tools > Operations > Distribution Servers.
    • Your agent will download the unblocked version of the file.

     

    Affected Product(s)

     

    Protect 9.x