Deployment never completes - Tracker status stuck at Executing

Version 3

    Purpose

     

    The document will provide a possible solution for deployments that do not process past Executed.  This example is for Windows 7, but this can happen on any OS.

     

    Symptoms

     

    Deployments of 3rd part patches complete without issue, but deployment of Microsoft patches are extremely slow or never progress past Executed in the Deployment Tracker. View > Deployment Tracker

    It's important to verify if the Microsoft patch installer was executed.  You can do this by opening the Task Manager on the target machine, go to the process tab and view processes for all users.

     

    It's important to verify if the Microsoft patch installer was executed.  You can do this by opening the Task Manager on the target machine, go to the process tab and view processes for all users.

     

    Cause

     

    The target machine is set to 'Install updates automatically' in the Windows Update settings through GPO or local security configuration.   This configuration causes conflicts between the Protect deployment and Microsoft's Windows Update deployment.  The issue is often severe enough to slow Microsoft patch installs to the point they look hung or stuck. 

     

    You can verify the Windows Update settings:

     

    • Local Windows Update Configuration

    • GPO Computer Configuration > Administrative Templates > Windows Components > Windows Update.

     

    Resolution

     

    The resolution is to set Windows Update to 'Never check for updates'.  You can set this locally on the target machine or through GPO depending on your companies security settings.

     

    • Local Windows Update Configuration

     

    • GPO Computer Configuration > Administrative Templates > Windows Components > Windows Update.

     

    • You should manually reboot the target machine(s), scan again with Protect then deployment the patches again.

     

     

    Additional Information

     

    Best Practice: Windows Automatic Updates

     

    Affected Product(s)

     

    Protect 9.1+