I'm not certain there's much need for outside the box methods since our agent can perform all the tasks that you want to have happen here.
If it makes it any easier for you - you can use an installation script to push out our agent for manual installations.
See this help document:
I hope that helps.
Thanks for your reply. So I can do a manual installation of the agent, but what do I do from there? I need to be able to trigger a scan, review the results, deploy patches, then rescan to verify the patches took and that no more are needed. I need to be able to do this all programmtically (or via a script) instead of relying on a human to point and click with a mouse.
The agent uses a policy that's set up in your Protect console so that it can do scanning and deployment automatically. Once the policy is set up and you install the agents to client systems there would be no further interaction required.
The agent quick start guide might help you get a better idea of how the agents work.
Two Three questions:
1. So from what I understand from what you're saying is that there is an agent policy I can configure that would cause, upon the agent checking in, an endless cycle of scan/patch/scan/patch/scan/patch/scan/patch until the system is fully patched? Note: this cannot be timed, scheduled, etc (can't be "every day at 3am" or something like that). I need to cause an immediate scan/patch on a new server.
2. I need to be able to programmatically validate when a server has completed patching. How do I do this?
3. After the agent is installed, how do I (programmatically) trigger another scan/patch/scan/patch/scan/patch/etc cycle?
1 of 1 people found this helpful
If you want more functionality that you can use some scripting for you might want to look into using Protect's hfcli.exe which can be found in the program files directory for Protect - default directory for v.9 is C:\Program Files\LANDesk\Shavlik Protect.
If you open a command prompt and cd to this program files folder, run hfcli.exe -? to obtain the help for it.
Otherwise, I would suggest looking into using our SDK if you want more scripting/programming functionality. More info on that here: http://www.shavlik.com/products/patch-sdk/
I've been looking at hfcli, but I don't see where to specify a patch template. Is this not available?
I have also sent a request in for the SDK.
For what you have specified you want this to do I honestly think the best/closest route would be the SDK. The bad thing with hfcli is you will be limited to scanning, and you can choose the patch types to scan for, but not based on a template.
-pt is used to specify the patch type
Here are the patch types:
Patch types include
(1) Security patches (default)
(4) Security tools
(8) Non-Security patches
(9) Security and non-security patches
(13) Security, non-security and tools
Example: hfcli.exe -pt 13
This would run a scan for Security Patches, Security Tools, and non-security patches on the local system.