Welcome to the community!
Hopefully these documents will be helpful for you with this issue:
Good Morning Adam,
Thx for your quick response.
The actual scan of the systems run pretty fast. Sometimes it takes a while but that is due to the fact that I'm patching remote servers from a central shavlik instance.
The issue I'm seeing is that the actual installation of the patches and the reporting of the status of those enrolled patches is very slow. The example from yesterday longes 2,5 hours for 120 "normal" Windows Hotfixes.
1 of 1 people found this helpful
I have a few questions about the setup/environment:
Does this seem to happen deploying to all your machines or just certain individual systems or groups?
Does the same behavior occur whether you patch a large group of machines simultaneously or just a single machine?
What antivirus software are you currently running? Is it possible to test deployment to one of the systems displaying this issue with the antivirus software disabled to ensure it's not causing an issue? If it is found to cause slowness with patch deployment it would most likely help to create an exception for the C:\Windows\Propatches folder with your antivirus software.
We could also take a look at the deployment logging created on the target system. It would be best to use the below steps to obtain the best trace logging of a patch deployment:
How to obtain Deployment Logs
(For agentless deployment)
It may be best to enable target side verbose logging before running deployment and obtaining these logs. See the following document on how to do so:
- On the machine you deployed patches to, navigate to C:\Windows\ProPatches
- Locate the CL5.log, dplyevts.log, and Safereboot.log and copy to a new folder on the desktop.
- Navigate to C:\Windows\ProPatches\Scheduler.
- Locate the Scheduler.log and add it to the folder created in step 2 so all logs are together.
- Zip and send all the logs.
I see those issues when patching one machine as well as many. Of course it takes longer to patch many because the issues aggregate.
The machine I patched lately didn't have an antivirus-program installed by then but normally we use Trend Micro Office Scan 10.6
I've copied the logfiles but how can I send them to you? I can't post them here in the forum.
Thx for your help. I'll open a case.
Did you get an answer on this?
Yes. At the end of the day it was a closed firewall. The servers that where patched couldn't report back to the Shavlikserver. As a matter of fact the patching seemed to be never completed.