The Patch Group trumps all other setting in the Scan Template. In other words, include a Software Distribution item in the Patch Group and the scan engine will scan for it whether you have enable Software Distribution enable or not. The change was made to reduce the guess-work out of Scan Template filtering and Patch Group combinations. You can use the same Patch Group, but going forward you need to make sure your not adding Software Distribution (or other unwanted patches) items to it. FF10-024 QFF3617 is marked as a Software Distribution item.
You can remove the Software Distribution items from the Patch Group by grouping by Patch Type Description, highlighting all of the Software Distribution items and then clicking on Remove Selected.
Let me know if you have any questions.
All software distribution items have been removed from the patch group after sorting by the patch type description. Shavlik seems to be picking up the patches for different software and then marking these as software distribution items, therefore trying to push these items out to systems that do not have the software installed.
If this is the way you are now designing Shavlik then people will have big issues as this means we need to have different patch groups tailored specifically to what each machine has installed. By this I mean if one machine has firefox installed and another has adobe reader and firefox then we would need two different patch groups created. The first would need windows patches plus firefox, the second would need windows patches plus firefox plus adobe reader patches.This gets particularly messy as you have different matrix of products on different systems. For three different software products you are the talking about six different patch groups to cover the different combinations that these products can be installed on systems.
Can you please advise if what I am saying is correct? If so we may need to downgrade to 9.1 again in order to ensure our systems are fully patched
What you are saying is incorrect Larry, it doesn't work that way. If yours scans are attempting to install products even after removing all Software Distribution items from the Patch Group then there is a defect in EAR.
We need a WebEx asap, send an email to firstname.lastname@example.org and I will set one up. Please indicate the best time.