6 Replies Latest reply on Nov 24, 2015 7:59 AM by cwinning

    Multiple re-scans required

    mills63 Rookie

      Hi Guys

       

      Just finished scanning 300 servers but had to rescan at least 4 time to get a clear 0 patch's missing result

      First scan deployed and executed successfully

      Second scan MS15-121 required executed successfully

      Third scan MS15-115 required executed successfully

      Fourth scan all clear

       

      Has anyone else got the same issue.

       

      The other thing was it was taking about an hour after the reboot to report back that it was successful every time.

       

      Thanks

       

      Steve Mills

      Information Strategy and Technology Services

      University of South Australia

      e: steve.mills@unisa.edu.au

       

       

       

        • 1. Re: Multiple re-scans required
          cwinning CommunityTeam

          Hello,

           

          You can thank Microsoft for this.

           

          MS15-022, MS15-115 and MS15-121 need to be installed in a specific order.  Protect will detect the correct ordered patch missing and once it is deployed the next patch will show as missing.  Since we are unable to string together patches in a specific order. it could take 3 scan and deployments to install the patches. 

           

          Install order below:

           

           

          1

          2

          3

          Windows 7/2008R2

          MS15-122

          MS15-121

          MS15-115

           

           

           

           

          Windows 8/2012

          MS15-122

          MS15-115

          MS15-121

           

          Excerpt from one of the bulletins, [1] being for windows 7/2008R2 and [2] being for windows 8/2012.

          [

          1]Note that update 3101746 in MS15-115 and update 3101246 in MS15-122 are releasing concurrently with update 3081320 in this bulletin, MS15-121. Customers who intend to install all three updates manually on Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1 should install the updates in the following order: 3101246 first, 3081320 second, and 3101746 third (this is taken care of automatically for customers with automatic updating enabled). For more information see the Known Issues section of Microsoft Knowledge Base Article 3105256.


          [2]Note that update 3101746 in MS15-115 and update 3101246 in MS15-122 are releasing concurrently with update 3081320 in this bulletin, MS15-121. Customers who intend to install all three updates manually on Windows 8 or Windows Server 2012 should install the updates in the following order: 3101246 first, 3101746 second, and 3081320 third (this is taken care of automatically for customers with automatic updating enabled). For more information see the Known Issues section of Microsoft Knowledge Base Article 3105256.

           

          Thanks,

          Charles

          • 2. Re: Multiple re-scans required
            Rookie

            We have almost the same symptoms but we are using BMC as patching tool which use the Shavlik engines and catalogs.

             

            Only on Windows 2008 R1 Service Pack 1 servers patch MS15-121 is not detected in the first analyze (MS15-115 and MS15-122 are found).

            After installing these 2 patches with reboot in the next analyze fase MS15-121 is found missing.

             

            I don;t read in the Microsoft article that the server must be rebooted before the patch is found as missing only the sequence which is different for Windows 2008 R2 as for Windows 2012. In the past MS write install this patch reboot and then the next is found missing (see MS15-065).

            • 3. Re: Multiple re-scans required
              mills63 Rookie

              Thanks for the clarification.

              But the second part of the problem is also an issue.

               

              "The other thing was it was taking about an hour after the reboot to report back that it was successful every time."

               

              What would be causing this.

               

              Thanks

              Steve

              • 4. Re: Multiple re-scans required
                cwinning CommunityTeam

                Steve,

                 

                There are no known issues with Tracker updating, it's possible actions are needed at reboot to fully install the patches and they are taking a long time.  Itt could also be a communication issue, the deployment process will try to contact the Protect server if the initial attempts fail.  Support could take a look at information from a target machine to see what went on during the deployment.

                 

                Support Portal

                Include the C:\Windows\ProPatches folder minus the patches folder.

                A screenshot of the Tracker screen showing the update would help too.

                 

                Thanks,

                Charles

                • 5. Re: Multiple re-scans required
                  fdhand3 Rookie

                  Does Protect not have some way to issue a command that will force itself to scan>deploy until the scan comes back with zero patches missing?  That would be such a useful feature....

                  • 6. Re: Multiple re-scans required
                    cwinning CommunityTeam

                    Hello,

                     

                    It does not, I tend to agree it would be a useful feature.

                     

                    Submit A Feature Request.

                     

                    Thanks.

                    Charles