Reboot block

Hi,

We have a patch policy for critical MS patches running every week. As you know, some of the patches requires a reboot and the user gets the 2hr postpone option from ZCM. I'm fairly new to Zenworks and haven't quite figured out how to block that feature. The reason being that we want to run a scripted wakeup/reboot every sunday instead. Besides, if the user runs a regular reboot ZCM won't register it as successful.

Can someone with more experience help me?

Best regards, Nils.
  • Okay, i found the option to turn off reboots in patch policy configuration. But why doesn't ZCM detect it as a sucessful patch if the comp is turned off manually? It's still installed.
  • hlanisa;2464475 wrote:
    Okay, i found the option to turn off reboots in patch policy configuration. But why doesn't ZCM detect it as a sucessful patch if the comp is turned off manually? It's still installed.


    Maybe it will report as successful when next time Vulnerability Detection Schedule has ran.. How often do you have Configuration > Patch Management > Vulnerability Detection Schedule set to run?

    Thomas
  • Yes, it is only successful once it is know to be installed successfully by the next scan.

    And technically, if you install a patch and shutdown the PC.....
    It is NOT installed successfully yet.
    Upon boot, it will finish up replacing locked files and other items and THEN be patched.
    Shortly after that another Scan will run to verify a fully successful install of the patch beyond just depending on a lack of error exit code on patch install.

    thsundel;2464702 wrote:
    Maybe it will report as successful when next time Vulnerability Detection Schedule has ran.. How often do you have Configuration > Patch Management > Vulnerability Detection Schedule set to run?

    Thomas