Highlighted
Absent Member.
Absent Member.
976 views

Patch Status

Hi All,
I have just configured a test patch policy for x86 workstations.
I have added the workstation to the relationship tab and run the rebuild option to find the required updates for the device.
Once the rebuild option is selected the policy is switched back to sandbox state.
The policy have to be published again?
The auto approve patches after successful sandbox enforcement - option is enabled. And the policy is enabled.
And the rebuild option has been selected again.
The device is also reporting that the bundle is effective.
How does one confirm that the patches are being applied to the device?

Thanx

Julian
Labels (2)
0 Likes
4 Replies
Highlighted
New Member.

Re: Patch Status

Hi
My two bob's worth
Not like before when you could confirm that a patch has been applied when logged in as the user as it was listed as being "Avaliable". It's called the "Technician Application" but only says if the policy has been applied (and calls it a bundle). Only way I can see to confirm a device is patched is to open ZCC, find the patch in the patch policy (only works if there are devices still not patched), open up the list of patched devices and scroll down till you find your device.
Cheers
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Patch Status

Also note that the %ZENWORKS_HOME%\zpm\<GUID_NUMBER>.state file can provide the status of many patches.
0 Likes
Highlighted
New Member.

Re: Patch Status

Hi
???, How? I only have one .state file there with stuff listed as below...
.
.
Novell SUSE 2013:8584 gtk-vnc recommended update for SLE 11 SP3 x86_64=NOT_APPLICABLE
Novell SUSE 2013:8023 timezone-2013d recommended update for SLE 11 SP3 x86_64=DETECT_PATCHED
Novell SUSE 201510530 gd security update for SLE 11 SP3 x86_64=DETECT_PATCHED
.
.

I'm more concerned with a particular device in the field that lists through ZCC as missing lots of patches. Generally there is a log jam somewhere and a 'zac cc' or 'zac retr' or 'zac zeus-refresh' clears it. My main indication that patches are applying is that the HD activity LED "goes off" and in the old baseline setup you would see the patches marked in ZAA as 'Available'. In the patch policy setup there is no way to confirm this.

Cheers
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: Patch Status

%ZENWORKS_HOME%\zpm\<GUID_NUMBER>.state located on the managed device you wish to determine patch statuses on:

small snipet of one of my systems:

2017-05 Security Only Quality Update for Windows 7 x64 (KB4019263)=DETECT_PATCHED
2017-06 Security Only Quality Update for Windows 7 x64 (KB4022722)=DETECT_PATCHED
2017-07 Security Monthly Quality Rollup for Windows 7 x64 (KB4025341)=DETECT_NOTPATCHED=0614A52C-6E5A-4526-9D72-482F694D8619
2017-07 Security Only Quality Update for Windows 7 x64 (KB4025337)=DETECT_NOTPATCHED=FAE7329E-9F4E-4631-B676-CD1AB874AFCC
2526294 Calendar Printing Assistant for Microsoft Office Outlook 2007 Service Pack 3 (SP3)=NOT_APPLICABLE
2526297 Microsoft Office Compatibility Pack Service Pack 3 (SP3)=NOT_APPLICABLE
2526298 PowerPoint Viewer 2007 Service Pack 3 (SP3)=NOT_APPLICABLE
2526299 The 2007 Microsoft Office Servers Service Pack 3 (SP3), 32-bit Edition=NOT_APPLICABLE
2526299 The 2007 Microsoft Office Servers Service Pack 3 (SP3), 64-Bit Edition=NOT_APPLICABLE
2526310 Microsoft Office Access Runtime and Data Connectivity 2007 Service Pack 3 (SP3)=NOT_APPLICABLE
2695962 Update Rollup for ActiveX Killbits for Windows 7 for x64 (KB2695962)=NOT_APPLICABLE
7-Zip File Archiver 16.04 for Windows (See Notes)=DETECT_NOTPATCHED=6F255348-91F2-4B61-9F4D-B96C296E0D62
981407 Update Rollup 10 for Exchange Server 2007 Service Pack 1 (KB981407)=NOT_APPLICABLE
Adobe Acrobat DC (Continuous) 2017.009.20058 (17.9.20058.37826) for Windows (See Notes)=NOT_APPLICABLE
Adobe Acrobat Reader DC (Continuous) 2017.009.20058 (17.9.20058.37826) for Windows (See Notes)=DETECT_NOTPATCHED=093E455E-DAE8-44D5-9E60-4A82D386198F
Adobe Acrobat Reader DC MUI (Continuous) 2017.009.20058 (17.9.20058.37826) for Windows (See Notes)=NOT_APPLICABLE
Adobe AIR 25.0.0.134 (Full Install) for Windows (See Notes)=DETECT_NOTPATCHED=403F189E-8B4B-4643-A5D2-E36658D7230F
Adobe AIR 25.0.0.134 for Windows (See Notes)=NOT_APPLICABLE
Adobe Flash Player ActiveX 25.0.0.171 (Full Install) for Windows (See Notes)=DETECT_PATCHED
Adobe Flash Player NPAPI 25.0.0.171 (Full Install) for Windows (See Notes)=DETECT_PATCHED
Adobe Flash Player PPAPI 25.0.0.171 (Full Install) for Windows (See Notes)=DETECT_NOTPATCHED=BDC089BF-11B6-4078-8188-006A588BC7DE
Apache OpenOffice 4.1.3 (4.0.9783.500) for Windows (See Notes)=NOT_APPLICABLE
April, 2017 Security Only Quality Update for Windows 7 x64 (KB4015546)=DETECT_NOTPATCHED=2404BD0D-9DA0-4C18-8AFE-B5F3EB57849B
April, 2017 Security Only Update for .NET 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 on Win 7 and Win 2008 R2 for x64 (KB4014985)=DETECT_PATCHED
APSB15-24 Adobe Acrobat 10.1.16 for Windows (See Notes)=NOT_APPLICABLE
APSB15-24 Adobe Reader 10.1.16 for Windows (See Notes)=NOT_APPLICABLE
APSB15-24 Adobe Reader Multilingual User Interface 10.1.16 for Windows (See Notes)=NOT_APPLICABLE
APSB16-03 Adobe Bridge CC 6.2 for Windows (See Notes)=NOT_APPLICABLE
APSB16-03 Adobe Photoshop CC 2014 15.2.4 for Windows (See Notes)=NOT_APPLICABLE
APSB16-03 Adobe Photoshop CC 2015 16.1.2 for Windows (See Notes)=NOT_APPLICABLE
APSB16-23 Adobe AIR 22.0.0.153 for Windows (See Notes)=NOT_APPLICABLE
APSB16-32 Adobe Flash Player 18.0.0.382 ESR for Windows (See Notes)=NOT_APPLICABLE
APSB16-46 Adobe RoboHelp 2015.0.4.1 (12.0.4.460) for Windows (See Notes)=NOT_APPLICABLE

ZCC is usually a better source unless troubleshooting/investigating...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.