Can not deploy patches
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
Can not deploy patches - 12.Dec.2002 9:02:00 AM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
Any help much apprecitaed here.
Using 3.1r1 and getting this error:
Deployment log for xxxx (xxx.xxx.xxx.xxx)
Creating patch directory : \\xxx\C$\Windows\system32\Patches
Unable to create patch directory. Using WinDir\System32 directory for patch storage!
Copying patches to \\xxxx\C$\Windows\system32 ...
Copying patch Q329115_WXP_SP2_x86_ENU.exe (3 left to go) ...
Unable to create file \\xxxxx\C$\Windows\system32\Q329115_WXP_SP2_x86_ENU.exe - Patch skipped!
Copying patch Q329834_WXP_SP2_x86_ENU.exe (2 left to go) ...
Unable to open file C:\Program Files\GFI\LANguard Network Security Scanner 3\download\Q329834_WXP_SP2_x86_ENU.exe - Patch skipped!
Copying patch Q328970.EXe (1 left to go) ...
Unable to create file \\xxxxx\C$\Windows\system32\Q328970.EXe - Patch skipped!
Creating batch file deploy_patches.bat ...
Unable to create batch file (deploy_patches.bat)!
I have admin rights AND can open the admin and C$ shares thru the scan with no problem
[ December 12, 2002, 03:32 PM: Message edited by: mboy ]
|
|
|
|
|
RE: Can not deploy patches - 12.Dec.2002 9:58:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
The main issue of course is:
quote:
Deployment log for xxxx (xxx.xxx.xxx.xxx)
Creating patch directory : \\xxx\C$\Windows\system32\Patches
Unable to create patch directory. Using WinDir\System32 directory for patch storage!
Off the top of my head, why it can't create this directory, I don't know, couple questions though:
Are you using existing credentials or specific ones?
Can you get this consistently, or is it hit and miss? If you reboot both machines and scan again does it work?
The account you are using, is it a domain/AD account or a local account?
Thanks,
eric
[ December 12, 2002, 04:00 PM: Message edited by: xnih ]
|
|
|
|
|
RE: Can not deploy patches - 12.Dec.2002 10:24:00 AM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
I am using existing credentials. Some machines it works, most it does not. It is a domain account that has been added as a user with admin properties on all XP pro machines. Not AD domain, it is Nt 4.
It used to work, but is now hit and miss.
When I try to use an admin account, it wont work either, but says it is a credentials issue.
[ December 12, 2002, 04:27 PM: Message edited by: mboy ]
|
|
|
|
|
RE: Can not deploy patches - 12.Dec.2002 10:51:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Interesting...
So you've gone into XP and tweaked it to use classic style authentication?
I was seeing the following issue a lot in the debug window with XP:
Username : "machine-test\administrator"
--> Error (1219) The credentials supplied conflict with an existing set of credentials
This is from the author of LNSS when I had this issue:
quote:
Bad credentials,
It doesn't have a valid username and password through Session tab.
You must make a small change to Windows XP in order to get the authentification right.
Start->Run->gpedit.msc
Go to Windows Settings->Security settings->Local policies->Security options
Network access : Sharing and security model for local accounts
Here you must choose classic.
By default, Windows XP use the Guest account for any connections and this sucks.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/pro dtechnol/winxppro/proddocs/506.asp
You may want to try that on a machine or two. From my testing, and with more info that you provided (didn't realize it was XP) everything I've seen on this goes back to how XP handles authentication.
This is actually geared more towards using local accounts, but it may help a bit too. I don't have a NT 4 domain to put an XP box in to try to replicate this.
Hope that helps, if not, or if there are other issues let me know (and please just test this on a test machine first!)
eric
[ December 12, 2002, 04:53 PM: Message edited by: xnih ]
|
|
|
|
|
RE: Can not deploy patches - 12.Dec.2002 11:29:00 AM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
Unfortunately, they are already set in classic mode.
It is strange, on a few machines it worked and most it did not.
ALl machines were created from identical image, so this has me a bit baffled.
I appreciate the help tho.
|
|
|
|
|
RE: Can not deploy patches - 12.Dec.2002 11:50:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Hopefully I have some more info or ideas tomorrow, I sent it onto Blade, the programmer, see if he has any other thoughts on it.
eric
|
|
|
|
|
RE: Can not deploy patches - 12.Dec.2002 12:04:00 PM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
Thank you very much
|
|
|
|
|
RE: Can not deploy patches - 13.Dec.2002 12:53:00 PM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
Any more insight to this? Nt servers and win2k pro machines fine. It is still the XP machines (altho 2 worked)
Thanx
|
|
|
|
|
RE: Can not deploy patches - 13.Dec.2002 1:23:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Sorry, overall no, no other insight into it. I've only played with it on one XP Pro machine in the past, and was never very successful on it. I'll try to get an ZP box up in the next few days and see if I can recreate the issue and see if I can pass anything onto the programmers on it.
You might want to do a packet capture and look at the output it provides (most likely some sort of authentication issue, how/why I don't know yet though). I forwarded the issue onto the programmer and sent a few ideas/suggestions that I came up with.
What would be interesting to see in a packet capture is if:
quote:
Deployment log for xxxx (xxx.xxx.xxx.xxx)
Creating patch directory : \\xxx\C$\Windows\system32\Patches
Unable to create patch directory. Using WinDir\System32 directory for patch storage!
Copying patches to \\xxxx\C$\Windows\system32 ...
Copying patch Q329115_WXP_SP2_x86_ENU.exe (3 left to go) ...
Unable to create file \\xxxxx\C$\Windows\system32\Q329115_WXP_SP2_x86_ENU.exe - Patch skipped!
Copying patch Q329834_WXP_SP2_x86_ENU.exe (2 left to go) ...
Unable to open file C:\Program Files\GFI\LANguard Network Security Scanner 3\download\Q329834_WXP_SP2_x86_ENU.exe - Patch skipped!
Copying patch Q328970.EXe (1 left to go) ...
Unable to create file \\xxxxx\C$\Windows\system32\Q328970.EXe - Patch skipped!
Creating batch file deploy_patches.bat ...
Unable to create batch file (deploy_patches.bat)!
Is due to not being able to find the box via the netbios name, or if the user account, for whatever reason, doesn't seem to have rights to create files there.
A new build is due out next week, not sure that it will help at all on this issue, but we will see.
eric
[ December 13, 2002, 07:25 PM: Message edited by: xnih ]
|
|
|
|
|
RE: Can not deploy patches - 13.Dec.2002 1:24:00 PM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
Thanks Eric.
|
|
|
|
|
RE: Can not deploy patches - 16.Dec.2002 10:55:00 AM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
I figured it out (sort of)
When my XP machine conects to the remote machines, it is authenticating as "domain_name"/password instead of "domain_name"/myusername
Once I change that using dameware ( I have to disconnect the session, then log in with my username and password, it updates fine.
NOw I have to figure out why it logs in incorrectly :-(
|
|
|
|
|
RE: Can not deploy patches - 16.Dec.2002 11:10:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
passing it onto the programmer so that he is aware of it. Not sure, beyond me right now, will try to check it out on a few test machines if/when I get a chance here where I work.
eric
|
|
|
|
|
RE: Can not deploy patches - 16.Dec.2002 11:21:00 AM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
It seems to do that after I scan it with lanscan, it kind of locks me out after I scan, then have to disconnect it via dameware and log back in. Then it is fine.
Thanx!
|
|
|
|
|
RE: Can not deploy patches - 16.Dec.2002 11:42:00 AM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
It seems to work after I disconnect the IPC$ share with the username-"password". I do not have to reconnect.
|
|
|
|
RE: Can not deploy patches - 16.Dec.2002 3:01:00 PM
|
|
|
mboy
Posts: 36
Joined: 11.Dec.2002
Status: offline
|
I believe the problem may be related to the fact that Windows XP has a problem with muliple connections from a single windows session.
I think that when I scan with Languard, it connects via my computer IP addy and the hostname.
MS resolution to the issue is to connect via IP instead of hostname and they are supposedly supposed to issue a patch for it, but that remains to be seen.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
