RE: System will not find missing service packs.
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
RE: System will not find missing service packs. - 21.Jul.2003 7:45:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
Installed new version and did get all of the patch info except on a XP system. Still can not seem to get the auditing enabled on 6 systems.
|
|
|
|
|
RE: System will not find missing service packs. - 21.Jul.2003 8:03:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Ok, 2000 machines down, XP to go.
XP is its own beast, there are a few threads on it, but in a nut shell, have to set it back to old style of authentication.
It is buried under the Network Policy, something about using classic authentication.
Did a search on classic in the forums, found 3 hits, here is the one that has it:
http://forums.languard.com/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=1;t=000438
quote:
You must make a small change to Windows XP in order to get the authentification right.
Start->Run->gpedit.msc
Go to Windows Settings->Security settings->Local policies->Security options
Network access : Sharing and security model for local accounts
Here you must choose classic.
By default, Windows XP use the Guest account for any connections and this sucks.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/pro dtechnol/winxppro/proddocs/506.asp
Ok, that should take care of scanning XP boxes. If that is not the issue you are talking about .... well we'll look into that later if need be.
In regards to:
quote:
Still can not seem to get the auditing enabled on 6 systems.
I'm assuming this are windows 2000 machines that you are getting info about what patches are missing on them?
So you highlight the machine, say 192.168.1.33, right click on it, go to Enable Auditing on this machine, does the Enable Auditing Window pop up?
Assuming it does, you check whatever boxes, hit Start, and ???? It should uncheck the box on the machine in the lower part and then you can close that window.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 22.Jul.2003 10:26:00 AM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
OK, that got the XP box to report. I still have 4 units that I can not enable the auditing. I have been doing what you instructed already but with no success. It continues to fail when I try to enable.
|
|
|
|
|
RE: System will not find missing service packs. - 22.Jul.2003 11:18:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Does it give you any error messages or just afterwards when you do a scan you can see that it didn't work?
It might be that you'll need to check the event logs on those machines and see what it tells you. In your security Log it should tell you it was attempted.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 22.Jul.2003 11:46:00 AM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
I get a message that says that the attempt failed. I looked in the event viewer under security and it only has entries of sucessful audits - nothing else.
|
|
|
|
|
RE: System will not find missing service packs. - 22.Jul.2003 11:53:00 AM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Since i haven't been able to reproduce it I don't know if this will help, but add that line:
VeryVerbose=1 to the languard.ini file and see if that helps spit out any more info than just the attempt failed.
Will check with a few other people and see if they have any ideas either.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 22.Jul.2003 12:15:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
Added line but makes no difference. On the pop up screen with the check box it simply says:
Failed - Failed to open policy on the remote system.
I can however make a remote registry connection through regedit.
|
|
|
|
|
RE: System will not find missing service packs. - 22.Jul.2003 12:24:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
What credentials are you using? Existing or Specific?
Also, passed this onto the main tester to see if he's run into it.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 22.Jul.2003 12:26:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
I am loging in with specific credencials as the administrator for the machine being scanned.
|
|
|
|
|
RE: System will not find missing service packs. - 29.Jul.2003 1:31:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
Does no-reply indicate help over?
|
|
|
|
|
RE: System will not find missing service packs. - 29.Jul.2003 2:54:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Sorry, lots of other posts lately, just forgot to get back to this one.
Anyway, back to a previous suggestion I made:
quote:
Next, looks like you are using specific credentials. I'd recommend logging in locally with whatever credentials you want to use and set it to use existing credentials. See if you get the same results. In certain cases Specific Credentials were not working in 3.2, I don't know if that is fixed in 3.3 or not, it was actually an issue of Windows using a mix between Existing and Supplied credentials regardless of what it was told to use.
which out of the above it looks like you used existing credentials, but not administrator as mentioned in:
quote:
As for less info, that would be because the user you are logged on as has no rights to the machine you scanned. Should have been a bit more clear, you'll want to log on locally as whatever you were using as the specific credentials if that is possible, so log on locally as Administrator and run the scan.
There have been some issues with specific credentials. The OS for whatever reason decides to ignore what LNSS tells it to use and uses existing credentials or more preciously existing connections (which are normally NULL connections).
So back to my original suggestion from July 21, log in locally to your machine that you are running LNSS from as Administrator (assuming it has the same password as the one you are scanning, if not try changing it to it) and try pushing the auditing features. Only way to tell for sure what is going on would be a packet capture to see what messages the machines are sending back and forth to each other when it fails. But that is my guess on the issue.
Also, passed it onto the main tester, not something he has seen, but he was going to send it onto the programmer in charge of that section of code. Haven't heard anything back on it.
But again, my guess is it is the same issue we've seen in the past where Windows ignores creds we try to send and uses and exiting pipe. So try that out and let me know.
eric
[ July 29, 2003, 08:59 PM: Message edited by: xnih ]
|
|
|
|
|
RE: System will not find missing service packs. - 29.Jul.2003 3:58:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
I am running the scan as the administrator. The administrator has the same logon for the machine running LNSS and the macine being scanned. I have tried this using both specific credencials and existing with the same result. An inability to enable auditing.
|
|
|
|
|
RE: System will not find missing service packs. - 29.Jul.2003 5:19:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
Ok, thanks for the info.
Only thing I can recommend then is to do a packet capture with something like ethereal (www.ethereal.com) and send it onto me and I'll pass it onto the developers. As I've stated, so far neither myself nor the main tester have been able to reproduce the issue.
eric
|
|
|
|
|
RE: System will not find missing service packs. - 30.Jul.2003 1:35:00 PM
|
|
|
mseiler
Posts: 17
Joined: 15.Jul.2003
From: Fremont, CA
Status: offline
|
I have the packet capture done. How do I get it to you?
|
|
|
|
|
RE: System will not find missing service packs. - 30.Jul.2003 2:02:00 PM
|
|
|
xnih
Posts: 2465
Joined: 30.May2001
From: Idaho
Status: offline
|
eric@languard.com will forward onto my other account.
eric
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
