Skip navigation
This discussion is archived
137 Views 2 Replies Latest reply: Apr 19, 2012 2:58 PM by dblansky RSS
dblansky Apprentice 121 posts since
Jan 31, 2012

Has received 3 of 9 achievements.
Currently Being Moderated

Apr 18, 2012 3:37 PM

Some computers are automatically rebooting following patch updates

After certain patch updates, some computers are automatically rebooting (over the weekend or overnight) after patches are deployed even though in Reboot options for the patch scan / fix , we have selected the "Wait for user response" option in the Scan and Repair --> Reboot Options page.

 

Is this a known issue, is there a way to prevent it (other than setting to "Never Reboot")?

 

Thanks all!

 

Dave B

  • Catalysttgj Expert 413 posts since
    Jul 1, 2010

    Has received 8 of 9 achievements.

    There's a number of questions that can come up with this.

     

    1.) Do you have any custom definitions? (we're had some custom defs that we made that we didn't code the reboot supression properly and the patch itself rebooted the machines)

    2.) Are you 100% sure that the security scan is using the agentbehavior settings that you believe it to be using? (its possible that the security scan is using a different agentbehavior than expected)

    3.) Are you 100% sure its landesk causing the reboots? (Its always possible that something else could be doing this. AV sotware is usually a suspect in cases such as this.)

     

    The best thing to answer most of the above questions is going to be to get a vulscan log that actually shows the reboot in question. Any time a security scan causes a reboot it will be indicated in the corresponding vulscan log files. (match the time of the event to the modified date of the vulscan log) This can be tricky to capture if too much time passes after it happens, since these log files do eventually get written over. There about 10 of them, so depending on the frequency of security scans will determine how much time one has to get back to a machine to take a look at what exactly happened at the time.

     

    There is also a setting that if no one is logged into the machine then go ahead and reboot. We use this setting in our environment, since it improves patch compliance, and if no user is logged in there's no real reason (in our environment) not to go ahead with the reboot. Make sure this is not checked if you don't want reboots happening at all. Beyond this, if you have it set to wait for user response, just be careful with the timer bit. There should be a time out value that might be expiring and so its rebooting anyway wih lack of user repsonse.

     

    You might want to post the vulscan log if you are having issues interpreting any of it.

     

    Hope this is helpful.

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 20 points
  • Helpful Answers - 10 points
LANDESK Community powered by Jive SBS® 4.5.7.1  |  Legal Notices  |  Privacy Policy  |  Icon 

TweeterOn Twitter  |  Icon FacebookOn Facebook © 2007 LANDESK Software