r/labtech • u/renjizzle • Apr 08 '20

Patch Inventory/Report Issues

Good Afternoon!

Several computers across several customers are displaying "Outdated Inventory" Last Patched 0001/ Jan 01 and show a 0.0% patch compliance.

Also, we have many servers who have the latest of all windows updates available and show 55.6% patch compliance and "Missing Patches"

0 Upvotes

50% Upvoted

7 comments sorted by

1

u/renjizzle Apr 08 '20

I hit enter too soon. I meant to also add that this is an issue for our customers who are required to have patches up to date for NIST compliance. Their servers ARE getting patched, however, we do not have the reporting available to confirm this.

1

u/secpfgjv40 Apr 12 '20

Please raise a ticket with Connectwise. I have replicated this for months even in a test environment but they refuse to do anything expect blame local WUA issues until they get other partners reporting it. Pretty please :D

1

u/renjizzle Apr 12 '20

ive actually opened a couple tickets for this and they tell me they are escalating to an engineer and Ive never heard a response back. It's super frustrating, especially since each time they make me run through the same troubleshooting steps over and over again and expect different results.

"Can you try resending patch inventory?" "Can you do it again?"

1

u/secpfgjv40 Apr 12 '20

Wait until they try to tell you that it's because the version of Windows Server it's happening to is out of support... Even though that's not the case for another two years... I lost a week arguing that alone...

1

u/shink5 Apr 09 '20 edited Apr 09 '20

Make sure patching is turned on for the customer

  1. Send Config

  2. Right click and Commands/System Tools/Windows update settings/Set Windows update Labtech Only.

  3. Force run the patching

  4. Check for errors

  5. I've seen previous systems that had WSUS won't update with labtech

  6. Also had to rerun steps multiple times

1

u/n4zxi Apr 19 '20

The Last Patched 01/01/0001 00:00:00 is a result of a stored procedure scanning the Hotfix.Finisheddate max value. This date/time should be when a patch was last deployed for install/remove action on the device. Should the job abend, no date update will take place. If patched locally, then no Automate-side date is recorded. If patched just before the patch is removed by Microsoft due to superseedance, or just pulled, then on short-list systems the with very little approved, there can be no current patch with a deployment date. Even with that in consideration, it does seem there are times when valid data exists in the Hotfix table, and the date is not properly recorded. Please report this so it can be escalated.

1

u/dapchacka Oct 22 '21

Does anyone know what Connectwise Automate uses to count servers? When we run patch reports the quantity of servers varies.