Were you deploying any products to the client? If so that could be how the patch got deployed. When a client machine completes a deployment task that installs a new product (so not just when it runs a deployment task but when the task actually installs something) it will trigger a "one-click update" which essentially tells it to "update everything".
For that reason as Masten suggested the best solution is to check the patch into the evaluation branch and do not move it to the current branch until you are ready for a general deployment.
the ePO 4.5.0 environment is already prepared for evaluation. The Patch 1 of VirusScan 8.8.0 is in the evaluation branch and a special McAfee Agent policy was created and attached to a special test context. I am currently in the process to create a virtual Windows XP test machine and will create that one as a new System in the special test context, deploy the agent and see how it goes.
I'am very confident that everything works perfectly. Later I will use special TAGs for that procedure.
Things from the evaluation branch are not deployed, so the other 1500 systems are safe! When the patch evaluation turns out to work fine, we will include the remaining 600 clients and servers to finish our migration from ePO 3.6.1 !!!
Message was edited by: diwi on 1/12/12 5:44:09 PM CETMessage was edited by: diwi on 1/12/12 5:44:49 PM CET
That worked perfectly for us, thanks for the directions. Has anyone tried to deploy VirusScan 8.8 Patch 1 via ePO 4.6? I just deployed to a few test machines and a window popup appears once the patch is installed asking to Restart or Cancel.
I don't recall any user intervention for patches deployed to VSE in the past. It was always silent.
What about this ...
Reboot options after product deployment (Windows only) ! A setting in your McAfee Agent Policy.
Is it enabled to '
Actually, I just have 2 clients (1 Windows XP and 1 Windows 7 workstation) provided with Patch 1 and a hotfix but I could not remember that I was asked for a reboot, but maybe that's because they didn't have VirusScan at all before. I may have supplied them with an agent in the target context, where Patch1 and the HotFix gets distributed from the Evaluation Branch and the upper mentioned setting is enabled here by default.