6 Replies Latest reply on Dec 25, 2009 6:36 PM by bp0205

    Update issue

      I have a vmware machine running Windows 2003 server standard, fully patched. McAfee 8.5i. The machine will not update manually during an RDP session from a local repository, McAfee FTP or HTTP sites. It won't auto update from any of these sites either. If I run update from a vmware console session, it does update. Obviuosly, would be nice to have this auto update, but can't find a knob to turn to make it happen. I've tried "logged on credentials", use these with legit creds, turned off the firewall, added McAfee to exceptions in the firewall. No success except by running from a console session.

       

      I can't find anything similar here or by Google. Any ideas or thoughts?

      thanks

      Bill

        • 1. Re: Update issue

          Just some thoughts..

           

          1. Since update tasks from a limited user have had issues before, are you able to run auto-updates from an admin login?

           

          2. Have you checked the Event Viewer logs or the Update logs to check for tell-tale errors?

           

          3. You've got patch #8 installed?

           

          Hope this helps.

           

          Grif

          • 2. Re: Update issue

            Thanks for the thoughts, Grif. I have been on all of these things: always logged on as an admin; I'll add a bit of log file here, nothing too discriminating is shown; yes, patch is applied;

            From the agent_.log

            ... *** ftp site ***

            Error downloading file CommonUpdater/SiteStat.xml, naInet GetLastError() = 4
            After calling download()

            ... ***http site ***

            InternetOpenUrl failed on Server: update.nai.com:80, error msg: 
            Failed to download the URL /products/commonupdater/SiteStat.xml using Wininet
            Trying to download using windows socket library
            Connecting to Real Server: update.nai.com on port: 80
            Failed to connect to Real Server: update.nai.com on port: 80

            ... *** more http site ***

            Open URL: http://update.nai.com:80/products/commonupdater/SiteStat.xml
            Trying to download using Microsoft WinInet library
            Connecting to Server update.nai.com using INTERNET_OPEN_TYPE_PRECONFIG
            No resume download needed, calling InternetOpenUrl
            InternetOpenUrl failed on Server: update.nai.com:80, error msg: 
            Failed to download the URL /products/commonupdater/SiteStat.xml using Wininet
            Trying to download using windows socket library
            Connecting to Real Server: update.nai.com on port: 80
            Failed to connect to Real Server: update.nai.com on port: 80
            Socket error: 2
            Error downloading file \SiteStat.xml, naInet GetLastError() = 0

            ... ** attempting to update from local repository ***

            Updater RunUpdateScript UPDATE
            naCmnLib Random seed = 0xe9ab****
            UsrSpCt Try to Launch UdaterUI Again
            UsrSpCt UpdaterUI won't be launched for Terminal Services client session (sessionID=1)
            Script ScriptEngine create process succeeded:

            ... *** some more stuff, session ends with ***.....

            Moving C:\WINDOWS\TEMP\mfe2A\SiteStat.xml to C:\WINDOWS\TEMP\nai29\SiteStat.xml
            Moving file succeeded
            Deleting C:\WINDOWS\TEMP\mfe2A
            Deleting directory succeeded
            Script CheckSiteStatus:TCPCS01-Repository is invalid-Disabled site.
            Script Searching for next available site.
            Script Unable to find a valid repository.
            Script Closing the update session.

             

            The repository is fine (several other machines update from it with no errors) and this machine updates from the repository if logged onto the console, but not RDP.

            thanks

            • 3. Re: Update issue

              Sounds like a permissions issue.. We've got computers which require a specific login, or network login, to gain access to the internet or gain network access.. Based on your log, it appears like all the computer is being blocked to all outside access unless logged in.. We can occasionally get around such problems by using the default "ftp" repository to the McAfee site.. It don't see the ftp attempt made in your log.. Is the ftp repository selected properly in the repository list?

               

              Hope this helps.

               

              Grif

              • 4. Re: Update issue

                Hi, Grif. From the "autoupdate" or during an RDP update, logged  on as a domain admin, with those credentials entered for autoupdate, we ge the errors I posted previously. If I leave credentials as "use logged on account", same error results. Even with the repository, from an RDP session or autoupdate scheduled session, same results. The NAI udpates are from the supplied HTTP and FTP sites with no modifications.

                 

                This excerpt is from a local repository, during an RDP session (the repository works fine for other servers and this one during a console session):

                Connecting to site = xxxxx01-Repository,
                20091221144617 I #348 InetMgr server = xxxxx01
                20091221144617 I #348 InetMgr UNC Session initialized
                20091221144617 W #348 InetMgr Connecting to UNC Server: xxxxx01
                20091221144617 I #348 InetMgr Domain name=xxxxx, User name=bp0205
                20091221144617 I #348 InetMgr Mapping network share \\xxxxx01\z using NetUseAdd
                20091221144617 I #348 InetMgr Network Share \\xxxxx01\z mapped
                20091221144617 W #348 InetMgr Connected to UNC Server: xxxxx01
                20091221144617 I #348 InetMgr Trying to download from site = xxxxx01-Repository, server xxxxx01
                20091221144617 I #348 InetMgr localfile = C:\WINDOWS\TEMP\nai2B\SiteStat.xml, remotefile = \SiteStat.xml
                20091221144617 W #348 InetMgr Downloading file: \\xxxxx01\z\Mcafee\DesktopProtection\SiteStat.xml from UNC Server
                20091221144617 I #348 InetMgr Downloaded file \SiteStat.xml successfully
                20091221144617 I #348 InetMgr After calling download()
                20091221144617 I #348 InetMgr return code = 0
                20091221144617 I #348 InetMgr Disconnecting UNC Server \\xxxxx01\z using NetUseDel(), Force = 1
                20091221144617 I #348 InetMgr Using unicode UseName for NetUseDel
                20091221144618 I #348 InetMgr NetUseDel() returned 0
                20091221144618 I #348 InetMgr Network share \\xxxxx01\z deleted successfully(1)
                20091221144618 I #348 InetMgr UNC Session closed
                20091221144618 I #348 InetMgr ------------------------------------------------------------
                20091221144618 I #348 InetMgr Moving C:\WINDOWS\TEMP\mfe2C\SiteStat.xml to C:\WINDOWS\TEMP\nai2B\SiteStat.xml
                20091221144618 I #348 InetMgr Moving file succeeded
                20091221144618 I #348 InetMgr Deleting C:\WINDOWS\TEMP\mfe2C
                20091221144618 I #348 InetMgr Deleting directory succeeded
                20091221144618 I #348 Script CheckSiteStatus:xxxxx01-Repository is invalid-Disabled site.
                20091221144618 I #348 Script Searching for next available site.
                20091221144618 i #348 Script Unable to find a valid repository.

                ...

                ... This is the same server, same credentials, same repository, but running in a VMWare console session, not RDP ...

                ...

                Checking update packages from repository xxxxx01-Repository.
                20091222092842 I #3376 Script CheckSiteStatus: Downloading file SiteStat.xml from site xxxxx01-Repository
                20091222092842 I #3376 InetMgr Downloading File: -->
                20091222092842 I #3376 InetMgr        <filename = SiteStat.xml>
                20091222092842 I #3376 InetMgr        <dwFlags = 0x4>
                20091222092842 I #3376 InetMgr        <localdir = C:\WINDOWS\TEMP\nai72>
                20091222092842 I #3376 InetMgr        <remotedir = \>
                20091222092842 I #3376 InetMgr        <sitename = xxxxx01-Repository>
                20091222092842 I #3376 InetMgr Connecting to site = xxxxx01-Repository,
                20091222092842 I #3376 InetMgr server = xxxxx01
                20091222092842 I #3376 InetMgr UNC Session initialized
                20091222092842 W #3376 InetMgr Connecting to UNC Server: xxxxx01
                20091222092842 I #3376 InetMgr Domain name=xxxxx, User name=bp0205
                20091222092842 I #3376 InetMgr Mapping network share \\xxxxx01\z using NetUseAdd
                20091222092843 I #3376 InetMgr Network Share \\xxxxx01\z mapped
                20091222092843 W #3376 InetMgr Connected to UNC Server: xxxxx01
                20091222092843 I #3376 InetMgr Trying to download from site = xxxxx01-Repository, server = xxxxx01
                20091222092843 I #3376 InetMgr localfile = C:\WINDOWS\TEMP\nai72\SiteStat.xml, remotefile = \SiteStat.xml
                20091222092843 W #3376 InetMgr Downloading file: \\xxxxx01\z\Mcafee\DesktopProtection\SiteStat.xml from UNC Server
                20091222092843 I #3376 InetMgr Downloaded file \SiteStat.xml successfully
                20091222092843 I #3376 InetMgr After calling download()
                20091222092843 I #3376 InetMgr return code = 0
                20091222092843 I #3376 InetMgr Disconnecting UNC Server \\xxxxx01\z using NetUseDel(), Force = 1
                20091222092843 I #3376 InetMgr Using unicode UseName for NetUseDel
                20091222092843 I #3376 InetMgr NetUseDel() returned 0
                20091222092843 I #3376 InetMgr Network share \\xxxxx01\z deleted successfully(1)
                20091222092843 I #3376 InetMgr UNC Session closed
                20091222092843 I #3376 InetMgr ------------------------------------------------------------
                20091222092843 I #3376 InetMgr Moving C:\WINDOWS\TEMP\mfe73\SiteStat.xml to C:\WINDOWS\TEMP\nai72\SiteStat.xml
                20091222092843 I #3376 InetMgr Moving file succeeded
                20091222092843 I #3376 InetMgr Deleting C:\WINDOWS\TEMP\mfe73
                20091222092843 I #3376 InetMgr Deleting directory succeeded
                20091222092843 I #3376 Script  xxxxx01-Repository site is valid and available.
                20091222092843 I #1668 Script ScriptEngine connected back to Framework successfully
                20091222092844 i #3376 Script Initializing update...
                20091222092844 i #1668 Script Downloading catalog.z.

                 

                This session completes successfully. No changes in firewall,

                 

                This excerpt is from an attempt to NAI, first HTTP then FTP:

                ...

                CheckSiteStatus: Failed to download SiteStat.xml from site NAIHttp, hr=-2147467259
                20091126171822 i #2724 Script Error occurred while downloading file SiteStat.xml.
                20091126171822 I #2724 Script Searching for next available site.
                20091126171822 I #2724 Script Skipping catalog version check for NAIFtp because it is not ePO-managed.
                20091126171822 i #2724 Script Checking update packages from repository NAIFtp.
                20091126171822 I #2724 Script CheckSiteStatus: Downloading file SiteStat.xml from site NAIFtp
                20091126171822 I #2724 InetMgr Downloading File: -->
                20091126171822 I #2724 InetMgr         <filename = SiteStat.xml>
                20091126171822 I #2724 InetMgr         <dwFlags = 0x4>
                20091126171822 I #2724 InetMgr         <localdir = C:\WINDOWS\TEMP\nai15>
                20091126171822 I #2724 InetMgr         <remotedir = \>
                20091126171822 I #2724 InetMgr         <sitename = NAIFtp>
                20091126171822 I #2724 InetMgr Use IE Proxy information
                20091126171822 I #2724 InetMgr Looking for IE Proxy settings for protocol: ftp
                20091126171822 I #2724 InetMgr Trying logged on user account privilege for impersonation
                20091126171822 W #2724 InetMgr Failed to steal Explorer token
                20091126171822 I #2724 InetMgr No IE Proxy settings found
                20091126171822 I #2724 InetMgr Connecting to site = NAIFtp,
                20091126171822 I #2724 InetMgr server = ftp.nai.com
                20091126171822 I #2724 InetMgr FTP Session initialized
                20091126171822 I #2724 InetMgr FTP Session 2 Logging into FTP Server: ftp.nai.com using User: anonymous in win-inet mode
                20091126171822 I #2724 InetMgr HTTP Session initialized
                20091126171822 I #2724 InetMgr Connecting to HTTP Server using Microsoft WinInet
                20091126171822 I #2724 InetMgr Trying to connect to Real Server ftp.nai.com using INTERNET_OPEN_TYPE_PRECONFIG
                20091126171822 I #2724 InetMgr Connected to Server: ftp.nai.com on Port: 21 using WinInet
                20091126171822 I #2724 InetMgr Trying to download from site = NAIFtp, server ftp.nai.com
                20091126171822 I #2724 InetMgr localfile = C:\WINDOWS\TEMP\nai15\SiteStat.xml, remotefile = CommonUpdater/SiteStat.xml
                20091126171822 I #2724 InetMgr FTP session 2 Downloading file: CommonUpdater/SiteStat.xml from FTP Server: ftp.nai.com
                20091126171822 I #2724 InetMgr FTP session 2 Downloading file from FTP server ftp.nai.com using WinInet [in non-proxy mode]
                20091126171822 I #2724 InetMgr Open URL: ftp://ftp.nai.com:21/CommonUpdater/SiteStat.xml
                20091126171822 I #2724 InetMgr Trying to download using Microsoft WinInet library
                20091126171822 I #2724 InetMgr Connecting to Server ftp.nai.com using INTERNET_OPEN_TYPE_PRECONFIG
                20091126171822 I #2724 InetMgr No resume download needed, calling InternetOpenUrl
                20091126171843 W #2724 InetMgr InternetOpenUrl failed on Server: ftp.nai.com:21, error msg: 
                20091126171843 I #2724 InetMgr Failed to download the URL /CommonUpdater/SiteStat.xml using Wininet
                20091126171843 I #2724 InetMgr FTP session 2 Wininet failed, Trying to download again using winsock
                20091126171843 I #2724 InetMgr FTP session 2 Logging into FTP Server: ftp.nai.com using User: anonymous in winsock-mode
                20091126171844 I #2724 InetMgr FTP session 2 Connecting to FTP Server: ftp.nai.com on Port: 21 using socket
                20091126171844 I #2724 InetMgr FTP session 2 connected to FTP Server: ftp.nai.com using socket
                20091126171905 W #2724 InetMgr FTP session 2 socket 1008 RecvTimeout() failed on recv, WSAGetLastError() = 10054
                20091126171905 W #2724 InetMgr FTP session 2 Socket error occurred: 2
                20091126171905 I #2724 InetMgr FTP session 2 Logging on to FTP Server: ftp.nai.com
                20091126171905 W #2724 InetMgr FTP session 2 socket 1008 SendTimeout() failed on send, WSAGetLastError() = 10054
                20091126171905 W #2724 InetMgr FTP session 2 Failed to logon to FTP Server, User authentication failed
                20091126171905 e #2724 InetMgr Error downloading file CommonUpdater/SiteStat.xml, naInet GetLastError() = 4
                20091126171905 I #2724 InetMgr After calling download()
                20091126171905 I #2724 InetMgr return code = -2147467259

                • 5. Re: Update issue

                  Well, I'm stumped.. I'm not sure why it should make a difference.

                   

                  Still, while in the Remote Desktop session you should be able to update the remote machine manually by using the downloadable Superdat file from the link below.. Placing the Superdat file on the remote machine and running it from there, should update the computer correctly.. It's probably just as fast as running the "Update Now" process on a single machine.

                   

                  http://www.mcafee.com/apps/downloads/security_updates/superdat.asp?region=us&seg ment=enterprise

                   

                  Hope this helps.

                   

                  Grif

                  • 6. Re: Update issue

                    Hi, Grif. Thanks again for the thoughts, and the SDAT updates work and are available for manual download. Sadly, I don't have time to babysit 100+ machines, and I need to get this auto update issue resolved. I, too, am stumped. I don't have issues with other VMs, or updating manually in an RDP session on other servers or workstations. Aarrgghh!

                    Merry Christmas to all