Recent Import Patch Data for Windows (PMImport) Download removed multiple Windows XP Software Update Policies as outlined on INFO3409.
Please review the following process only if the Windows XP updates had been downloaded and managed in the environment prior to this removal and need to be managed moving forward.
Advisory: This will only work following download of PMImport v7.1.781 (scheduled for 3/3/2016) and only if the Software Update Packages were not deleted with the setting: 'Delete previously downloaded data for vendors, software and languages that are now excluded' was left disabled on the Import Patch Data for Windows (PMImport) Policy, for if that setting was enabled post removal, the Windows XP Software Update Packages would have been cleaned-up from the NS (however they may be still retained on package servers).
Advisory: The settings above apply to a one time execution and can be retorted once the PMImport v7.1.781 completes and the updates have been downloaded from this Staging Location. This process will not download any Windows XP Software Updates that were not previously downloaded in the environment as they are no longer available from the vendor, for this process is merely allowing the continued deployment of currently downloaded Windows XP Software Updates and retain their resource associations in the database.
Hierachy Configurations: work through the process as outlined above on the Child SMP(s), for they will need the ability to manage the packages from the 'Staging Location' as the Download Software Updates following the Patch Management Import Data Replication for Windows scheduled tasks will replicate the PMImport data from Parent to Child SMP, and then download the Software Updates which were downloaded by the Parent SMP and replicated to the Parent SMP's Package Server per regular package management processes within a Hierarchy.
If Windows XP Software Updates are to be removed as they are no longer being managed, and this process is not being worked through to maintain them, there will be the following entries in the SMP Server Log Viewer:
Work through the following:
Caution: If these steps are followed after PMImport v7.1.781; PMImport will need to be configured to run with 'Incremental download' setting disabled for the process to update the Windows XP updates in the SMP Server database. This only needs to be executed once following v7.1.781 to update the Import Patch Data for Windows tables in the database. The setting may be re-enabled moving forward.
Note: Due to the intricacy of the product; it is difficult to isolate all necessary exclusions, so a SQL query has been written and attached. This query can be implemented into a custom SQL Report on the Console, or it may be reviewed in SQL Server Management Studio ran against the Symantec_CMDB database. Note: The BULLETIN NAME needs to be implemented into the lower segment of the report and that will return the Product name to be disabled for the Windows XP only updates, for Windows Server 2003 updates are still available for download.
Additionally, the attached SQL Script has been found to rarely find the associations in the database, and working through the following process will help isolate the affected Products:
Note: If there appears to be a targeting issue with these effected Software Updates; Software Management will need to be utilized to deploy them, for the rule logic management is no longer supported for these EOL Updates.
Advisory: If Windows XP related updates are cleaned-up; please review TECH235091 on how to refund the Patch Management License for Windows XP Clients.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
This will clear the history and restart the chat.