BIGFIX False Positves

Usage and Config Platform
1

(imported topic written by Tima91)

Hi Forum members!!

I see alot of false positives for the following patches -

MS03-031

MS02-008

MS02-044

MS04-028

MS08-062

MS08-052

All these patches are already installed on my servers. When I try to install them via BIGFIX, I get a “failed” action result.

Is there a way to remove all the false positives? Due to these false positives, the compliance % reduces unnecessarily.

any response will be much appreciated.

2

(imported comment written by BenKus)

Hi Tima,

If an application reports “failed”, it doesn’t necessarily mean that it is a false positive… See here: http://support.bigfix.com/cgi-bin/kbdirect.pl?id=68

If you think these are indeed false-positives, we can run a test where we evaluate the relevance on the computers and see where things are missing…

Ben

3

(imported comment written by Tima91)

Hi Ben,

Thanks for the reponse. How can I evaluate a fixlet on a server?

4

(imported comment written by sthull)

Hi Tima,

You should copy the relevance from each fixlet into the relevance debugger running on the system in question. This will confirm that all the relevance checks are true which means that the system still needs to be patched. If running the patch via the fixlet fails, you should try the options outlined in the kb article Ben mentioned to see why it is failing.

You can get the relevance debugger from http://support.bigfix.com/fixlet

Regards,

Steve