Computers restart without notice when using a baseline

(imported topic written by holmesbt91)

So I’ve created a baseline for patch management and added all Microsoft fixlets from 8/9/2011 as well as the 3 Adobe fixlets released on the same day. So far, we’ve had 2 users state that their computer restarted without notice and did not even give them an option to restart.

We have it set to use custom action settings for this baseline. The custom action is to show 3 messages. One before running the action group, one while it’s running, and then the post-action message prompting to restart. I can provide screenshots, of the Action Settings windows, but all settings have been typed below:

====================================================================

Custom Action Settings:

Execution Tab:

  1. Ends on: Set date to months from date of projected deployment to PROD computers

  2. Behavior:

a. Select “On failure, retry 3 timesâ€

b. Select “Wait until computer has rebootedâ€

c. Select “Start client downloads before constraints are satisfiedâ€

  1. Leave other settings as default

Users Tab:

  1. Run independently of user presence, and display the user interface to the selected users

  2. Selected Users – All Users

Messages Tab:

  1. Display message before running action group.

a. Title: Critical Security Updates for ,

b. Description:

c. Select “Ask user to save workâ€

d. Select “Allow user to cancel action groupâ€

i. Set deadline: 1 day from time action group is relevant

ii. At deadline: Run action group automatically

  1. Display message while running action group:

a. Title: Critical Security Updates for ,

b. Description: Security updates are currently being installed on your computer. Please do not shut down or restart until this action completes. You will be prompted to restart your computer when this action has completed.

  1. Leave all other settings default

Offer Tab:

  1. Leave settings as default

Post-Action Tab:

  1. Restart computer after action completes

  2. Message Title: Restart Now

  3. Message Text: Security updates have been installed. Your system administrator is requesting that you restart your computer. Please save any unsaved work and press ‘Restart Now’ to restart your computer.

  4. Select “Allow user to cancel restartâ€

a. Set deadline: 1 day from the time action completes

b. At deadline: Keep user interface topmost until user accepts restart

=====================================================================

I have ensured that neither of the users have reached the 1 day deadline that the action has set, and it’s happening within minutes of the action being relevant on their computer.

Any ideas?

(imported comment written by SystemAdmin)

If you included the fixlet for Shockwave Player 11.6.1.629 (released 8/9/2011)the description says:

The installer may force the machine to automatically restart in rare cases when certain files need to be updated.

If the installer does this, it’s outside of TEM’s control.

(imported comment written by holmesbt91)

Aaron,

Thanks for your reply. I understand that about Shockwave and even paid close attention to that during our testing period, and there were no issues. The issue here is that the 2 users so far have not even been prompted to allow the action to even begin. The custom action settings are set to notify the user before any actions take place and then give them the opportunity to delay the actions for up to 1 day before it takes place automatically. When I deployed to our first group yesterday, I got a call from a user within 15 minutes, so I know that the 1 day deadline never even came into play.

(imported comment written by mmcgrew91)

Hi holmesbt,

I did not experience restart issues with Shockwave in my testing either, but about 30 minutes after production deployment i had many users reporting of forced reboots. Even if you didn’t see it in testing, it WILL restart computers and TEM won’t have any control over it.

(imported comment written by holmesbt91)

I had to open a PMR with IBM and after looking at the Event Viewer and BES logs, there’s still no explanation. Now they have me running the BES Diagnostics utility and I need to provide the info to them.

More to come…