(imported topic written by SystemAdmin)
I have some MS patches (in this case I’m referring to MS07-042) that show relevant under the fixlet for this patch. So I deploy the patch to the listed computers. The subsequent action reports back that the patch is not relevant. I reboot the system for good measure and go back to that fixlet and of course it still shows up under applicable computers. MBSA scan also shows it’s needed as well.
How is it possible to report under the fixlet that it’s needed on a system, then when you deploy it the system reports it’s not relevant? It uses the same relevance statement both times… Could it actually be getting to the action part of the deploy and the patch it self is failing? I would expect the action info to show failed not “Not Relevant”
Action:
Not Relevant MS07-042: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution - XML Core Services 4.0 SP2
Relevance of that fixlet:
Relevance 1
(
(
(
(
(
(
name of operating system as lowercase starts with “win”
)
AND
(
(
language of version block of file “kernel32.dll” of system folder contains “English”
)
OR
(
exists value of key “HKLM\System\CurrentControlSet\Control\Nls\MUILanguages” of registry
)
)
)
AND
(
not exists key “HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion”
whose
(
exists value “ProductId” of it
OR
exists value “CommonFilesDir” of it
)
of registry
AND
not exists values “PROCESSOR_ARCHITECTURE”
whose
(
it as string as lowercase = “ia64”
)
of keys “HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment” of registry
)
)
AND
(
(
(
name of it = “Win2000”
AND
csd version of it = “Service Pack 4”
)
OR
(
name of it = “WinXP”
AND
csd version of it = “Service Pack 2”
)
OR
(
name of it = “Win2003”
AND
(
csd version of it = “Service Pack 1”
OR
csd version of it = “Service Pack 2”
)
)
OR
(
name of it = “WinVista”
)
)
of operating system
)
)
AND
(
(
exists file “msxml4.dll”
whose
(
version of it < "
)
of it
)
of system folder
)
)
AND
(
exists file “msiexec.exe”
whose
(
version of it >= “3.1”
)
of system folder
)
)
AND
(
not pending restart
)
AND
computer name != “NFAX001PDV”
((((((name of operating system as lowercase starts with “win”) AND ((language of version block of file “kernel32.dll” of system folder contains “English”) OR (exists value of key “HKLM\System\CurrentControlSet\Control\Nls\MUILanguages” of registry))) AND (not exists key “HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion” whose (exists value “ProductId” of it OR exists value “CommonFilesDir” of it) of registry AND not exists values “PROCESSOR_ARCHITECTURE” whose (it as string as lowercase = “ia64”) of keys “HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment” of registry)) AND (((name of it = “Win2000” AND csd version of it = “Service Pack 4”) OR (name of it = “WinXP” AND csd version of it = “Service Pack 2”) OR (name of it = “Win2003” AND (csd version of it = “Service Pack 1” OR csd version of it = “Service Pack 2”)) OR (name of it = “WinVista”)) of operating system)) AND ((exists file “msxml4.dll” whose (version of it < ") of it) of system folder)) AND (exists file “msiexec.exe” whose (version of it >= “3.1”) of system folder)) AND (not pending restart) AND computer name !=“SERVER01”