Restart outside scheduled baseline runtime

Usage and Config Patch
1

(imported topic written by chuckl91)

I just had another IT co-worker ask me if I had pushed something to his machine because BigFix was requesting he reboot his machine. This occurred at 9:00am. All my scheduled restarts happen from 4:20am - 6:20am. Nobody pushed anything to his machine outside the scheduled times. I checked the BigFix logs but they don’t really show why BigFix tried to restart at the wrong time. Is there any easy way for me to see which fixlet or baseline sent the command to restart and at what time the command was sent to restart? Is this info in the log files and I’ve missed it? Thanks.

2

(imported comment written by BenKus)

Hey Chuckl,

The agent logs should say when they ran the actions to restart the restart the computer… do you see anything in the logs?

Ben

3

(imported comment written by chuckl91)

There was activity after the scheduled patch time. Here are two entries I thought were odd:

At 05:05:32 -0400 - actionsite (http://bigfix.server.com:52311/cgi-bin/bfgather.exe/actionsite)

Not Relevant - MS09-035: Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution - Visual C++ 2005 SP1 Redistributable Package (fixlet:10054)

At 08:05:48 -0400 -

RegisterOnce: Attempting to register with 'http://PC.server.com:52311/cgi-bin/bfenterprise/clientregister.exe?RequestType=RegisterMe60&ClientVersion=7.2.4.60&Body=3309826&SequenceNumber=1071&MinRelayVersion=6.0.0.0&CanHandleMVPings=1&Root=http://bigfix.server.com:52311&AdapterInfo=(IP Info)

These entries were one after the other. For some reason, his workstation didn’t report anything in three hours. I asked and he didn’t have to turn his computer on when he came in that morning so it was not a power issue. I can only assume the workstation was busy installing this patch. My question is, if a patch is busy installing and it happens to finish outside the allowed time, will it still reboot?

4

(imported comment written by BenKus)

Hey Chuck,

The agent won’t start an action if it is beyond the time range, but if an action runs for a long time, the agent won’t kill it if it extends beyond the timeframe…

What restart parameters did you use?

Ben

5

(imported comment written by chuckl91)

After the action completes, the user will be requested to restart the computer.

The restart request will have a deadline of 00:05:00 after it is initially shown.

When the deadline is reached, the computer will restart automatically.

The user will be allowed to cancel the reboot/shutdown.

He did not get the chance to cancel the reboot.