I have been testing K1000 patching features with Windows 10 and Windows Server on VM (VMWare Workstation), but i was surprised to find that out of nowhere there is Wireshark, WinSCP, Skype, VMWare Player, and some of Google Chrome apps shortcut (like Google Docs, Google Sheet, etc) installed even though the Windows do not have any of that software installed initially. Is it K1000 doing? Why is it installing new software automatically? I expect K1000 only install patches from already installed software, not install some new random software.
I have tried this both on Windows 10 and Windows Server 2012, both behave the same way (installing VMWare Plare, Wireshare, etc)
Answer Summary:
1 Comment   [ - ] Hide Comment


  • you might have selected these software patches ,
    Security › Patch Management › Subscriptions

    Adobe Systems, Inc
    Apache Software Foundation
    Apple Inc.
    Audacity Team, The
    Autodesk, Inc
    Box, Inc.
    Canneverbe Limited
    Cisco Systems, Inc.
    Citrix Systems, Inc
    Corel Corporation
    Document Foundation, The
    Dominik Reichl
    Don Ho
    dotPDN LLC
    Dropbox Inc.
    Evernote Corporation
    Foxit Corporation
    GIMP Development Team, The
    GlavSoft LLC.
    Google Inc.
    Igor Pavlov
    Inkscape Team, The
    Ivo Beltchev
    Jens Klingen
    Lightning UK!
    Martin Prikryl
    McAfee, Inc
    Micro Focus
    Microsoft Corp.
    Novell, Inc.
    Nullsoft, Inc.
    Opera Software ASA
    Oracle Corporation
    PatchLink Corporation
    Pidgin Team
    Piriform Ltd
    PKWARE, Inc.
    RealNetworks, Inc
    RealVNC Ltd.
    Riverbed Technology
    Simon Tatham
    SolarWinds Worldwide, LLC
    Stefan Küng
    Sun Microsystems
    Symantec Corporation
    Tim Kosse
    Trend Micro
    VMware, Inc.
    win.rar GmbH
    WinZip Computing Inc
    WinZip Computing, S.L.
    Wireshark Foundation
    Yahoo! Inc.
    • Hi, yes. I enabled all patch subscription. But it's a clean Windows install, haven't installed any software except Google Chrome. I thought it only patched what already installed? Not, it install all the missing software just because i select all patch subscriptions? It just kind of unexpected.
Please log in to comment

Answer Chosen by the Author


I experienced the exact same behavior the first time I tried running a deploy schedule. I also expected that KACE would only patch software that was already installed on the computer, and not add new software. I quickly found out there are two options:

Under "Security | Patch Management | Subscriptions | Application Patches | Types" - uncheck "Software Installers"

I'm using a detect to find all missing patches, and a Smart Label for what should be deployed
Status is Active
Type is not Software Installer
Missing is True
Released is not within last 2 days

I currently have both of these enabled, although each one should be enough (the belt and suspenders approach). 
Answered 09/12/2017 by: PaulGibson
White Belt

Please log in to comment

Community Chosen Answer


Have you checked your network for potential worms that can be downloading that? A clean install should not behave in such way. Maybe there is a user on your network that might have caused issues? Go over logs and see if you find anything suspicious.
Answered 09/04/2017 by: JoshRoss
Senior White Belt

  • It is a clean install. Nothing have installed yet, fresh Windows install on VM. I don't think it because of worms, i suspect there is something to do with patching system behavior
    • Any indications of logs? Both System and K1000's?
Please log in to comment
Answer this question or Comment on this question for clarity


Under Security -> Patch Management -> Subscriptions -> Application Patches -> Types, is "All Types" or "Select Types, Software Installer" selected?
Answered 09/05/2017 by: tshupp
Second Degree Black Belt

  • Exactly, it's because the software install is checked.
Please log in to comment