/bundles/itninjaweb/img/Breadcrumb_cap_w.png
Hi,

I have been testing K1000 patching features with Windows 10 and Windows Server on VM (VMWare Workstation), but i was surprised to find that out of nowhere there is Wireshark, WinSCP, Skype, VMWare Player, and some of Google Chrome apps shortcut (like Google Docs, Google Sheet, etc) installed even though the Windows do not have any of that software installed initially. Is it K1000 doing? Why is it installing new software automatically? I expect K1000 only install patches from already installed software, not install some new random software.
I have tried this both on Windows 10 and Windows Server 2012, both behave the same way (installing VMWare Plare, Wireshare, etc)
Answer Summary:
Cancel
1 Comment   [ - ] Hide Comment

Comments

  • you might have selected these software patches ,
    Security › Patch Management › Subscriptions



    Adobe
    Adobe Systems, Inc
    Apache Software Foundation
    Apple
    Apple Inc.
    Audacity Team, The
    Autodesk, Inc
    Box, Inc.
    Canneverbe Limited
    Cisco Systems, Inc.
    Citrix Systems, Inc
    Corel Corporation
    Document Foundation, The
    Dominik Reichl
    Don Ho
    dotPDN LLC
    Dropbox Inc.
    Evernote Corporation
    F-Secure
    Foxit Corporation
    GIMP Development Team, The
    GlavSoft LLC.
    Google Inc.
    Igor Pavlov
    Inkscape Team, The
    Ivo Beltchev
    Jens Klingen
    Lightning UK!
    Lumension
    Macromedia
    Martin Prikryl
    McAfee, Inc
    Micro Focus
    Microsoft Corp.
    Mozilla
    Norman
    Novell
    Novell, Inc.
    Nullsoft, Inc.
    Opera Software ASA
    Oracle Corporation
    PatchLink Corporation
    pdfforge
    Pidgin Team
    Piriform Ltd
    PKWARE, Inc.
    RealNetworks, Inc
    RealVNC Ltd.
    Riverbed Technology
    Simon Tatham
    Skype
    SolarWinds Worldwide, LLC
    Sophos
    Stefan Küng
    Sun Microsystems
    Symantec Corporation
    TeamViewer
    TechSmith
    Tim Kosse
    Trend Micro
    UltraVNC
    VideoLAN
    VMware
    VMware, Inc.
    win.rar GmbH
    WinZip Computing Inc
    WinZip Computing, S.L.
    Wireshark Foundation
    Yahoo! Inc.
    • Hi, yes. I enabled all patch subscription. But it's a clean Windows install, haven't installed any software except Google Chrome. I thought it only patched what already installed? Not, it install all the missing software just because i select all patch subscriptions? It just kind of unexpected.
Please log in to comment

Answer Chosen by the Author


Answers

0
I experienced the exact same behavior the first time I tried running a deploy schedule. I also expected that KACE would only patch software that was already installed on the computer, and not add new software. I quickly found out there are two options:

Under "Security | Patch Management | Subscriptions | Application Patches | Types" - uncheck "Software Installers"

I'm using a detect to find all missing patches, and a Smart Label for what should be deployed
Status is Active
Type is not Software Installer
Missing is True
Released is not within last 2 days

I currently have both of these enabled, although each one should be enough (the belt and suspenders approach). 
Answered 09/12/2017 by: PaulGibson
Yellow Belt

Please log in to comment

Community Chosen Answer


Answers

1
Have you checked your network for potential worms that can be downloading that? A clean install should not behave in such way. Maybe there is a user on your network that might have caused issues? Go over logs and see if you find anything suspicious.
Answered 09/04/2017 by: JoshRoss
Senior White Belt

  • It is a clean install. Nothing have installed yet, fresh Windows install on VM. I don't think it because of worms, i suspect there is something to do with patching system behavior
    • Any indications of logs? Both System and K1000's?
Please log in to comment
Answer this question or Comment on this question for clarity

Answers

0
Under Security -> Patch Management -> Subscriptions -> Application Patches -> Types, is "All Types" or "Select Types, Software Installer" selected?
Answered 09/05/2017 by: tshupp
Second Degree Black Belt

  • Exactly, it's because the software install is checked.
Please log in to comment

Share