Greetings from ManageEngine Desktop Central

We are happy to announce the availability of latest hotfix to Desktop Central 7 - Build 70117. Here's the complete list of enhancements & bug fixes from the previous hotfix:

Enhancements & Bug Fixes

Enhancements

  1. Hardware details of CDROM Drive, USB Controller and USB Hub will now have an additional column indicating the reason for the hardware error, if any.
  2. Option to grant/revoke remote access to the database used by Desktop Central for users to retrieve the data for reporting purposes has been included.
  3. Patch engine has been optimised for large networks.

Bug Fixes

  1. Distribution Server patch replication issue has been fixed.
  2. Issue in performing double-click actions twice on the Remote Computer when using Java Viewer has been fixed.
  3. Num Lock key issue on the Remote Computer when accessing it using the Activex viewer has been fixed.

You can download the hotfix and install as per the instructions provided there.

To download complete product, which includes these enhancements, visit our website.

Patch Engine Optimized to Improve Performance

The Patch Engine of Desktop Central has been optimized to improve the performance by reducing the CPU usage. This will considerably reduce the load on the Server, which can be used to run any additional applications.

What's Cooking?

The features in our roadmap that are currently under development include:

  • Approval Mechanism for Automatic Uninstallation of Prohibited Software Details>>
  • Automating Software Deployment Details>>
  • Active Directory Authentication - Logging into Desktop Central client will be authenticated via Windows Active Directory

Add Requirements to Product Roadmap

You can add your new feature requirements on Desktop Management to our roadmap. We will prioritize and include them in our subsequent updates. Visit our Roadmap and add your requirements.

Microsoft has released 4 new security bulletins for the July 2010  edition of patch Tuesday. These 4 bulletins address 5 vulnerabilities. 

Our patch assessment team has completed the testing of the following security bulletins and updated the Central Repository Server.

MS10-042, MS10-043, MS10-044,  and MS10-045

Synchronize the vulnerability database in the desktop central web console under the Patch Mgmt tab to update the local database.

Deployment Priority (Courtesy: MSRC Blog )

July 2010 Risk and Impact



July 2010 Deployment Priority


In addition to this month patch releases, Microsoft has also re-release their MS10-024 bulletin. The patches of this re-release has also been updated in Desktop Central.

For any assistance on patching feel free to contact desktopcentral-support@manageengine.com

Happy Patching. 

cheers,
Today Adobe releases a security update for Adobe Reader and Adobe Acrobat to address the critical vulnerabilities which including CVE-2010-1297referenced in Security Advisory APSA10-01, could cause the application to crash and could potentially allow an attacker to take control of the affected system.

Adobe recommends users of Adobe Reader 9.3.2 and earlier versions for Windows, update to Adobe Reader 9.3.3. (For Adobe Reader users on Windows, who cannot update to Adobe Reader 9.3.3, Adobe has provided the Adobe Reader 8.2.3 update.) Adobe recommends users of Adobe Acrobat 9.3.2 and earlier versions for Windows update to Adobe Acrobat 9.3.3. Adobe recommends users of Adobe Acrobat 8.2.2 and earlier versions for Windows update to Adobe Acrobat 8.2.3.

Affected Software Versions :

Adobe Reader 9.3.2 and earlier versions for Windows, Macintosh, and UNIX
Adobe Acrobat 9.3.2 and earlier versions for Windows and Macintosh

For more details APSB10-15

-Rajesh

Java update fails with time out error

Jun 22 2010 06:10:52 AM Posted By : romanus
Hi

You may encounter Java update failures with the below given two reasons.
  1. Time out or
  2. Error occurred while processing the configuration
What is the reason for failure?

The technical reason behind this is, the JQS (Java Quick Starter service).   A process called jqs.exe will run in the background in order to allow quick start-up of Java applications. It would be loaded immediately after the Windows startup.  Due to this process which is running already on the client computer, the Java update fails.

More on Java quick starter service .

How to resolve?

While deploying the Patches, you need to select 'Install during computer startup' from 'Install Options' in 'Deployment Settings'. (Install Patch Configuration -> Deployment Settings in Step 2: -> Install Options: -> Install during computer startup)

It ensures that java update starts before the JQS and hence the update won't fail. 

Trust this helps.

Regards
Romanus

Microsoft has released 10 new security bulletin for the June 2010 edition of patch Tuesday. These 10 bulletins address 34 vulnerabilities. 

Our patch assessment team has completed the testing of the following security bulletin and updated the Central Repository Server.

MS10-032, MS10-033, MS10-034,  MS10-035, MS10-036, MS10-037, MS10-038, MS10-040, MS10-041

Synchronize the vulnerability database in the desktop central web console under the Patch Mgmt tab to update the local database.

- Rajesh

** Microsoft Security Bulletin MS10-039 is not updated by Desktop Central, as the product Microsoft SharePoint is not supported by DC.

Microsoft has released 10 new security bulletin for the June 2010 edition of patch Tuesday. These 10 bulletins address 34 vulnerabilities. 

As this patch Tuesday contains 10 security bulletin, our patch assessment team has planned to support the security bulletin in 3 phases. The  support of security bulletin in desktop central update in each phase is listed below.

Ist Phase :  MS10-032 , MS10-034, MS10-035, MS10-037, MS10-038 ( Planned for update by 9th June 17:00 GMT )

IInd Phase : MS10-033, MS10-036 ( Planned for update by 10th June )

IIIrd Phase : MS10-040, MS10-041

Note :

Microsoft SharePoint product is not supported by Desktop Central. Hence the security bulletin MS10-039 will not be supported as off now.

-Rajesh

** Central Repository Server Updated on 10th June 06:30 GMT

As per the plan, we have completed the Ist phase successfully and updated.  This update includes the security bulletin MS10-036 which we have planned for second phase.

The security bulletin MS10-033 is under testing. It will get updated at the earliest. Once it is updated, we will take up the third phase.

** Central Repository Server Updated on 10th June 17:30 GMT

As said above, the security bulletin MS10-033 is updated and is available to the DC customers. Now we are working on third phase.



Microsoft released an advance notification  for their June 2010 patch tuesday. Microsoft will release 10 security bulletins on June 8th addressing 34 vulnerabilities. 

  • Six of the bulletins affect Windows; of those, two are rated as Critical and four are rated as Important.
  • Two bulletins affect Microsoft Office and both are rated as Important
  • One bulletin rated as Important, affects both Windows and Office
  • One bulletin rated as Critical, affects Internet Explorer.
The final updates for Windows 2000 & Windows XP Service Pack 2 will be released by July13th 2010 - that is, next month. Subsequently, users should either upgrade their OS to the supported operating system  / the latest service packs in order to keep receiving necessary security updates.

Frequently reported PXE error in OS Deployer

May 27 2010 04:24:55 AM Posted By : romanus
Hi Folks, 

We get requests related to PXE client-server related issue.  Below given is one such popular query.

The "PXE-E55 Proxy DHCP Service did not reply to request on port 4011" can be due to few entries available in DHCP server. The resolve this, MS has given KB article .  

http://support.microsoft.com/kb/259670

Below given is the extract of it.

Possible Reason

This issue can occur when the DHCP server has the following Dynamic Host Configuration Protocol (DHCP) options set:
  • #60 = Client Identifier (set to "PXEClient")
  • #66 = Boot Server Host Name
  • #67 = BootFile Name
When the initial DHCP offer from the DHCP server contains these boot options, an attempt is made to connect to port 4011 on the DHCP server. This offer fails if the PXE server is on another computer.

To resolve

Please remove these options from the DHCP server and configure the routers IP helper table to contain the IP address of the OS Deployer PXE server.

Explanation (to IP helper instead of DHCP options)

For a PXE server to respond to a PXE request, the request must be able to transverse routers to communicate with PXE servers on other subnets. PXE uses the DHCP option fields to pass information. Therefore having the PXE server in the routers IP helper table helps make sure that the DHCP packets are forwarded to the PXE server so the PXE server can respond correctly.

Trust this helps.

Regards,
******************************************
R. Romanus Prabhu
Lead Technical Consultant
Windows Desktop Management Solutions
Tel : +1 925 965 6478
Email : http://www.osdeployer.com
******************************************   

Microsoft released 2 bulletins this tuesday to address 2 vulnerabilities. The Patch Assesment Team at Desktop Central have tested all the patches that are relevant to the application supported by Desktop Central and have updated the Central Patch Repository. This means customers can synchronize their patch database and deploy all of these new patches.  Given below is the quick snapshot of the bulletins/patches:


Bulletin IDVulnerability TitleCVE IDExploitability Index Assessment

MS10-030

Outlook Express and Windows Mail Integer Overflow Vulnerability

CVE-2010-0816

 2 - Inconsistent exploit code likely

MS10-031


VBE6.DLL Stack Memory Corruption Vulnerability

CVE-2010-0815

2 - Inconsistent exploit code likely


* - Patches for Outlook Express 5.5 SP 2 and Microsoft Visual Basic for Applications are yet to be supported by Desktop Central. The assessment for these patches are in progress and will get updated once the assessment is complete.

Deployment Priority (Courtesy: MSRC Blog )

May 2010 Deployment Priority 

May 2010 Risk and Impact

For any assistance on patching feel free to contact desktopcentral-support@manageengine.com

Happy Patching. 

cheers,

Microsoft released an advance notification for their May 2010 patch tuesday. Microsoft will release 2 bulletins on May 11th addressing 2 vulnerabilities. Both of these bulletins are rated critical. While one affects windows, the other affects Microsoft Office.

The affected OS and applications include:
  • Microsoft Windows 2000 Service Pack 4
  • Microsoft Windows 2000 Server Service Pack 4
  • Windows XP Service Pack 2 & 3
  • Windows XP Professional x64 Edition Service Pack 2
  • Windows Server 2003 Service Pack 2
  • Windows Server 2003 x64 Edition Service Pack 2
  • Windows Server 2003 with SP2 for Itanium-based Systems
  • Windows Vista Service Pack 1 & 2
  • Windows Vista x64 Edition Service Pack 1 & 2
  • Windows Server 2008 for 32-bit Systems
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for Itanium-based Systems
  • Windows Server 2008 for Itanium-based Systems Service Pack 2
  • Windows 7 for 32-bit Systems
  • Windows 7 for x64-based Systems
  • Windows Server 2008 R2 for x64-based Systems
  • Windows Server 2008 R2 for Itanium-based Systems
  • Microsoft Office XP Service Pack 3 
  • Microsoft Office 2003 Service Pack 3
  • 2007 Microsoft Office System Service Pack 1 and 2007 Microsoft Office System Service Pack 2 
  • Microsoft Visual Basic for Applications
  • Microsoft Visual Basic for Applications SDK
The final updates for Windows 2000 & Windows XP Service Pack 2 will be released by July13th 2010. Subsequently, users should either upgrade their OS to the latest OS/service packs or live with it.