Patch Remedy To The Rescue For MSPs Using ConnectWise Automate

Another Ransomware

For the second time in just as many months, computer malware has been infecting consumers, businesses and government institutions around the world at a insane pace, locking files with encryption and extorting ransom payments to release the data again.  This new global ransomware attack has targeted businesses around the world, demonstrating how easy it is for hackers to extort money by taking advantage of outdated technology. This new ransomware, security researchers says, the malware attack that spread from Ukraine appeared to be focused on damaging IT systems. The NotPetya malware is so-called because while it shares code with an earlier ransomware strain called Petya, it is “a new ransomware that has not been seen before”, according to security researchers at Kaspersky Lab. It requires infected businesses to send $300 in the cryptocurrency bitcoin to a payment address that appears hardcoded into the software.

Patch Remedy keeps you up to date and show you your areas of vulnerability.  Manage the WUA updates for all your Windows systems in a single console. Visit Patch Remedy

Se our latest Blog on How to use Patch Remedy to aggressively update Windows 7

 

 

 

[LabTech] Patches not showing accurately for systems after onboarding with Ignite

I had an odd issue with a new client I had taken over from a previous MSP where after we onboarded the client Labtech showed systems as fully patched but when we scanned system using Windows update they returned with 60+ updates or more. We would then re run the inventory update and would still get all patches up to date. We noticed that the list of patches that were returned did not cover all approved patches. After some investigation we discovered that the previous MSP was using a 3rd party WSUS server and had set the server information in the registry.   If the following Keys are present then you may also be seeing similar problems.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate:WUServer HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate:WUStatusServer HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdateAU:UseWUServer

Here is a Labtech script to clear out the settings and to allow you patch inventory command fetch the correct patches for your system. Execute script against each system that has been configured for a different WSUS server. Once script has completed then execute a hotfix update command from your inventory menu and wait for it to populate with the correct settings.

 

Download Script WSUS Settings Removal

 

Enjoy Cubert 😎

[Solved] – Always getting message “Windows can’t update important files and services while the system is using them”

 

Everytime you try to run the Windows Updater you always get the message  “Windows can’t update important files and services while the system is using them.  Save any open files and restart the computer, and try to check for new updates.“   This is caused by a Registry Key that has not been removed after a previous update.

There is a simple solution for some:

1. Open regedit.exe

2. Navigate to the Registry Key  “HKLM/Software/Microsoft/Windows/CurrentVersion/WindowsUpdate/Auto Update

3. Look for Registry Key “RebootRequired”.

4. Delete the Registry Key. Do not look for a value, there will be a KEY(folder) called “RebootRequired”

5. Reboot the Machine .

6. Run Windows update again.

If this fails to resolve issues you can try the following:

Empty your temporary Internet Files Folder
Open Run Command (Windows key + R)
type: cd %temp%
Empty the contents of that folder (del *.*)
Restart your computer

You can also give this a try:
1. Click Start, type msconfig in the Start Search box, and then press ENTER.
User Account Control permission
If you are prompted for an administrator password or for a confirmation, type the password, or click Continue.
2. On the General tab, click Selective Startup.
3. Under Selective Startup, click to clear the Load Startup Items check box.
4. Click the Services tab, click to select the Hide All Microsoft Services check box, and then click Disable All.
5. Click OK.
6. When you are prompted, click Restart.
7. After the computer starts, check whether the problem is resolved.

This should solve your issue and allow you to Windows Update to install the next round of patches.

Good Luck!

 

Cubert

😎