Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - MTREICHLER

Pages: [1]
1
Great,  Here is how I was customizing the rules in past to avoid LTSR patching, which is only accounting for command line situation.


Code: [Select]
<lar:And>
<bar:RegValueExists Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayVersion" RegType32="true"/>
<bar:RegSz Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayName" Comparison="Contains" Data="Workspace" RegType32="true"/>
<bar:RegSzToVersion Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayVersion" Comparison="LessThan" Data="21.6.0.47" RegType32="true"/>
<bar:WindowsVersion Comparison="GreaterThan" MajorVersion="6" MinorVersion="1" ProductType="1"/>
<lar:Not>
<bar:RegExpandSz Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Citrix\ICA Client\AutoUpdate\Commandline Policy" Value="LTSROnly" Comparison="EqualTo" Data="true" RegType32="true"/>
</lar:Not>
</lar:And>

2
"Citrix Workspace 21.7.0.44"

I also created rule with proper NOT conditions and imported.   NOT conditions were stripped out.

We are importing our patches into WSUS with WSUS Package Publisher, not going though SCCM.   Maybe the installable ruleset on native WSUS SCUP API is more limited than SCCM.  I know the NOT condition does work on registry conditions as that is how I was avoiding patching my LTSR by keying off LTSROnly NOT true.

Your logic is correct on LTSR probably just related to missing NOT condition.

3
Thanks for the reply.

When I export the 21.7.0.44 installable rule there isn't NOT condition to proceed the OR statements. 

Code: [Select]
<lar:And>
<bar:RegValueExists Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayVersion" RegType32="true"/>
<bar:RegSz Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayName" Comparison="Contains" Data="Workspace" RegType32="true"/>
<bar:RegSzToVersion Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayVersion" Comparison="LessThan" Data="21.7.0.44" RegType32="true"/>
<bar:WindowsVersion Comparison="GreaterThan" MajorVersion="6" MinorVersion="1" ProductType="1"/>
<lar:Or>
<lar:And>
<bar:RegValueExists Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Citrix\ICA Client\AutoUpdate\Commandline Policy" Value="LTSROnly" RegType32="true"/>
<bar:RegSz Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Citrix\ICA Client\AutoUpdate\Commandline Policy" Value="LTSROnly" Comparison="EqualTo" Data="true" RegType32="true"/>
</lar:And>
<lar:And>
<bar:RegValueExists Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Policies\Citrix\ICA Client\AutoUpdate" Value="LTSROnly" RegType32="true"/>
<bar:RegSz Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Policies\Citrix\ICA Client\AutoUpdate" Value="LTSROnly" Comparison="EqualTo" Data="true" RegType32="true"/>
</lar:And>
</lar:Or>
</lar:And>

4
Adobe is pretty much a dumpster fire for their releases and support.  I've signed up for their notification on releases and 1/4 of the time PatchMyPC notifies us before Adobe notifies.  21.005.20060 for example, not a security update, but no notification from Adobe to date.

5
With Citrix Workspace 21.7.0.44 release on 7/29 seems some changes how Workspace is targeted changed.

With Workspace version prior to 21.7.0.44 (non LTSR)  4 conditions for patch to be installable.

--------------------
1. RegValueExists Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayVersion" RegType32="true"

2. RegSz Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayName" Comparison="Contains" Data="Workspace" RegType32="true

3. RegSzToVersion Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb" Value="DisplayVersion" Comparison="LessThan" Data="21.6.0.47" RegType32="true"

4.  WindowsVersion Comparison="GreaterThan" MajorVersion="6" MinorVersion="1" ProductType="1"
--------------------

With 21.7.044 there seems to be some additional conditions that also target off "HKLM\SOFTWARE\Citrix\ICA Client\AutoUpdate\Commandline Policy"  & "HKLM\SOFTWARE\Policies\Citrix\ICA Client\AutoUpdate" LTSROnly=true conditions.


Overall some thoughts on regular Workspace vs LTSR Workspace.

If LTSROnly=true that indicates either a GPO is set or command line was used to limit auto upgrades to LTSR versions.  If PatchMyPC upgrades LTSR Workspaces to regular Workspace installs that is ignoring the configured setting installer or admins are configuring. 

Our environment for example majority of our Workspace installs are LTSR as we need the cerification and stability of LTSR over cutting edge feature of Workspace.  In the past I've modified the Workspace installable rules to avoid patching our LTSR installs. 

Wanted to start a discussion and suggest that targeting of Workspace & Workspace LTSR with different approach.  What may make sense is if any LTSROnly=false or values do not exist then Workspace patch permitted.  If LTSROnly=true then only LTSR installs are permitted.  Customers like us would need to have both Workspace & Workspace LTSR patches approved, but it keeps the Workspace on Workspace and LTSR on LTSR. 

Thanks,

6
PatchMyPC with WSUS

DCU 4.2.0 has installable rule where DCU has to be 3.0 or higher to install.  Do we know why the 3.0 or greater limitation exists?  I could adjust the rule to upgrade legacy versions, but rather not if known issues with legacy upgrades.

Somewhat related there are 2 version of DCU.  Classic & UWP DCU 4.2.0 only installs on Classic.  Any plans for UWP DCU update?

Thanks,
 

7
Archived Feature and Product Request / Re: TigerText Desktop Messenger
« on: November 30, 2018, 01:14:58 PM »
Whoops.... Forgot to reply to this.

Here are 2 older versions.

https://drive.google.com/open?id=1moWdLlQCcnh995KBx0S4ZTCK2ENv_JZZ


Current version is 4.2.0229.   Product name also changed from TigerText Desktop Messenger to TigerConnect Desktop Messenger

Thanks,

9
Archived Feature and Product Request / Re: PDFCreator 3.2.1
« on: September 04, 2018, 01:20:51 PM »
Pushing people towards their paid versions.   :(

Probably  for the best.  Even though not always installing the junkware the presence of that in their installers causes few AV vendors to flag it.  The used to support installer option  /LOADINF= where you could specify components too from answerfile, but that could be disabled now or next release as well..

Program isn't as needed with Win10 including an adequate basic PDF Printer now.


10
From release notes:

PDFCreator 3.0 requires the .Net Framework 4.5.1 and therefore Windows Vista or above. Windows XP is no longer supported. If you need Windows XP support, please use PDFCreator 2.x instead.

http://docs.pdfforge.org/pdfcreator/latest/en/pdfcreator/introduction/whats-new/

PDFCreator will install if requirements are not met, but will error when running application.  Can PatchMyPC detection account for .NET Framework 4.5.1 requirement?   Application failures can be high if upgrading from older PDFCreator prior to 3.0 with .NET 4.5.1 or newer.

12
Archived Feature and Product Request / TigerText Desktop Messenger
« on: September 04, 2018, 11:30:26 AM »
Healthcare Messaging App TigerConnect's healthcare messaging app allows you to take advantage of unprecedented cost savings, improved clinician morale and better health outcomes.

https://www.tigerconnect.com/products/download

The MSI that were version 4.0.4.229 and older had issue where when installed from local system account application wouldn't run from non-admins.   Not tested if issue still exists in latest version.  EXE version does not have this issue. 

InstallShield MSI extracting installer.

TigerText_Installer_x86.exe /S /V" /QN " should work.   Exitcodes 0 & 3010.


Pages: [1]