Update for Cisco Secure Client recommended manage conflicting settings

[Jesse Adams]

Hopeful someone would be willing to share their Update for Cisco Secure Client "manage conflicting processes" settings.

Our updates are not installing - failing because another installation is in progress (per intune). 

patchymypc-scriptrunner.log reads
Process found: vpnagent.exe   ScriptRunner   10/23/2024 6:51:17 PM   1 (0x0001)
Aborting update installation process due to running process   ScriptRunner   10/23/2024 6:51:17 PM   1 (0x0001)

Currently "manage conflicting process" is set to "skip installation" and vpnagent.exe is in the manage process list, so this is doing what it is set to do. 

I'm hoping for suggestions/guidance on recommended settings so that the updates will flow!

Thank you!

[Kyle (Patch My PC)]

Hello there,

This would be the expected behavior if you are setting Manage Conflicting Processes to 'Skip' and that process is running at the time. VPNAGENT.EXE is in our default list of processes associated with that application. You can customize (add/remove) any processes you'd like to meet the needs of your environment.

As with all updates/content we recommend testing any changes before deploying to all endpoints.

[Jesse Adams]

Yep, I concur - it is behaving as expected given its current configuration.

I'm hoping to detangle this a bit further.  With the 'manage conflicting processes', for Intune Updates, is the default setting "skip installation" ?   

I'm spot checking other Intune Updates and they all have manage conflicting processes set to skip, and processes listed - this is fine for software that stops and starts, but for "always on" services I'm not sure how to proceed.  Will test and sort it out!

Again I really appreciate your support and PMPC is fantastic. 

[Andrew Jimenez (Patch My PC)]

Hi Jesse,

For apps that we automatically enable Manage Conflicting Processes for (the ones with the icon next to them). We set them to "Skip" by default, as this has the least user-facing impact. You are free to adjust the setting to notify or force close.

[Jesse Adams]

Thank you yep that makes sense.  For user-facing impact, definitely can't have it update while the user is running it!

But unless I'm misunderstanding, for applications that run as services where you automatically enable manage conflicting processes / skip - the default behavior would be for them to never update (as the service would already be running).

I think each service application will need its own special sauce for how best to handle.

[Andrew Jimenez (Patch My PC)]

This is definitely something that we can consider in the future. Right now, it is an on/off switch where "on" is "skip".

I found this idea: https://ideas.patchmypc.com/ideas/PATCHMYPC-I-4417 which seems close to what you are looking for. I'd recommend voting for that idea and adding a comment on it, then you'll get notified if/when we ship it.