Windows System Assessment scan failing on clients with Access denied error

Products

• Patch Management Solution for Windows

Issue/Introduction

Windows system Assessment Scan failing On client with access denied to Catalox.xml.

 

 

 

Access to path '\\?\C:\Program Files\Altiris\Patch Management\packages\windowsvulnerabilityscan\catalog.xml' has been denied.

   [System.UnauthorizedAccessException @ Altiris.Common]

   at Altiris.Common.IO.LongPathFile.Open(String path, FileMode mode, FileAccess access, FileShare share, FileOptions options)

   at Altiris.NS.StandardItems.SoftwareDelivery.PackageSnapshotGenerator.FolderSnapshotGenerator.CalculateFileHashSha256(String path)

   at Altiris.NS.StandardItems.SoftwareDelivery.PackageSnapshotGenerator.FolderSnapshotGenerator.CreateFolderSnapshot(String packageLocation, String relativePackageLocation, SnapshotFolder prevSnapshotFolderData, Int64& totalSize, Boolean includeHiddenFiles)

   at Altiris.NS.StandardItems.SoftwareDelivery.PackageSnapshotGenerator.FolderSnapshotGenerator.CreateFolderSnapshot(String packageLocation, Int32 pkgVersion, String& hash, Int64& totalSize)

   at Altiris.NS.StandardItems.SoftwareDelivery.PackageSnapshotGenerator.GenerateSnapshot(Boolean forceVersionChange)

   at Altiris.NS.StandardItems.SoftwareDelivery.SWDSupport.RefreshPackageSnapshot(PackageItem pkgItem, Boolean forceVersionChange)

   at Altiris.NS.StandardItems.SoftwareDelivery.SWDSupport.ManageDistributionPoints(PackageItem pkgItem, Boolean snapshotOnly)

   at Altiris.NS.StandardItems.SoftwareDelivery.SWDSupport.ManageDistributionPoints(Guid pkgGuid)

   at Altiris.PatchManagement.Tasks.WindowsImportTask.RefreshSystemAssessmentScanPackage(Guid assessmentPackage)

   at Altiris.PatchManagement.Tasks.WindowsImportTask.UpdateAssesmentPackage(IEnumerable`1 listOfFiles)

   at Altiris.PatchManagement.Tasks.WindowsImportTask.RunImport(String cabUrl)

 

Exception logged from:

   at Altiris.Diagnostics.Logging.EventLog.ReportException(Int32 severity, String strMessage, String category, Exception exception, String footer)

   at Altiris.PatchManagement.Tasks.WindowsImportTask.RunImport(String cabUrl)

   at Altiris.PatchManagementCore.Tasks.Server.PMResourceImportTask.ExecuteTask(IServerTaskExecutionInstance instance)

   at Altiris.PatchManagementCore.Tasks.Server.PMResourceImportTask.OnExecuteSingleton(IServerTaskExecutionInstance i)

   at Altiris.PatchManagementCore.Tasks.Server.SerializingBaseSingletonServerTask`2.OnExecute(IServerTaskExecutionInstance i)

   at Altiris.TaskManagement.ServerTasks.BaseServerTask.Execute(ITaskExecutionEngine engine, IBaseTaskExecutionInstance instance, TaskInstanceRequest request)

   at Altiris.TaskManagement.Common.Execution.Engine.TaskEngineExecutionThread.ExecuteTaskHandler()

   at Altiris.TaskManagement.ServerTasks.ServerTaskExecutionThread.ExecuteTaskHandler()

   at Altiris.TaskManagement.Common.Execution.Engine.TaskEngineExecutionThread.OnExecute(Object eventComplete)

   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)

   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)

   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)

   at System.Threading.ThreadHelper.ThreadStart(Object obj)

Cause

Processes on the SMP Server operating system level, specifically NTFS permission management, that caused loss of ownership/rights for specific permissions on Group: Authenticated Users when the 'Delete previously downloaded data for vendors, software and languages that are now excluded' was enabled and ran during the Import Patch Data for Windows (PMImport MetaData download).

Resolution

Work through the following one time on the package:

1. Go to the SMP Server:
   • DRIVE:\Program Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery\{6D417916-467C-46A7-A870-6D86D9345B61}\cache
   • Highlight the Catalog.xml file > Right-click > Properties > Security tab
   • Click 'Edit' button; Click 'Add' button and input the following in the box listed under 'Enter the object names to select (examples): Authenticated Users
     • Click 'Check Names' and then 'OK' if name is confirmed
   • Enable the following boxes under the 'Allow' column on the Security tab
     • Read & execute
     • List folder contents
     • Read
   • Click 'Apply' and 'OK'

 

2. Run the PMImport with setting 'Delete previously downloaded data for vendors, software and languages that are now excluded' not selected:

 

Note: The 'Delete...' option may be re-enabled following this resolution process.