To have the Software Update Policy Wizard implement a custom filter when creating Software Update Policies; work through the following:
- Open the Console > Settings > All Settings > Software > Patch Management > Windows Settings > Windows Patch Remediation Settings:
- Highlight the Default Targeted filter: 'Windows Computers with Software Update Plug-in Installed Target'
- Click the Red X on the tool bar to delete this all-encompassing filter
- Click 'Apply to'
- Type in the name of the custom filter / OU or target to be implement when creating Software Update Policies
- Note: This process must be owned by the Application Identity
- RDP with MSTSC /admin or /console, with Symantec Service Account Credentials, and input the changes required.
- If the Default Target Filter is not showing owned by the App ID; work through KM: TECH142535 to modify the Target to allow for manual updating in SQL, log in with App ID, and run Update in the filter. Otherwise, any custom Target Filter may be owned by that Admin that implemented it, provided it holds at least one client.
Note: There must be at least one client targeted by this policy. Patch Management requires a reference of client resources in order to process through this policy. If there is not at least one client populating the targeted filter for this policy; Patch Management will cease to function properly. Patch Management will function with this lacking Target Filter; however, if the Target Filter for Patch Management is not current, and failed to be updated due to the lack of missing Target Filter, the rules for Compliance will reflect on that stale data.
- Mandatory: Ensure at least one client or filter is targeted by this policy at all times before creating Policies and rolling out updates
- This is critical for the process to complete, for without a target filter, the process to build resource associations will not always be successful as it updates target rule logic for each Client, Software Update and Software Update Policy
- Additionally, always check to ensure the default Target Windows Computers with Software Update Plug-in Installed - Target is owned by App ID per TECH142535
- The Patch Filter may be viewed from the SSE Reports found on KM: HOWTO52986: Under SSE Reports > Solutions > Patch Management > Patch Filters report
Advisory: Current known issues as follows:
- KM: TECH204204; automated process removes the targeted filter from the 'Windows Patch Remediation Settings' policy.
- KM: TECH223657; Windows Patch Remediation Settings fail to replicate Target settings from Parent SMP to Child SMP in hierarchy.