Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 6596 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Shh/Updater-B: selectively acknowledging FP's and errors via script?

MattAustin

Hey folks, hope y'all's week has been going well! 

We've been going about cleaning up our endpoints from last week's glitch;  the fix vbscript is working very well, and we're marking down the hostnames of the computers that have been fixed.  

I saw the script that will acknowledge ALL the shh/updater-b alerts in Enterprise Console (4.5 in our case) but what if i don't want to acknowledge all of them?  

Is there a way I can feed it a list of hostnames to acknowledge the SHH/Updater-B on?  I'd like to later run a new list of ones to work on.  

Or am I thinking about this all wrong?  if I acknowledge them all, will the still-broken ones repopulate again?  I had thought they would be ignored, since I acknowledged it.  

Any advice or help would be appreciated.  

:33187


This thread was automatically locked due to age.
Parents
  • 0

    Hi MattAustin, sorry it has taken a while to get back to you, i believe there is a way of doing what you require mentioned:

    http://www.sophos.com/en-us/support/knowledgebase/118328.aspx

    Specifically: 

    Discover affected endpoints

    If you already know the list of affected computers, go the next section titled 'Edit the policies applied to affected endpoint computers'.

    Find out which endpoints require attention within Enterprise Console.

    1. On your Sophos Management server download batch file fpc.bat and save it to a directory of your choosing.
    2. Execute the batch file from a command prompt by first changing directory to where the file was saved to, then run the following:fpc.bat > FpWithoutFix.txt
    3. Once the command completes, open FpWithoutFix.txt to see the computers which have 'agen-xuv.ide' but don't have 'javab-jd.ide'.

    Bit further down there is a mention of:

    Deleted files from third party applications may required re-installation. To generate a list of deleted files use the tool fpdf.bat as described in 118324.

    HTH, if there is anything else you need please let us know

    :33327
Reply
  • 0

    Hi MattAustin, sorry it has taken a while to get back to you, i believe there is a way of doing what you require mentioned:

    http://www.sophos.com/en-us/support/knowledgebase/118328.aspx

    Specifically: 

    Discover affected endpoints

    If you already know the list of affected computers, go the next section titled 'Edit the policies applied to affected endpoint computers'.

    Find out which endpoints require attention within Enterprise Console.

    1. On your Sophos Management server download batch file fpc.bat and save it to a directory of your choosing.
    2. Execute the batch file from a command prompt by first changing directory to where the file was saved to, then run the following:fpc.bat > FpWithoutFix.txt
    3. Once the command completes, open FpWithoutFix.txt to see the computers which have 'agen-xuv.ide' but don't have 'javab-jd.ide'.

    Bit further down there is a mention of:

    Deleted files from third party applications may required re-installation. To generate a list of deleted files use the tool fpdf.bat as described in 118324.

    HTH, if there is anything else you need please let us know

    :33327
Children
No Data