Kevin Holman's System Center Blog

Posts in this blog are provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified in the Terms of UseAre you interested in having a dedicated engineer that will be your Mic

Which hotfixes should I apply?

Which hotfixes should I apply?

  • Comments 60
  • Likes

 

This is updated as of 8-11-2014 

In general - you should evaluate all hotfixes available, and only apply those applicable to your environment.  However, some of these below I have seen impact almost every environment, and should be heavily considered.

This list is nothing official.... this is just a general list of the recommended hotfixes I end up proactively applying to most environments.... it is not a complete list of ALL hotfixes, and you may be affected by other issues.

 

Common OpsMgr 2012 R2 updates:

This list ABSOLUTELY assumes you are at OpsMgr 2012 R2 level as a base.

Hotfix Update Files Resolves
Applies to: Comments
2965445 

UR3 for 2012 R2
OpsMgr 2012 R2 Update Rollup 3          
           
http://support.microsoft.com/kb/2965445

http://blogs.technet.com/b/kevinholman/archive/2014/08/07/ur3-for-scom-2012-r2-step-by-step.aspx
Many updates. See KB article for all.         
         
MS
GW
Agents
Console
WebConsole
MP Import 
SQL scripts
See the KB and blog article

 

Common OpsMgr 2012 SP1 updates:

This list ABSOLUTELY assumes you are at OpsMgr 2012 SP1 level as a base (7.0.9538.0).

Hotfix Update Files Resolves
Applies to: Comments
2965420 

UR7 for 2012 SP1
OpsMgr 2012 SP1 Update Rollup 7        
           
http://support.microsoft.com/kb/2965420
           
      
Many updates. See KB article for all.         
         
MS
GW            
Agents
Console
WebConsole
MP Import 
ACS
SQL script  
This should be applied after installing SP1, as it has some critical fixes.  See the KB article – do not apply it immediately after installing SP1.

 

Common OpsMgr 2007 R2 hotfixes:

This list ABSOLUTELY assumes you are at OpsMgr R2-RTM level as a base (6.1.7221.0).   

Hotfix Update Files Resolves
Applies to: Comments
MP Update

Microsoft.SystemCenter.2007.mp
6.1.7695.0

Microsoft.SystemCenter.OperationsManager.2007.mp
6.1.7695.0

Microsoft.SystemCenter.OperationsManager.AM.DR.2007.mp
6.1.7695.0

Microsoft.SystemCenter.OperationsManager.Reports.2007.mp
6.1.7695.0

ODR.mp
6.1.7695.0

New reports, knowledge, monitors, rules.  See MP Guide.
MP import only I recommend this update for ALL OpsMgr R2 environments.
2783850

R2 CU7
OpsMgr 2007 R2 CU7 Cumulative Update

http://support.microsoft.com/kb/2783850/en-us

http://www.microsoft.com/en-us/download/details.aspx?id=36379
           
Multiple.  See KB Article.  Note this is a DLL update, MP updates, and SQL scripts update.
Many updates.  See KB
RMS
MS
GW 
Agents
AuditCollector
Console
WebConsole
MP Import
TSQL Script



This hotfix includes a SQL script, which you execute on the database in a query window.
971233 none The console shows customized subscriptions SMTP{GUID} after you upgrade to OpsMgr R2 from OpsMgr SP1 Operations Database (TSQL only) I recommend this hotfix only if you are impacted with this issue.

 

Common related Windows Operating System Hotfixes:

This list is not sorted by OS or anything special – just a collection of OS related hotfixes that SCOM might require, or might fix an issue with the OS that impacts OpsMgr.  These can apply to OpsMgr 2012, 2007R2, or 2007SP1 environments.  

Hotfix Resolves
Applies to: Comments
2954185 Memory leak in WMIPRVSE.exe caused by monitoring DNS.  Agent role
Server 2012 R2
I recommend this hotfix on all Windows Server 2012 R2 DNS servers that are monitored using the DNS management pack, or any type of monitoring which leverages the DNS PowerShell providers.  The leak is caused by accessing the DNS PowerShell providers, which scripts will often call.
2923126 Agents on Windows 2012 R2 Domain Controllers can stop responding or heart-beating Agent role
Server 2012 R2
Windows 8.1
I recommend this hotfix on all Windows Server 2012 R2 servers that are experiencing this issue, or proactively on any WS2012R2 domain controller.
2790831 Handle leak in WmiPrvSE.exe process on Windows 8 or Windows Server 2012 Agent role
Management Server

Server 2012
Windows 8
I recommend this hotfix to stop the handle leak that WILL occur without it.
2692929 "0x80041001" error when the Win32_Environment WMI class is queried by multiple requestors in Windows 7 or in Windows Server 2008 R2 Agent role
Server 2008R2
I recommend this hotfix for Server 2008 R2 machines that also host a ConfigMgr 2007 role, and you are using the ConfigMgr 2006 MP.  This fixes an annoying issue
2618982
Memory leak occurs when monitoring IIS.  The IIS MP discovery modules leverage the same function called out in the KB.  This causes a memory leak in Monitoringhost.exe over time on IIS servers, especially when using APM in OpsMgr 2012. Any OpsMgr Agent Managed or Server role running IIS on Windows 2008 R2 SP1 I recommend this hotfix to be applied to any Server 2008R2 SP1 OS, if it is agent managed and has IIS installed.
2547244 The WMI service and the WMI providers stop responding when you use WMI performance classes to monitor performance on a computer that is running Windows 7 or Windows Server 2008 R2 Agent role
Management Server
Windows 2008 R2
Windows 2008 R2 SP1
Windows 7
I recommend this hotfix if you are experiencing WMI failures, service crashes, or failures to collect data from WMI performance counters via script.  If impacted, it would be applied to any Server 2008R2 or Win7 machine, if it is agent managed or holds a SCOM server role.
2470949 The RegQueryValueEx function returns a very large incorrect value for the "Avg. Disk sec/Transfer" performance counter in Windows Server 2008 R2 or in Windows 7 Agent role
Management Server
Windows 2008 R2
Windows 2008 R2 SP1
Windows 7
I recommend this hotfix to be applied to any Server 2008R2 or Win7 machine, if it is agent managed or holds a SCOM server role.
2495300

(see notes)
Invalid "Avg. Disk sec/Transfer" value returned by the RegQueryValueEx function in Windows Server 2008 or in Windows Vista Agent role
Management server
Windows 2008
Vista
I recommend this hotfix to be applied to any Server 2008 or Vista machine, if it is agent managed or holds a SCOM server role.

Due to an issue in this KB hotfix breaking teamed network adapters, I recommend deploying http://support.microsoft.com/kb/2710558/en-us in order to address this issue, which supersedes 2495300
981314 The "Win32_Service" WMI class leaks memory in Windows Server 2008 R2 and in Windows 7 Agent role
Management Server
Windows 2008 R2
Windows 7
I recommend this hotfix to be applied to any Server 2008R2 or Win7 machine, if it is agent managed or holds a SCOM server role.


This hotfix is already included in Server 2008 R2 Service Pack 1
981263 Management servers or assigned agents unexpectedly appear as unavailable in the Operations Manager console in Windows Server 2003 or Windows Server 2008
(ESE jet database corruption)
Agent Role
Management Server
Server 2003 SP2
Server 2008 SP2

I recommend this hotfix for all RMS, MS, and GW roles running Windows Server 2003 SP2, or Windows Server 2008 SP2.

Apply to agent machines if you feel you are impacted by this issue.
932370 The number of physical hyperthreading-enabled processors or the number of physical multicore processors is incorrectly reported in Windows Server 2003 Agent role 
Server 2003
Server 2003 SP1
Server 2003 SP2
I recommend this hotfix for all agent managed computers running Windows Server 2003, SP1 or SP2, x86 or x64 (If managed using SCOM 2012)
933061 WMI Stability in Server 2003 Agent role 
Server 2003
Server 2003 SP1
Server 2003 SP2
I recommend this hotfix for all agent managed computers running Windows Server 2003, SP1 or SP2, x86 or x64
955360 Cscript 5.7 update for Server 2003 Agent role 
Server 2003
Server 2003 SP1
Server 2003 SP2
I recommend this hotfix for all agent managed computers running Windows Server 2003, SP1 or SP2, x86 or x64
968760 High handle count on the RMS

A managed application has a high number of thread handles and of event handles in the Microsoft .NET Framework 2.0
SCOM 2007 RMS I recommend this hotfix if you are experiencing high handle count on the RMS. 

This hotfix requires SP2 for the OS and .NET 2.0 SP2.
968967 The CPU usage of an application or a service that uses MSXML 6.0 to handle XML requests reaches 100% in Windows Server 2008, Windows Vista, Windows XP Service Pack 3, or other systems that have MSXML 6.0 installed
(Spinlock)
RMS
MS
GW
Agent
I recommend this hotfix if you are impacted with this issue, which is very common.

You might find a MonitoringHost.exe process randomly stuck at 100% CPU.  If so – this hotfix might be applicable.
951327 The System Center Operations Manager 2007 console may crash in Windows Server 2008 or in Windows Vista when you open the Health Explorer window Any Vista or Server 2008 computer with a SCOM console installed I recommend this hotfix only if you run the console on Server 2008 or Vista. 


This hotfix is already included in Server 2008 SP2.
952664 The Event Log service may stop responding because of a deadlock on a Windows Server 2008-based or Windows Vista-based computer RMS
MS
GW
Agent
I recommend this hotfix only if you host an OpsMgr server or agent role on Vista or Server 2008. 

This hotfix is already included in Server 2008 SP2.
953290 An application may crash when it uses legacy methods to query performance counter values in Windows Vista or in Windows Server 2008 RMS
MS
GW
Agent
I recommend this hotfix only if you host an OpsMgr server or agent role on Vista or Server 2008. 

This hotfix is already included in Server 2008 SP2.
958661 FIX: Small memory leaks may occur when you use RSCA to query runtime statistics in IIS 7.0 Any OpsMgr Agent/Server role with IIS 7.0 installed I recommend this hotfix in all cases where you are monitoring servers with IIS 7.0 installed, and use the IIS Management pack.

This hotfix is already included in Server 2008 SP2.
958807 Windows Server 2008 Failover Clustering WMI provider does not correctly handle invalid characters in the private property names causing WMI queries to fail Any Server 2008 agent managed cluster node I recommend this hotfix only if you are impacted with this issue, and use the current Cluster MP.

This hotfix is already included in Server 2008 SP2.

Some general guidance on hotfixes to make you more successful:

ALWAYS - on Server 2008 OS and later, run the hotfix MSI from an elevated command prompt window. This will launch the install of the hotfix, and then launch the boot-strapper window in an elevated process – which is required. Do this regardless of the UAC configuration of the 2008 (and later) OS.

ALWAYS - make sure you read the instructions to understand if the hotfix is a SQL update, installed to the RMS, MS, and/or Gateway, AND/OR applies to agents as well.

ALWAYS - make sure you double-check the DLL version of the updated files to make sure the hotfix successfully applied after installing.

ALWAYS - make sure you double-check the \AgentManagement directory of the management servers and gateways, to make sure if there is an agent update, the x86 and x64 MSP was copied over correctly.

ALWAYS check the language version of the hotfix, and make sure it is the same language version as your SCOM base install. For instance – if you have a English base SCOM install – do not download a localized German version of a hotfix and apply it – or it can break the English SCOM base install.

ALWAYS log on to your OpsMgr role servers using a domain user account that meets the following requirements:

  • SCOM administrator role
  • Member of the Local Administrators group on all SCOM role servers (RMS, MS, GW, Reporting)
  • SA privileges on the SQL server instances hosting the Operations DB and the Warehouse DB.

These rights (especially the user account having SA priv on the DB instances) are often overlooked. These are the same rights required to install SCOM, and must be granted to apply major hotfixes and upgrades (like RTM>SP1, SP1>R2, etc…) Most of the time the issue I run into is that the SCOM admin logs on with his account which is a SCOM Administrator role on the SCOM servers, but his DBA’s do not allow him to have SA priv over the DB instances. This must be granted temporarily to his user account while performing the updates, then can be removed, just like for the initial installation of SCOM as documented HERE. At NO time do your service accounts for MSAA or SDK need SA priv to the DB instances…. unless you decide to log in as those accounts to perform an update (which I do not recommend).

Comments
  • This topic has moved here: http://blogs.technet.com/kevinholman/archive/2009/01/27/which-hotfixes-should-i-apply.asp

  • Hey guys – a new hotfix is published, and I recommend this for all SP1 environments.  This cleans

  • It looks like 954903 has been pulled.  There is a note on the download link that says:

    Hotfix Request

    The KB article has no public hotfixes. Please contact support if you need immediate assistance.

  • Hmmm... it has not been pulled that I can see.

    I just went to the hotfix server, requested it, got the email, and downloaded it.

    All good here.

  • Kevin,

    Thank You for this.  

    I did notice however that http://support.microsoft.com/kb/956240/en-us states that this patch is for

       * The computer hosts an Operations Manager 2007 root management server.

       * The computer hosts an Operations Manager 2007 management server.

    Are you certain that this should go on the DB server. Any thoughts?

  • I am sorry that is confusing.

    You should ALWAYS go with the release notes.

    The reason I noted DB server in this hotfix - is because there is a SQL command... DBCC Freeprocache... that must be run on the DB server after the hotfix is applied... so I wanted to mention that you will need to do "something" on the DB server... but you are correct - you dont apply/install the hotfix there....

  • Upwards of 10? Admittedly it has been about a year since the relase of OpsMgr 2007 SP1, but this level of post-Service Pack hotfixes makes this product a difficult sell to some environments. Making the issue even more difficult is the complex if/then

  • Uvádím zde seznam důležitých oprav pro SCOM 2007 SP1, které používám a doporučuji nasadit v každém prostředí.

  • Thanks to Kevin Holman: Console based Agent Deployment Troubleshooting table and Which hotfixes should

  • Kevin, you say that 954903 supercedes 951380, which supercedes 950853 (all updating mommodules.dll).  Do you know why the KB articles for each of those hotfixes say that each of them do not replace any other hotfixes?

  • Because - techically - 954903 does not replace 951380, which does no replace 950853.  Each hotfix resolves a different issue.

    They simply all update the same file.... mommodules.dll.

    Because of this - I recommend applying the latest hotfix which updates this file - if you are behind on hotfixes.  Technically - 951380 is the most important for *all* environments... because it fixes cluster discovery, and includes the memory leak hotfix from 950853, as it is a newer version of the same file.

  • In targets for KB956240 you say "RMS , MS and OpsDB".

    In Readme file from Microsoft for KB956240

    ".............

    This hotfix must be applied to each computer that meets the following criteria:

    1·Hosts a Microsoft Operations Manager 2007 Root Management Server

    2·Hosts a Microsoft Operations Manager 2007 Management Server"

    Is it nessesary to apply this patch to a standalone OpsDB server ?

  • Please see my comment above where I clarify this.

  • Sur le Kevin Holman's OpsMgr Blog , vous trouverez la page que tout le monde attend. Kevin a recensé...

  • If I had a nickel for each time I heard that one.  It’s a great question too, and one that sometimes

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment
Search Blogs