Welcome to TechNet Blogs Sign in | Join | Help

A little tidbit on Hot-fixes for OpsMgr

When you apply a hot-fix to a RMS, or Management Server, or Gateway server... a couple things will happen.  First... it will update the server itself with whatever the hot-fix is supposed to fix... registry, DLL's, database updates, etc.  Next, if the update needs to flow down to all agents... it will place a MSP file in the \AgentManagement directory under the OpsMgr installation directory.

 

image

 

 

Then, it will put the agents that report to the hot-fixed management server, into pending actions for the update.  It will only place the agents reporting to that MS/RMS into pending... not all agents.  For this reason - you really should patch ALL your RMS, MS, and GW's first, before approving any agents.

Then, when you "approve" an agent for the update... what it does is actually reinstall the agent, from its management server, then apply any update MSP's that are present, and that are not already installed.

 

So - when you apply a hot-fix to a management group - before approving any agents, it is a good idea to check your \AgentManagement directories on all MS/GW roles, and make sure the \x86 and \AMD64  folders have consistent AND CORRECT patch files present.

 

When you "approve" agents for the update... or perform a "repair", we recommend only doing 200 agents at a time, max.  Phase the updates out in batches.

 

Then, use the "Patch List" view described in my previous blog post, to ensure all agents got updated.  For agents that still need to be updated, simply run a "Repair" on those from the console, or patch them manually. 

 

Any new agents that get pushed will automatically get the current hot-fixes applied, as long as the hot-fix MSP's are present in the \AgentManagent directory.  However, manually installed agents must be hot-fixed manually.

 

Lastly... on the current batch of hot-fixes....  950853 and 951380 BOTH update the SAME file.... mommodules.dll  950853 (memory leak) updates this file to 6.0.6278.11, and 951380 (cluster discovery) updates the same file to 6.0.6278.20.  IF you are planning on applying both of these fixes... technically, you only need the latter, since it includes the previous fix.

 

Update 10-15-2008

Now - if you are applying 954903.... this contains mommodules.dll 6.0.6278.36 which supercedes BOTH 951380 and 950853....  so if you need all three hotfixes - just apply 954903.  However - note in the picture below, if you apply two hotfixes that update the same file, the management server \AgentManagement directory still keeps the older one.... apparently the hotfix process does not understand that they update the same file, nor does it clean out the older 951380.  The problem with this - is any major agent deployment will get impacted... because we will add to the install time, and impact the network worse.  In this example - an agent push will be copying over the agent MSI (9MB) plus each hotfix in this directory....  while we dont have any direct guidance on this area - I would recommend removing the older hotfixes that no long apply, or are superceded by other hotfixes already in this directory.

 

image

Published Wednesday, June 25, 2008 7:13 PM by kevinhol
Filed under:

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

# re: A little tidbit on Hot-fixes for OpsMgr

Thursday, June 26, 2008 7:14 PM by Derek

Kevin,

One issue I did notice was that if you use  active directory integration for your agent assignemnt and then you run a repair from the console the agent wil lose its AD integration. Do you know if this is the case for the hotfix install?

# What hotfixes should I apply ?

Friday, September 12, 2008 5:01 PM by Kevin Holman's OpsMgr Blog

In general - you should evaluate all hotfixes available, and only apply those applicable to your environment.

# re: A little tidbit on Hot-fixes for OpsMgr

Wednesday, September 24, 2008 7:59 AM by Marnix Wolf

Hi Kevin.

Thanks for the information.

However, when I push an Agent from SCOM to a new server, it installs well but the Agent has a lower versionnumber (6.0.6278.0) instead of versionnumber 6.0.6278.36.

When I perform a repair the right versionnumber is being displayed.

What goes wrong? The hot-fix MSP's are present in the \AgentManagent directory.

Kind regards,

M Wolf

# re: when I push an Agent from SCOM to a new server

Wednesday, September 24, 2008 9:24 AM by kevinhol

After installing an agent - where are you looking to determine if the agent hot the hotfixes as well?

Check the DLL version first - that is the most reliable way to ensure it got it.

Check the application log for Windows Installer events on an agent push - you should see the success/failure of the agent, and any subsequent hotfixes.

# re: A little tidbit on Hot-fixes for OpsMgr

Thursday, September 25, 2008 1:55 AM by Marnix Wolf

Hi Kevin.

Strangest thing is the dll version (mommodules.dll) is version 6.0.6278.36 yet SCOM displays the Agent version being 6.0.6278.0. So perhaps SCOM is not showing the correct information about the version?

The app. log is displaying the succesfull installation of the msi files and the updates (msp files) as well.

However, after a repair all is well: the dll version is still the same as before the repair but the SCOM console displays the correct version of the Agent.

So my guess is the SCOM gui is not displaying the correct information. A refresh or dumping the cache does not resolve it though, only a repair does.

Perhaps SCOM reads the dll version once (just before the updates are being applied) and displays that information in its gui. A refresh doesn't start that proces again. With a repair SCOM looks again at the version of the dll and displays that information.

Kind regards,

M Wolf

# re: Agent version in scom GUI

Thursday, September 25, 2008 12:20 PM by kevinhol

Where are you looking at agent version??

Please shoot me an email and lets take this discussion there... I'd like to understand where you are looking to get an "agent verion" that is changing, and what actions you take to change it.

# re: A little tidbit on Hot-fixes for OpsMgr

Monday, October 27, 2008 1:07 PM by Shawn Green

I think this might be a problem with applying the patch to Windows Server 2008 SP1.

# re: I think this might be a problem with applying the patch to Windows Server 2008 SP1.

Monday, October 27, 2008 1:16 PM by kevinhol

I dont follow you - can you expound?

# re: A little tidbit on Hot-fixes for OpsMgr

Thursday, October 30, 2008 9:56 AM by Ian Zarzuela

After applying the 956240 hotfix and following the SQL process on the RMS, the version of Microsoft.mom.dataaccesslayer.dll is still 6.0.6278.0. Already tried re-applying to no avail.  Any advise?

# re: A little tidbit on Hot-fixes for OpsMgr

Friday, November 21, 2008 8:43 AM by Olaf

Hi,

i have another question about applying hotfixes.

What about servers in DMZ, wich are monitored via gatewayserver? The servers are also reported in "pending managment", but cannot be remotely updated.

When i patch the agent manualy, what about the "pending managment" entries? Do they disapear, must i reject those updates?

regards

Olaf

# re: A little tidbit on Hot-fixes for OpsMgr

Friday, November 21, 2008 11:17 AM by kevinhol

Why cant they be remotely updated?

If the gateway has been patched, and has the update files - why cant it be updated?

# re: A little tidbit on Hot-fixes for OpsMgr

Thursday, December 04, 2008 10:38 AM by jkhemker

In reply to

"Strangest thing is the dll version (mommodules.dll) is version 6.0.6278.36 yet SCOM displays the Agent version being 6.0.6278.0" :

The patch is a "small update patch"; these patches do not increment the MSI ProductVersion Property in the first 3 positions, but only in the 4th (irrelevant but visible) position. In this case, the patch creator has decided NOT to increment the ProductVersion at all, which is perfectly legal from an MSI point of view.

# Which hotfixes should I apply?

Tuesday, January 27, 2009 12:19 PM by Kevin Holman's OpsMgr Blog

  In general - you should evaluate all hotfixes available, and only apply those applicable to your

# Aktualizace pro SCOM 2007 SP1 (hotfixes)

Friday, February 13, 2009 11:03 AM by Nejde jen o software...

Uvádím zde seznam důležitých oprav pro SCOM 2007 SP1, které používám a doporučuji nasadit v každém prostředí.

# re: A little tidbit on Hot-fixes for OpsMgr

Wednesday, July 22, 2009 5:55 AM by Juergen

i just installed R2, but see no Pending Management now. Shouldn't I get the agent installed computers in the Pending Management?

I just have 6.0.6278.0 (SP1) but no chance to install a higher version on the servers

# re: pending management

Wednesday, July 22, 2009 3:28 PM by kevinhol

Are your agents all manually installed?

Look in "Agent Managed" view - add the "Remotely Manageable" column.  Is this "Yes" or "No"?

Leave a Comment

(required) 
required 
(required) 

  
Enter Code Here: Required
 
Page view tracker