ENS chained installs fail sometimes

[therez]

Hello

I'm in the midst of upgrading to ENS 10.7.0 Sept 2021 release and I've noticed far more discrepancies than usual.

Platform installs fine but then it seems to forget to install Threat Prevention (and Web Control, where applicable).  There are no EHS logs for TP, it hasn't even tried.  If I tag these machines to just install TP then they will.

This is upgrading from ENS to ENS and I'm using tags + client tasks to install both components.

Anyone else seen this or have a suggestion to improve success first time?  (Please don't suggest the upgrade assistant, it isn't suitable for my environment).

Thank you.

[AdithyanT]

Hi @therez,

Thank you for your post. May I know if these deployments are carried using "Run Client Task Now" option? or is it being done by client task assignment? Can you kindly share a screenshot of the task assignment here?

[therez]

Hi Adithyan

We control the amount of machines upgrading at a time by applying a Tag which is part of an Assigned Client Task.  The task has Platform and Threat Prevention Install in that order.  The actions are set to only send to machines with matching Tag and Schedule type is 'Run immediately' with a timeout of 2 hours.

(screenshots attached)

Thank you.

[Saif_f]

Hi @therez 

Thank you for posting in community forum. Could you please tell us if there is any pattern seen to this problem (like OS with Win7 or OS with certain build). If the same task and tag is applied to many machines and most of them are successful with the upgrade, then I can only assume that it has to be related to the state of the machine as we do not have any logs or data to check.

It would be better to check on a few test machines if there is any similarity or pattern that could be causing this. (Like machine having the TP module in not responding state, or if has not been rebooted for a very long time etc.)

Kind Regards,

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[therez]

Hi Saif

All machines are Windows 10 running build 1909. There is no pattern that I can tell. As I said, if I tag the machines to install TP after the platform as installed it'll go on no problem. I didn't see this issue in testing, however I'm upgrading close to 20k machines now and I'd estimate this issue is causing around a 5% to fail the TP install. And I really don't like miss-matched versions 🙂