Hello,
We are facing an issue where a software update task is running every 15 minutes on many machines but we are unable to find any details about the task/ policy. Checked the vItem table and there is no information about the policy with GUID {A1939DC8-DA4A-4E46-9629-0500C2383ECA} . It appears to be initiated by the SoftwareUpdateAgent. We do not use Altiris patching and Windows System Assessment Scan is the only ploicy related to patching which runs at 1200 Hrs daily.
Log content similar to the one mentioned below is generated every 15 minutes.
Could you please help us in identifying this task and taking necessary steps to stop it if it is not normal? Please let me know if you need more information. Thanks in advance.
*********************************************************************
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='ScheduleEngine' module='AgentScheduler.dll' process='AeXNSAgent.exe' pid='4484' thread='1048' tickCount='1106486059'>
<![CDATA[Schedule Software Update Application Task ({A1939DC8-DA4A-4E46-9629-0500C2383ECA}) triggered at 2014-04-03 07:30:00 -4:00]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='SimpleThread' module='AgentScheduler.dll' process='AeXNSAgent.exe' pid='4484' thread='3968' tickCount='1106486059'>
<![CDATA[AgentScheduler: Thread #1233 thread 0xF80 beginning]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='ScheduleEngine' module='AgentScheduler.dll' process='AeXNSAgent.exe' pid='4484' thread='1048' tickCount='1106486059'>
<![CDATA[Next event expected at 2014-04-03 07:45:00 -4:00, wakeup in 14 minutes and 59 seconds]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='SoftwareUpdateAgent' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='3968' tickCount='1106486059'>
<![CDATA[OnScheduleDue fired: {A1939DC8-DA4A-4E46-9629-0500C2383ECA} - Software Update Application Task ]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[isAbidingByMaintenanceWindows() - yes]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[okayToDoMaintenance() - 2014-04-03 07:30:00 -4:00 yes]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='SoftwareUpdateAgent' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[stateChangeEvent() It is time to apply updates ]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='SoftwareUpdateAgent' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[Changing state from [Ready] to [Checking updates]]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='SoftwareUpdateAgent' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[stateChangeEvent() No software updates require installation ]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='SoftwareUpdateAgent' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[Changing state from [Checking updates] to [Ready]]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[isAbidingByMaintenanceWindows() - yes]]>
</event>
<event date='Apr 03 07:30:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106486059'>
<![CDATA[okayToDoMaintenance() - 2014-04-03 07:30:00 -4:00 yes]]>
</event>
<event date='Apr 03 07:35:00' severity='4' hostName='CLIENT1' source='SimpleThread' module='AgentScheduler.dll' process='AeXNSAgent.exe' pid='4484' thread='3968' tickCount='1106786065'>
<![CDATA[AgentScheduler: Thread #1233 thread 0xF80 ending, exit code=0]]>
</event>
<event date='Apr 03 07:35:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106786080'>
<![CDATA[isAbidingByMaintenanceWindows() - yes]]>
</event>
<event date='Apr 03 07:35:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1106786080'>
<![CDATA[okayToDoMaintenance() - 2014-04-03 07:35:00 -4:00 yes]]>
</event>
<event date='Apr 03 07:40:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1107086086'>
<![CDATA[isAbidingByMaintenanceWindows() - yes]]>
</event>
<event date='Apr 03 07:40:00' severity='4' hostName='CLIENT1' source='MaintenanceWindowMgr' module='PatchMgmtAgents.dll' process='AeXNSAgent.exe' pid='4484' thread='1564' tickCount='1107086086'>
<![CDATA[okayToDoMaintenance() - 2014-04-03 07:40:00 -4:00 yes]]>
************************************************************************************************