Scan Machine

The Scan Machine page schedules scans to search for missing patches on each managed machine. Scanning takes very little resources and can be safely scheduled to run at any time of day. The scanning operation does not impact users at all.

Scanning Frequency

System and network security depends on all your machines having the latest security patches applied. Microsoft typically releases patches on Tuesdays. Security and critical patches are typically released on the second Tuesday of the month (Patch Tuesday), and non-security and non-critical patches are typically released on the third and/or fourth Tuesdays of the month, but these schedules are not guaranteed. To ensure your machines are updated you should scan all managed machines on a daily basis.

Scanning the Kaseya Server

To scan the Kaseya Server, you must install an agent on the Kaseya Server. Once installed, you can scan the Kaseya Server just like any other managed machine.

View Definitions

You can filter the display of machine IDs on any agent page using the following options in View Definitions.

Machines that have no patch scan results (unscanned)
Last execution status for patch scan success / failed
Patch scan schedule / not schedule
Patch scan has / has not executed in the last <N> <periods>

Remind me when machines need a patch scan scheduled

If checked, a warning message displays the number of machine IDs not currently scheduled. The number of machine IDs reported depends on the Machine ID / Group ID filter and machine groups the user is authorized to see using System > Scope.

Schedule

Click Schedule to display the Scheduler window, which is used throughout the VSA to schedule a task. Schedule a task once or periodically. Each type of recurrence—Once, Hourly, Daily, Weekly, Monthly, Yearly—displays additional options appropriate for that type of recurrence. Periodic scheduling includes setting start and end dates for the recurrence. Not all options are available for each task scheduled. Options can include:

Schedule will be based on the timezone of the agent (rather than server) - If checked, time settings set in the Scheduler dialog reference the local time on the agent machine to determine when to run this task. If blank, time settings reference server time, based on the server time option selected in System > Preferences. Defaults from the System > Default Settings page.
Distribution Window - Reschedules the task to a randomly selected time no later than the number of periods specified, to spread network traffic and server loading. For example, if the scheduled time for a task is 3:00 AM, and the distribution window is 1 hour, then the task schedule will be changed to run at a random time between 3:00 AM and 4:00 AM.
Skip if offline - If checked and the machine is offline, skip and run the next scheduled period and time. If blank and the machine is offline, run the task as soon as the machine is online again.
Power up if offline - Windows only. If checked, powers up the machine if offline. Requires Wake-On-LAN or vPro and another managed system on the same LAN.
Exclude the following time range - Applies only to the distribution window. If checked, specifies a time range to exclude the scheduling of a task within the distribution window. Specifying a time range outside of the distribution window is ignored by the scheduler.

Note: This Schedule button may be hidden for a standard user. This button is enabled using the System > System Preferences > Enable Scheduling node on the User Roles - Access Rights tab.

Cancel

Click Cancel to cancel execution of this task on selected managed machines. Does not clear scans that have already started.

Run Now

Click Run Now to run this task on selected machine IDs immediately.

Set Default Scan Source

Sets the scan source of selected machines.

Online - Scan for updates using the Microsoft Update Catalog on the internet, then the cab file second. This is the default scan type.
Offline - Scans for updates using the offline scan source wsusscn2.cab file. This file is copied to the agent's working directory from the Kaseya Server at the time of the scan. The Kaseya Server updates its copy of the cab file, if necessary, twice a day.

A warning icon displays next to any machine that fails to scan online using its default scan source. You can filter machines using the Machines with patch scan source set to online but offline scan ran last checkbox on the View Definitions page.

Note: Machines with a legacy scan source cannot be changed. When a patch scan runs, the OS/Service pack minimum requirement is checked: Win 2000 SP3 or later. If the minimum requirement is not met, a legacy scan is run instead of a WUA Patch Scan.

Select All/Unselect All

Click the Select All link to check all rows on the page. Click the Unselect All link to uncheck all rows on the page.

Check-in status

These icons indicate the agent check-in status of each managed machine. Hovering the cursor over a check-in icon displays the agent Quick View window.

Online but waiting for first audit to complete

Agent online

Agent online and user currently logged on.

Agent online and user currently logged on, but user not active for 10 minutes

Agent is currently offline

Agent has never checked in

Agent is online but remote control has been disabled

The agent has been suspended

Machine.Group ID

The list of Machine.Group IDs displayed is based on the Machine ID / Group ID filter and the machine groups the user is authorized to see using System > User Security > Scopes.

Last Scan

This timestamp shows when the last scan occurred. When this date changes, new scan data is available to view.

Skip if Machine Offline

If a checkmark displays and the machine is offline, skip and run the next scheduled period and time. If no checkmark displays, perform this task as soon as the machine connects after the scheduled time.

This timestamp shows the next scheduled scan. Overdue date/time stamps display as red text with yellow highlight.

Recurrence

If recurring, displays the interval to wait before running the task again.