SIMS Deployment post Patch Tuesday

[LansITGuy]

Morning all.

 

Is anyone else having issues installing SIMS from SOLUS3 since last weeks Microsoft patch Tuesday?

 

We've been installing SIMS from SOLUS without issue for ages. Started rolling out a new OS build and then deploying without anything unusual. However, this week, we now can't get the push to go through. We get an "Install failed" and the note stating that "Access denied to the remote machine".

 

We've tried to redeploy the image, and not run updates. This allowed SOLUS to run the install.

 

I'm pretty sure it's the most recent update, but I need to do more testing to confirm.

 

Cheers.

[psydii]

Maybe this: https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

 

Check Event Logs for the IDs mentioned in the article.

[Syman_a]

we had this issue.

you may need to re-enable SMB1 in windows.

Edited June 22, 2022 by Syman_a

[LansITGuy]

Maybe this: https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

 

Check Event Logs for the IDs mentioned in the article.

 

Thanks psydii.

 

That looks like it could be it. Default behaviour changed on 14/6 which ties in with what we're seeing. I'm assuming this is a change Capita need to make. At least we can modify our deployment procedures to cover for now.

[synaesthesia]

we had this issue.

you may need to re-enable SMB1 in windows.

 

Surely that's a "hell no" from anything and anyone?

[psydii]

we had this issue.

you may need to re-enable SMB1 in windows.

 

 

Do not do this.

[IanMac]

This would be funny if it wasn't so sad

[psydii]

The only reason @synaesthesia got his post in before me, honestly was because I removed the 'hell no' from my draft.

[sigma]

Maybe this: https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

 

Check Event Logs for the IDs mentioned in the article.

 

Reading from elsewhere:

 

If you use the workaround specified by Microsoft, you will have until March of next year to solve the problem. If a vendor specifically instructs you to disable the impact of the patch, you should ask them what their plans are for next March, when the patch is mandatory. Your vendors have had a year to prepare for this, and it's high time they had a plan that doesn't involve not installing updates next March.

 

Bottom line: If you are negatively affected after the June updates and must disable DCOM hardening, this is your clue that you need to contact your vendors as soon as possible and start screaming bloody murder. They've had a year to plan for this, and we have only a few months before we can no longer disable this setting.

[Kaz77]

I have carried out the work around specified by Microsoft, which enabled the Solus Agent to be installed. I have also spoken to ESS who say that they are working on it!

[Koldov]

Reading from elsewhere:

 

Your vendors have had a year to prepare for this, and it's high time they had a plan that doesn't involve not installing updates next March.

 

I have also spoken to ESS who say that they are working on it!

 

Might as well have just changed ESS to Capita and...

 

Different company...

 

Same ****!

 

Have they publicly acknowledged this on a support portal anywhere?

[Esteban_Child_of_the_Sun]

ESS have a KB article about it here.

[mikes]

Why is it there is a major SIMS.NET update 3 times a year yet they seem to have been selling the exact same product totally unchanged since 1992 ?

[psydii]

Harsh. More-or-less unenhanced since 2012 perhaps would be more accurate.

 

If the general SIMS user was prepared to put up with a dramatic change, then more schools would already have left. But they aren't, the user base is conservative, and a big new UI would be missing features that some depend upon, and nobody would be happy. Eventually other factors overcome this reluctance to accept change and schools seek alternatives.

 

I don't believe I am mistaken in saying that no major MIS has successfully redesigned its UI and architecture and remained dominant since the SIMS ->SIM.NET transition in the 2000's. Bromcom might be a contender, depending on whether you believe its MIS to be a new product or a revision of its earlier on premises eSchool suite of products - but back then you would struggle to have called that suite a 'major' MIS.

 

Home unfortunately, you will see innovation and change slow again as more people use the alternatives, to the point that new SIMS might start having to be innovative, wouldn't that be a turn up for the books!

[paulkerton]

I don't believe I am mistaken in saying that no major MIS has successfully redesigned its UI and architecture and remained dominant since the SIMS ->SIM.NET transition in the 2000's.

Well, as SIMS has had a monopoly since it first came into existence, that is a statement that is self fulfilling and means absolutely nothing, to be fair.

[psydii]

I'm not having a good week with my choice of words.

 

Replace dominant with "in the top 5" and my meaning should be clearer. Based on what has happened to the rest of the market, the only reason sims is still dominant is because they have not pushed users to their cloud MIS(1), for that way lies the corpses of the competition(4).

 

 

(1) yeah yeah, not ready etc etc. but objectively neither were the competition's and they did push users which is why(2) they are all as good as dead.

 

(2) alright they also did not have pockets as deep(3) as Capita's

 

(3) and yet, Bromcom.

 

(4) Remember I am talking about those vendors who had a strong on premises MIS product that then tried to move to the cloud, not the new entrants disrupting the market with their cloud-first products.(3)

Edited August 5, 2022 by psydii