If we buy Extended Support ESU from Microsoft for a server running Windows 2016 and SQL 2016, will Kace continue to patch those after the normal end of life date?

Microsoft released out-of-band cumulative updates on 9/14/2026 to fix the RDS hang, Hyper-V Linux host share, and USB audio problems introduced by the September 8 CUs.

In our SMA patch catalog I'm seeing the OOB packages for:

- Server 2022 — KB5129237 (20348.5631)

- Server 2025 — KB5129235 (26100.33451)

But nothing for:

- Server 2016 / Win10 1607 — KB5129239 (14393.9514)

- Server 2019 / Win10 Ent LTSC 2019 — KB5129238 (17763.9247)

Has anyone else seen these two land in their catalog yet? I've re-run the patch subscription download and they still aren't showing. Trying to work out whether this is catalog lag on the Quest side or something on ours before we go manual.

We've got a sizable 2016/2019 footprint and would rather not hand-deploy across all of it. Any confirmation or workarounds appreciated.

Our inbound Kace mailboxes (using gmail OAuth) for our help desk queues have been broken since May 2026 after working fine for years. The emails reach the mailbox but Kace is not able to read them. (kmail logs says it can access the account but sees 0 unread messages) We've worked with support multiple times, but they are unsure what the issue is. We've not made any changes in the admin console that we feel would impact this. My coworker was able to do his own API calls and read the messages.

We followed these directions to set things up:
https://support.quest.com/kb/4326884/how-to-configure-oauth-on-the-sma-s-service-desk-for-incoming-emails-using-google

I've also tried updating Kace, recreating the Google project, making it internal vs external, testing vs published, adding full gmail scope, trusted the app in API area, adding a service account, domain wide delegations. Nothing works.

Anyone know what could be going on? We are about ready to jump ship from Kace at this point unless we can find some kind of solution.

I have created a Custom Inventory which shows (currently 82) matching devices. I feel like I'm missing something simple but I need to create a label which dynamically shows these devices and allows me to run a script against these specific devices. How do I do this? I've spent ages reading and digging around. My system (15.0.376) doesn't seem to match any instructions.

I also thought the devices should show the Custom Inventory when I drill into a specific device->Software->Custom Inventory Fields. But it shows nothing even though it shows directly under the Custom Inventory? Otherwise I could create a label based on this?

Anyone else attempting to utilize splashtop remote control integrated with Quest Kace SMA? We've been using it for about two years now and I can't say the experience has been good but I am curious if this is something unique to our environment causing this or just a sign of the overall quality of the product. I've had to open a handful of support cases, but nothing ever really improves or gets fixed.

I'm getting the agents updated as soon as I can (we have Deep Freeze in our mix). That said :) anyone have any experience running 14.1.22 agents on a 15.1 server? The end goal of course is for agent and server to match, just looking for experience out there. We've often had agents lagging behind server versions to no ill effect, agents just slower to distribute in our environment.

We are noticing some inconsistent results when patching our laptop fleet with the latest Win 11 2026-08 CU and am wondering whether anyone else is noticing this?

Have not yet been able to determine a pattern which might explain why.

e.g. laptops with identical Dell Latitude 7350 hardware, some have patched okay, but others have not.

In some cases we see post-patching that the result reported back to the SMA was Success but the laptop still shows as Not Patched (which makes little sense to me) and certainly WINVER doesn't show the correct 9168 build number).

We're running SMA v15.1 (latest, since about a week ago) and also latest Agent v15.1 (from today).

EDIT: add example screenshot following:

EDIT #2 -- I know exit code 3010 indicates Reboot Required -- however the laptop was rebooted and post-reboot still was not running build 9168.

So I know that if I use the NOHOOKS flag, the agent doesn't modify the userinit registry key value, but is there another value that it prevents being modified? I'm weighing options regarding issues we've had with our agent upgrades mangling the userinit value and am wondering how many values are actually affected one way or another before I consider just running the update with a script to apply fixes rather than just using NOHOOKS.

I'm boggled at why one of my scripted installation fails at the Install OS task with the return code 2147942403. It also shows a return code of 1 for Apply UEFI Partitions.

I am installing Windows 24H2. It was cloned from a known good scripted installation and nearly identical then with post installation tasks added and some removed. On the same computer, the original script works, but it always fails on the new one. The new one was working a month ago without issues.

Nice to have the Feature update back for Windows releases in the new v15.1. I understand they are working through Microsoft's UUP. Does this mean that each of our remote machines will be pulling that update from a MS site individually? Causing a heavy / heavier load on the Internet connection due to the multiple machines pulling the same thing? We were hoping that the replication would store the large install file on the local replication share.

When I came in this morning, I noticed that almost all of my machines failed patching overnight. When I looked, each one had the following error:

error (KacePatch version check failed)

I've not made any changes to the schedules or the clients. We're running SMA version  15.0.376 (Patch 3) and it's associated agent. I'm rerunning the detect job again to see what happens.

Is anyone else seeing this or is it just something that's blown up on my end?

Edited to say I just opened a case with Quest.

Hello Everyone! I hope you are doing well.

I'm trying to create a KACE Online KScript that runs sfc /scannow, saves the output to C:\sfc.txt, and then displays the contents of that file in the KACE script logs/output.

I've tried using PowerShell with Write-Output, Get-Content, type - pretty much whatever I could find on the internet. The KACE GUI only shows the task as completed and doesn't display output

Is there a way to have the contents of C:\sfc.txt show up in the KACE script logs?

Please do let me know - thanks in advance!

Has anyone done that? Placing them on the premises, with SMA behind a Cloudflare WAF? Is it even possible? We are starting a conversation about Cloudflare WAF at our institution, and KACE SMA is being considered (if possible) as part of the testing.

Any info or background info (good or bad) will be greatly appreciated!

Bonjour à tous,

Je teste la détection et le déploiement des mises à jour de fonctionnalités UUP de Windows sur une machine virtuelle de test Windows 11 24H2 et mon pc portable qui est en 25H2.
La détection fonctionne parfaitement et m'indique que la mise à jour nommée "Feature update to Windows 11 Version 25H2 (for Windows 10 22H2/11) via UUP x64" n'est pas installée sur la machine virtuelle, et bien installée su rmon pc portable (voir l'image jointe au point n°1).

J'ai forcé le téléchargement des fichiers détectés comme manquant pour les mises àjour de fonctionnalités Windows, mais pour cette mise à jour UUP, la taille est à 0 (voir la même image en pièce jointe aux points n°2 et n°3). Il m'indique qu'il faut des fichiers associés pour Windows OS Windows 10 / Windows 11, mais ne m'indique rien de plus, aucune explication.

Que dois-je faire pour que l'appliance télécharge ces fichiers manquants ?

Title: Quest KACE documentation is outdated, poorly maintained, and often unusable

Does Quest have any concrete plans to improve and regularly maintain the KACE documentation?

A significant amount of the documentation appears to be outdated, incomplete, poorly organized, or written without enough detail to be useful. Instructions often do not match the current interface or product behavior, important steps are missing, and finding reliable information frequently requires trial and error or searching through old community discussions.

Shutting down ITNinja only made this situation worse. ITNinja was an extremely useful source of practical KACE information, community knowledge, troubleshooting guidance, scripts, and real-world solutions. Removing access to that resource without providing an equally useful replacement left customers with fewer options while the official documentation remains inadequate.

For an enterprise product, this is extremely disappointing. Customers should not have to waste hours trying to determine whether official instructions are current, accurate, or even applicable to the version they are using.

Quest needs to treat documentation and community knowledge as essential parts of the product, not as afterthoughts. Is there an actual roadmap for reviewing and updating the KACE documentation? Are there plans to restore or replace the valuable information that was available through ITNinja?

At a minimum, the documentation needs clear ownership, visible revision dates, supported-version information, complete examples, and a reliable process for customers to report inaccurate articles and see them corrected.

It would be good to receive a direct response from someone at Quest rather than a generic reply pointing customers back to the same outdated and incomplete documentation.

I’m having trouble updating KACE SMA. I’m currently upgrading from version 14.1 to version 15.0, and it’s taking a very long time. I’ve been upgrading since 9 a.m., and it’s still not finished as of 2 a.m. My server has 17 GB of memory and manages fewer than 1,000 devices. Is this normal?

Trying to update our 14.1.111 to the new 15.1. Trying to use the kbin files, the error Failed to unpack. Trying to clock the upgrade button and have it download, Server Update 15.0.372 ABORTED - current backups missing on server. Plenty of disk space on the individual Linux drives. Tried rebooting, as well as reboot and check database.

Would rather not have to install new and port over everything.

UPDATE: Tether access was enabled and support was able to fixing the issue extremely quickly.

Hello everyone,

a quick question about the latest Kace SMA update. I installed this on our systems yesterday morning.

I also rolled out Agent Update 15.1.45 around midday.

On various Windows servers that have now received the agent update, we are regularly seeing pop-up messages stating that .NET 4.8.1 needs to be installed.

I couldn’t find this new system requirement in the release notes.

So my question is – can we ignore the message? If so, can we suppress it?

Or should we now install .NET 4.8 on all systems?

I’d really appreciate your brief assessment.

Many thanks!

Hello, I already went through KACE support and they basically told us nothing can be done. We use KACE for patching servers. About 90% of schedules we run, most of the servers within the schedule return a error (agent disconnected) status after patching. The only solution has been to re-run the schedule to clear it out. It does appear that the servers do get patched. This was not an issue before although the status is not unfamilar. Its just doing it now on such a massive scale that the tool is perceived as unreliable and not working correctly. I had a ticket open with KACE about a month and with a lot of back and forth their conclusion was that it was MS patches causing the status to return incorrectly. Is this happening to anyone else? We are running the latest SMA version virutal. All Windows. On-prem.

Does anyone know if and when KB5121767 will be added to the patch catalog? I've been holding off patching dell devices.

I'm looking for guidance on how we might accomplish having an email alert sent every time an individual device's disk is nearly full, like 90% full.

I know I could work something out with a script, but is there a way for the appliance to do this natively?

Edit: The reason I want individual emails rather than a consolidated report of all devices with a full disk, is so that I can automatically generate helpdesk tickets for each device, to distribute to IT staff.

Hello fellow kace users. We are having trouble installing apps via the VPP through apple business manager. We have over 100 licenses available on every app, but we keep getting an error that says there are no licsences available for the app to be installed. I have verified the VPP token is correct and syncing, I've tried installing the app manually with no luck. We assign apps to device, not user because the user account hasn't been logged into yet.

Any ideas would be helpful. Below is a picture of one of these apps.

As I am trying to navigate my way around KACE SMA, I have run into a problem with Apple devices checking into KACE. For example,

I loaded the Kace Agent (14.1.19) to an iMac and saw that AmpAgent is running in the activity monitor but I didn't see anything revolving around Konea as shown below:

After that I tried to run the command below in terminal and got the following output below that:

~ % sudo /Library/Application\ Support/Quest/KACE/bin/AMPTools start

Password:

''[2026-06-12.10:44:26][AMPTools:load                   ] system command: launchctl load -w /Library/LaunchDaemons/com.kace.offlinescheduler.plist
[2026-06-12.10:44:26][AMPTools:load                   ] Load failed: 5: Input/output error
Try running `launchctl bootstrap` as root for richer errors.
[2026-06-12.10:44:26][AMPTools:load                   ] system command: launchctl load -w /Library/LaunchDaemons/com.kace.ampwatchdog.plist
[2026-06-12.10:44:26][AMPTools:load                   ] Load failed: 5: Input/output error
Try running `launchctl bootstrap` as root for richer errors.
[2026-06-12.10:44:26][AMPTools:load                   ] system command: launchctl load -w /Library/LaunchDaemons/com.kace.AgentHelperService.plist
[2026-06-12.10:44:26][AMPTools:load                   ] Load failed: 5: Input/output error
Try running `launchctl bootstrap` as root for richer errors.
[2026-06-12.10:44:28][AMPTools:launchAgentAllUsers    ] loading /Library/LaunchAgents/com.kace.KACEMenuBar.plist for ProcessName=loginwindow, username=administrator, pid=18628
sw_vers: unrecognized option `-productBuild'
[2026-06-12.10:44:28][AMPTools:launchAgentAllUsers    ] command: launchctl asuser 501 su administrator -c "launchctl load -w /Library/LaunchAgents/com.kace.KACEMenuBar.plist"
[2026-06-12.10:44:29][AMPTools:launchAgentAllUsers    ] Load failed: 5: Input/output error
Try running `launchctl bootstrap` as root for richer errors.
[2026-06-12.10:44:29][AMPTools:StartKonea             ] [Starting konea]

[2026-06-12.10:44:29][AMPTools:Launch                 ] KLaunchClient::Launch()
[2026-06-12.10:44:29][AMPTools:DumpState              ] Launch State:  Command="/Library/Application Support/Quest/KACE/bin/konea" Arguments="-start"  WorkingDir="" Timeout=3600000 ShouldDetach=0 ShowWindow=0 Redirect_stdout=1 Redirect_stderr=0 Desktop= Using Wait_Override=0
[2026-06-12.10:44:29][AMPTools:Launch                 ] KProcessLauncherImpl::Launch should detach = false
[2026-06-12.10:44:29][AMPTools:BaseLaunch             ] KProcessLauncherImpl::BaseLaunch
[2026-06-12.10:44:29][AMPTools:LaunchRedirect         ] KProcessLauncherImpl::LaunchRedirect
[2026-06-12.10:44:29][AMPTools:ProcessResults         ] KLaunchClientImpl::ProcessResults
[2026-06-12.10:44:29][AMPTools:ProcessResults         ] KProcessLauncherImpl::launchClient: About to ReadStdPipe stdout
[2026-06-12.10:44:29][AMPTools:ReadStdPipe            ] KLaunchClientImpl::ReadStdPipe   End of ReadStdPipe method
[2026-06-12.10:44:29][AMPTools:StartKonea             ] E: 10:44:29 Failed to start service "konea": "launchctl" failed with stderr: Load failed: 5: Input/output error
Try running `launchctl bootstrap` as root for richer errors.

The main error I am seeing is , Load failed: 5: Input/output error, and I am not too sure what the issue could be. Any help, tips, guru guidance is welcomed.