*Critical Issue* Qfecheck not reporting update KB969897 for Window

[technet_user]

For some reason qfecheck is not reporting internet explorer 6 updates for
windows 2000. It does however report the very same updates for windows xp.

Trouble-shooting steps already performed on for update KB969897:

1. Checked for new version of qfecheck
2. Verfied update was installed (WSUS,registry and file versions)
3. Manually applied update
4. Verfied that registry entries have correct permissions(system has full
access)
5. Ran windows xp version of qfecheck


Additional information:
Location of the registry entry for KB969897:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB969897-IE7(XP)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Internet Explorer
6\SP1\KB969897-IE6SP1-20090501.120000(Windows 2000)

Information in qfecheck:
http://support.microsoft.com/?kbid=282784

This is critical because these machines are disconnected from the network
and are audited with qfecheck.

 

[MowGreen]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Internet Explorer
6\SP1\KB969897-IE6SP1-20090501.120000\Filelist <---

Is Filelist present on the Win2K system ?

When you run Qfecheck for Win2K does it report that no updates for IE6
SP1 have been installed ?
http://www.microsoft.com/downloads/details.aspx?FamilyID=25bd2e13-b437-4f1c-a36a-1bbf6e8ba288

There have been no releases of qfecheck since January 18, 2002.

If the systems are not connected to a network then how is WSUS involved
in updating or confirming that updates have been installed ?

BTW, you can use a more recent scanning tool, MBSA, to scan the
non-connected systems by downloading the wsusscn2.cab file to each
system and do an offline scan:

Microsoft Baseline Security Analyzer 2.1
http://technet.microsoft.com/en-us/security/cc184923.aspx

MBSA 2.1 Frequently Asked Questions
http://technet.microsoft.com/en-us/security/cc184922.aspx


MowGreen
===============
*-343-* FDNY
Never Forgotten
===============

 

[technet_user]

:

Is Filelist present on the Win2K system?
A: Yes. It shows a list of 0-31 as well as the files and versions installed

When you run Qfecheck for Win2K does it report that no updates for IE6
SP1 have been installed?
A: Yes. I suspect that the qfecheck.exe has the registry locations hardcoded
and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Internet Explorer
6 is not included.

If the systems are not connected to a network then how is WSUS involved
in updating or confirming that updates have been installed?
A: I have another WSUS server pushing the updates through FTP to the
disconnected WSUS server with WPUT.

A2: I installed the update manually as well. So I suspect that is not the
issue. It also is not showing any of the previous updates for IE6 in the
generated log either. Prior to me even implementing WSUS.

BTW, you can use a more recent scanning tool, MBSA, to scan the
non-connected systems by downloading the wsusscn2.cab file to each
system and do an offline scan
A: Yes I read that. I would have to though once again script the download
and pushing the files throught FTP to the offline server and script the
running of MBSA CLI version. I already have qfecheck scripted and was hoping
not to have to move over to MBSA.