How to determine if patches are installed

[Guest]

I utilize a login script to deploy Qxxxxxx patches to my Windows users. What can I definitively look for either in the REG or files to determine if a patch has been installed

Also, does the solution work for all flavors of Windows

Thanks much
Neb

 

[Carey Frisch [MVP]]

Microsoft Baseline Security Analyzer (MBSA) version 1.2 is available
http://support.microsoft.com/default.aspx?kbid=320454

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------------------


|I utilize a login script to deploy Qxxxxxx patches to my Windows users. What can I definitively look for
either in the REG or files to determine if a patch has been installed?
|
| Also, does the solution work for all flavors of Windows?
|
| Thanks much!
| Neb

 

[Roger Abell]

One can look at reg keys, or at specific files for their versions/sigs
etc. but these all have ability to provide false positives.
What you should do is open an cmd prompt and cd to the directory
where MBSA is installed, then issue
mbsacli /?
and look at the use of
mbsacli -hf
to scan systems for patch status.
This runs HfNetChk which uses more than just one method to attempt
to determine the status of the target machine(s if input file driven)

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

I utilize a login script to deploy Qxxxxxx patches to my Windows users.

What can I definitively look for either in the REG or files to determine if
a patch has been installed?

 

[Wesley Vogel]

Neb;

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates

Qfecheck.exe Verifies the Installation of Windows 2000 and Windows XP
Hotfixes
http://support.microsoft.com/default.aspx?scid=kb;en-us;282784