| Author |
Message |
patje
Guest
|
 Posted:
Sun Dec 19, 2004 5:55 pm Post subject:
security update |
|
|
| How can i see which security update is installed ( Winnt, XP,...) |
|
| Back to top |
|
 |
Torgeir Bakken (MVP)
Guest
|
| Posted:
Sun Dec 19, 2004 7:41 pm Post subject:
Re: security update |
|
|
patje wrote:
| Quote: | How can i see which security update is installed ( Winnt, XP,...)
Hi |
I use Microsoft Baseline Security Analyzer (MBSA) for this. Note that
you cannot run this tool directly on a NT 4.0 computer, but you can
run the tool remotely against a NT 4.0 computer.
Note that the GUI version of MBSA will only list what security updates
are *not* installed on the computer.
To see a listing of what update are installed, you need to use the
command line tool mbsacli.exe, using it's -hf -history options, e.g.
like this (it can redirect the output to a file as well, and also in
a tab separated format):
mbsacli.exe -hf -nosum -s 2 -history 1
If you want to use mbsacli.exe directly on several computer (and not
remotely), you don't need to install MBSA on all the computers. You
can just copy mbsacli.exe to the computer.
Note that both the GUI version of MBSA as well as mbsacli.exe tries
to download MSSecure_xxxx.CAB (xxxx = 1033 for English language) from
Microsoft's web site each time you run them (contains MSSECURE.XML
that contains information about all the security updates released by
Microsoft, and this file is updated each time a new or revised update
is released)
To avoid needing to do this download each time (or the computers are
not able to download it them self), you can download it yourself, and
place it in the same folder folder as mbsacli.exe.
ENU (code page 1033): http://go.microsoft.com/fwlink/?LinkId=18922
DEU (code page 1031) : http://go.microsoft.com/fwlink/?LinkId=18121
FRN (code page 1036) : http://go.microsoft.com/fwlink/?LinkId=18122
JPN (code page 1041): http://go.microsoft.com/fwlink/?LinkId=18120
Then you just run mbsacli.exe like this:
mbsacli.exe -hf -nosum -s 2 -history 1 -x MSSecure_1033.CAB
If you run it like this, at least if you want to list what security
updates are not installed, you will need to download an updated
version of the cab file yourself when new security updates are
released.
More about MBSA here:
<quote>
Microsoft Baseline Security Analyzer (MBSA):
The Microsoft Baseline Security Analyzer allows administrators to
scan local and remote systems for missing security patches as well
as common security misconfigurations. More information on MBSA is
available at:
http://www.microsoft.com/technet/security/tools/mbsahome.asp
</quote>
and
Microsoft Baseline Security Analyzer (MBSA) 1.2 Q&A
http://www.microsoft.com/technet/security/tools/mbsaqa.mspx
It has it own newsgroup as well:
microsoft.public.security.baseline_analyzer
--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx |
|
| Back to top |
|
|
patje
Guest
|
| Posted:
Sun Dec 19, 2004 10:35 pm Post subject:
Re: security update |
|
|
"Torgeir Bakken (MVP)" wrote:
| Quote: | patje wrote:
How can i see which security update is installed ( Winnt, XP,...)
Hi
I use Microsoft Baseline Security Analyzer (MBSA) for this. Note that
you cannot run this tool directly on a NT 4.0 computer, but you can
run the tool remotely against a NT 4.0 computer.
Note that the GUI version of MBSA will only list what security updates
are *not* installed on the computer.
To see a listing of what update are installed, you need to use the
command line tool mbsacli.exe, using it's -hf -history options, e.g.
like this (it can redirect the output to a file as well, and also in
a tab separated format):
mbsacli.exe -hf -nosum -s 2 -history 1
If you want to use mbsacli.exe directly on several computer (and not
remotely), you don't need to install MBSA on all the computers. You
can just copy mbsacli.exe to the computer.
Note that both the GUI version of MBSA as well as mbsacli.exe tries
to download MSSecure_xxxx.CAB (xxxx = 1033 for English language) from
Microsoft's web site each time you run them (contains MSSECURE.XML
that contains information about all the security updates released by
Microsoft, and this file is updated each time a new or revised update
is released)
To avoid needing to do this download each time (or the computers are
not able to download it them self), you can download it yourself, and
place it in the same folder folder as mbsacli.exe.
ENU (code page 1033): http://go.microsoft.com/fwlink/?LinkId=18922
DEU (code page 1031) : http://go.microsoft.com/fwlink/?LinkId=18121
FRN (code page 1036) : http://go.microsoft.com/fwlink/?LinkId=18122
JPN (code page 1041): http://go.microsoft.com/fwlink/?LinkId=18120
Then you just run mbsacli.exe like this:
mbsacli.exe -hf -nosum -s 2 -history 1 -x MSSecure_1033.CAB
If you run it like this, at least if you want to list what security
updates are not installed, you will need to download an updated
version of the cab file yourself when new security updates are
released.
More about MBSA here:
quote
Microsoft Baseline Security Analyzer (MBSA):
The Microsoft Baseline Security Analyzer allows administrators to
scan local and remote systems for missing security patches as well
as common security misconfigurations. More information on MBSA is
available at:
http://www.microsoft.com/technet/security/tools/mbsahome.asp
/quote
and
Microsoft Baseline Security Analyzer (MBSA) 1.2 Q&A
http://www.microsoft.com/technet/security/tools/mbsaqa.mspx
It has it own newsgroup as well:
microsoft.public.security.baseline_analyzer
--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx
|
Thanks for the reply, but I did search for easy wey to know
which security update is installed.
( I need to do this on several pc's => easy and quick ) |
|
| Back to top |
|
|
Torgeir Bakken (MVP)
Guest
|
| Posted:
Sun Dec 19, 2004 10:49 pm Post subject:
Re: security update |
|
|
patje wrote:
| Quote: | Thanks for the reply, but I did search for easy wey to know
which security update is installed.
( I need to do this on several pc's => easy and quick )
Hi |
Take a look at the command line tool PsInfo in the free PsTools
suite (works on NT4 and up):
http://www.sysinternals.com/ntw2k/freeware/psinfo.shtml
It lists out installed hotfixes when using the parameter -h,
like this:
PsInfo.exe -h
--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in