Re: SUS - Reports

From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 01/04/04


Date: Sun, 4 Jan 2004 06:49:36 -0500

1) Use MBSA free from www.microsoft.com/download Run it in command line
hfnetchk mode. You can run a scan across the network with this tool, if you
know an administrator password on every computer... or you can run it
locally on each computer from the login script, if the users logging in have
local administrator privileges. This might be the most reliable method as
it checks whether the patches actually installed correctly.

2) Check the windows system logs on each client, looking for successful
installation of new patches. You can do this remotely using tools like the
free log dump tool from www.sysinternals.com, monitor the logs in realtime
using a tool like www.ipsentry.com costing around $120, etc. This is almost
as reliable, but could be a little more effort.

3) Check the IIS web server log on the server. There are even free
utilities in the Tools section at www.susserver.com that will parse the log
for you and give you a more readable report.

4) SUS server 2.0 should be available in the early part of this year and it
reportedly contains new reporting functionality. When it comes out, you
just need to update your SUS server, not the clients.

"Rafael Santos" <anonymous@discussions.microsoft.com> wrote in message
news:00ea01c3d155$df177e30$a301280a@phx.gbl...
> How to verify that clients were updated with sus?
> My englih is very rusty, sorry.



Relevant Pages

  • Software Update Server-securing IIS
    ... I have been using a SUS server to update the security ... All of my web apps are ... clients are no longer able to download patches. ...
    (microsoft.public.inetserver.iis.security)
  • Clients dont look to SUS server for updates
    ... >>Clients don't look to SUS servers for updates no matter ... >>for updates on the local SUS server. ... >the SUS server is through Group Policy, ... >Along with the install files for that version there is ...
    (microsoft.public.windowsupdate)
  • Clients dont look to SUS server for updates
    ... >Clients don't look to SUS servers for updates no matter ... >for updates on the local SUS server. ... Along with the install files for that version there is ...
    (microsoft.public.windowsupdate)
  • Re: Windows Update
    ... As long as your clients are SUS-aware, ... Laura E. Hunter - MCSE, MCT, MVP ... > SUS server automatically as long as they have Automatic Updates enabled. ... > (Also configurable through Group Policy.) If your 2K clients aren't on ...
    (microsoft.public.win2000.active_directory)
  • Re: Deploying Microsoft patches
    ... First is Microsoft's SUS server, ... >With this amount of PCs, it is very difficult to keep ... >Currently we are deploying patches manually, ... Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ...
    (Security-Basics)