security update

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

How can i see which security update is installed ( Winnt, XP,...)

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

patje wrote:

> How can i see which security update is installed ( Winnt, XP,...)
Hi

I use Microsoft Baseline Security Analyzer (MBSA) for this. Note that
you cannot run this tool directly on a NT 4.0 computer, but you can
run the tool remotely against a NT 4.0 computer.

Note that the GUI version of MBSA will only list what security updates
are *not* installed on the computer.

To see a listing of what update are installed, you need to use the
command line tool mbsacli.exe, using it's -hf -history options, e.g.
like this (it can redirect the output to a file as well, and also in
a tab separated format):

mbsacli.exe -hf -nosum -s 2 -history 1


If you want to use mbsacli.exe directly on several computer (and not
remotely), you don't need to install MBSA on all the computers. You
can just copy mbsacli.exe to the computer.

Note that both the GUI version of MBSA as well as mbsacli.exe tries
to download MSSecure_xxxx.CAB (xxxx = 1033 for English language) from
Microsoft's web site each time you run them (contains MSSECURE.XML
that contains information about all the security updates released by
Microsoft, and this file is updated each time a new or revised update
is released)

To avoid needing to do this download each time (or the computers are
not able to download it them self), you can download it yourself, and
place it in the same folder folder as mbsacli.exe.

ENU (code page 1033): http://go.microsoft.com/fwlink/?LinkId=18922
DEU (code page 1031) : http://go.microsoft.com/fwlink/?LinkId=18121
FRN (code page 1036) : http://go.microsoft.com/fwlink/?LinkId=18122
JPN (code page 1041): http://go.microsoft.com/fwlink/?LinkId=18120

Then you just run mbsacli.exe like this:

mbsacli.exe -hf -nosum -s 2 -history 1 -x MSSecure_1033.CAB

If you run it like this, at least if you want to list what security
updates are not installed, you will need to download an updated
version of the cab file yourself when new security updates are
released.


More about MBSA here:

<quote>
Microsoft Baseline Security Analyzer (MBSA):

The Microsoft Baseline Security Analyzer allows administrators to
scan local and remote systems for missing security patches as well
as common security misconfigurations. More information on MBSA is
available at:

http://www.microsoft.com/technet/security/tools/mbsahome.asp

</quote>

and

Microsoft Baseline Security Analyzer (MBSA) 1.2 Q&A
http://www.microsoft.com/technet/security/tools/mbsaqa.mspx


It has it own newsgroup as well:

microsoft.public.security.baseline_analyzer


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

"Torgeir Bakken (MVP)" wrote:

> patje wrote:
>
> > How can i see which security update is installed ( Winnt, XP,...)
> Hi
>
> I use Microsoft Baseline Security Analyzer (MBSA) for this. Note that
> you cannot run this tool directly on a NT 4.0 computer, but you can
> run the tool remotely against a NT 4.0 computer.
>
> Note that the GUI version of MBSA will only list what security updates
> are *not* installed on the computer.
>
> To see a listing of what update are installed, you need to use the
> command line tool mbsacli.exe, using it's -hf -history options, e.g.
> like this (it can redirect the output to a file as well, and also in
> a tab separated format):
>
> mbsacli.exe -hf -nosum -s 2 -history 1
>
>
> If you want to use mbsacli.exe directly on several computer (and not
> remotely), you don't need to install MBSA on all the computers. You
> can just copy mbsacli.exe to the computer.
>
> Note that both the GUI version of MBSA as well as mbsacli.exe tries
> to download MSSecure_xxxx.CAB (xxxx = 1033 for English language) from
> Microsoft's web site each time you run them (contains MSSECURE.XML
> that contains information about all the security updates released by
> Microsoft, and this file is updated each time a new or revised update
> is released)
>
> To avoid needing to do this download each time (or the computers are
> not able to download it them self), you can download it yourself, and
> place it in the same folder folder as mbsacli.exe.
>
> ENU (code page 1033): http://go.microsoft.com/fwlink/?LinkId=18922
> DEU (code page 1031) : http://go.microsoft.com/fwlink/?LinkId=18121
> FRN (code page 1036) : http://go.microsoft.com/fwlink/?LinkId=18122
> JPN (code page 1041): http://go.microsoft.com/fwlink/?LinkId=18120
>
> Then you just run mbsacli.exe like this:
>
> mbsacli.exe -hf -nosum -s 2 -history 1 -x MSSecure_1033.CAB
>
> If you run it like this, at least if you want to list what security
> updates are not installed, you will need to download an updated
> version of the cab file yourself when new security updates are
> released.
>
>
> More about MBSA here:
>
> <quote>
> Microsoft Baseline Security Analyzer (MBSA):
>
> The Microsoft Baseline Security Analyzer allows administrators to
> scan local and remote systems for missing security patches as well
> as common security misconfigurations. More information on MBSA is
> available at:
>
> http://www.microsoft.com/technet/security/tools/mbsahome.asp
>
> </quote>
>
> and
>
> Microsoft Baseline Security Analyzer (MBSA) 1.2 Q&A
> http://www.microsoft.com/technet/security/tools/mbsaqa.mspx
>
>
> It has it own newsgroup as well:
>
> microsoft.public.security.baseline_analyzer
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx
>

Thanks for the reply, but I did search for easy wey to know
which security update is installed.
( I need to do this on several pc's => easy and quick )

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

patje wrote:

> Thanks for the reply, but I did search for easy wey to know
> which security update is installed.
> ( I need to do this on several pc's => easy and quick )
Hi

Take a look at the command line tool PsInfo in the free PsTools
suite (works on NT4 and up):

http://www.sysinternals.com/ntw2k/freeware/psinfo.shtml

It lists out installed hotfixes when using the parameter -h,
like this:

PsInfo.exe -h


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx