If they are security patches, we always use win32_quickfixengineering. Works well.
Daniel Ratliff From: [email protected] [mailto:[email protected]] On Behalf Of Michael Timm Sent: Wednesday, January 6, 2016 12:38 PM To: [email protected] Subject: [mssms] Find computers with specific windows updates installed. All, I have been tasked with hunting down workstations that have certain unwanted windows KB's installed. I have tried creating a collection based on a WQL query but it doesn't return any results. If I recall windows updates aren't listed in programs and features any longer. So that may be why there aren't any results. select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS_64 on SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3068708%" or SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3022345%" or SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3075249%" or SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3080149%" I've also tried a configuration baseline based off of info listed in: https://www.windows-noob.com/forums/topic/8640-sccm-2012-search-for-installed-hotfixes/ I am applying that against a test collection that contains both machine that have them installed, and machines that don't have them installed. The deployment results show 100% compliant, which aren't the results I am expecting. Can anyone offer up any advice on what I'm doing wrong, or how I could go about finding them? Thanks! Mike Timm Systems Engineer Overstock.com ________________________________ CONFIDENTIALITY NOTICE: This message is intended only for the use and review of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message solely to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify sender immediately by telephone or return email. Thank you. The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.
