you can have a look at this report http://eskonr.com/2015/10/sccm-configmgr-sql-query-how-to-get-list-of-patches-required-by-specific-computer/ to find list of missing/required updates but to see installed updates, you can change the value of status in sql query. i would think of using CI feature to check if particular patch installed or not using wmi check condition.
Regards, Eswar Koneti www.eskonr.com sent from mobile device,please excuse any typo's as a result. On Jan 7, 2016, 1:54 AM, at 1:54 AM, Daniel Ratliff <[email protected]> wrote: >If they are security patches, we always use win32_quickfixengineering. >Works well. > >Daniel Ratliff > >From: [email protected] >[mailto:[email protected]] On Behalf Of Michael Timm >Sent: Wednesday, January 6, 2016 12:38 PM >To: [email protected] >Subject: [mssms] Find computers with specific windows updates >installed. > >All, > >I have been tasked with hunting down workstations that have certain >unwanted windows KB's installed. I have tried creating a collection >based on a WQL query but it doesn't return any results. If I recall >windows updates aren't listed in programs and features any longer. So >that may be why there aren't any results. > > >select >SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client >from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS_64 on >SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceId = >SMS_R_System.ResourceId where >SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3068708%" or >SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3022345%" or >SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3075249%" or >SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%KB3080149%" > > >I've also tried a configuration baseline based off of info listed in: >https://www.windows-noob.com/forums/topic/8640-sccm-2012-search-for-installed-hotfixes/ > >I am applying that against a test collection that contains both machine >that have them installed, and machines that don't have them installed. >The deployment results show 100% compliant, which aren't the results I >am expecting. > >Can anyone offer up any advice on what I'm doing wrong, or how I could >go about finding them? > >Thanks! >Mike Timm >Systems Engineer >Overstock.com > > > > >________________________________ > >CONFIDENTIALITY NOTICE: This message is intended only for the use and >review of the individual or entity to which it is addressed and may >contain information that is privileged and confidential. If the reader >of this message is not the intended recipient, or the employee or agent >responsible for delivering the message solely to the intended >recipient, you are hereby notified that any dissemination, distribution >or copying of this communication is strictly prohibited. If you have >received this communication in error, please notify sender immediately >by telephone or return email. Thank you. > > >The information transmitted is intended only for the person or entity >to which it is addressed >and may contain CONFIDENTIAL material. If you receive this >material/information in error, >please contact the sender and delete or destroy the >material/information.
