Patch Tuesday Report May 2020 & Windows Server 2016

[Bart_van_den_Bo]

Hi,

All (87 in total) my Win 2016 servers are showing "out of date" with the https://www.lansweeper.com/report/microsoft-patch-tuesday-audit-may-2020/ report.

Triple checked with WSUS and Online check and the seem up to date according to all resources.
the last updates installed are:

2020-05 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB4552926)
2020-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4556813)
Windows Malicious Software Removal Tool x64 - v5.82 (KB890830)

Thanks,
Bart

[dgriffiths]

Bart van den Bosch wrote:
Hi,

All (87 in total) my Win 2016 servers are showing "out of date" with the https://www.lansweeper.com/report/microsoft-patch-tuesday-audit-may-2020/ report.

Triple checked with WSUS and Online check and the seem up to date according to all resources.
the last updates installed are:

2020-05 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB4552926)
2020-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4556813)
Windows Malicious Software Removal Tool x64 - v5.82 (KB890830)

Thanks,
Bart

I've edited it, as below - I think this is now correct.

Select Distinct Top 1000000 Coalesce(tsysOS.Image,
  tsysAssetTypes.AssetTypeIcon10) As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblState.Statename As State,
  Case tblAssets.AssetID
    When SubQuery1.AssetID Then 'Up to date'
    Else 'Out of date'
  End As [Patch status],
  Case
    When tblComputersystem.Domainrole > 1 Then 'Server'
    Else 'Workstation'
  End As [Workstation/Server],
  tblAssets.Username,
  tblAssets.Userdomain,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  Case
    When tsysOS.OScode Like '10.0.10240%' Then '1507'
    When tsysOS.OScode Like '10.0.10586%' Then '1511'
    When tsysOS.OScode Like '10.0.14393%' Then '1607'
    When tsysOS.OScode Like '10.0.15063%' Then '1703'
    When tsysOS.OScode Like '10.0.16299%' Then '1709'
    When tsysOS.OScode Like '10.0.17134%' Then '1803'
    When tsysOS.OScode Like '10.0.17763%' Then '1809'
    When tsysOS.OScode Like '10.0.18362%' Then '1903'
    When tsysOS.OScode Like '10.0.18363%' Then '1909'
  End As Version,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  Case
    When tblErrors.ErrorText Is Not Null Or
      tblErrors.ErrorText != '' Then
      'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
    Else ''
  End As ScanningErrors,
  Case
    When tblAssets.AssetID = SubQuery1.AssetID Then ''
    Else Case
        When tsysOS.OSname = 'Win 2008' Then 'KB4556860 or KB4556854'
        When tsysOS.OSname = 'Win 7' Or tsysOS.OSname = 'Win 7 RC' Or
          tsysOS.OSname = 'Win 2008 R2' Then 'KB4556836 or KB4556843'
        When tsysOS.OSname = 'Win 2012' Or
          tsysOS.OSname = 'Win 8' Then 'KB4556840 or KB4556852'
        When tsysOS.OSname = 'Win 8.1' Or
          tsysOS.OSname = 'Win 2012 R2' Then 'KB4556846 or KB4556853'
        When tsysOS.OScode Like '10.0.10240' Then 'KB4556826'
        When tsysOS.OScode Like '10.0.10586' Then
          'EOL, update to a higher Windows version'
        When tsysOS.OScode Like '10.0.14393' Or
          tsysOS.OSname = 'Win 2016' Then 'KB4556813'
        When tsysOS.OScode Like '10.0.15063' Then
          'EOL, update to a higher Windows version'
        When tsysOS.OScode Like '10.0.16299' Then 'KB4556812'
        When tsysOS.OScode Like '10.0.17134' Then 'KB4556807'
        When tsysOS.OScode Like '10.0.17763' Or
          tsysOS.OSname = 'Win 2019' Then 'KB4551853'
        When tsysOS.OScode Like '10.0.18362' Then 'KB4556799'
        When tsysOS.OScode Like '10.0.18363' Then 'KB4556799'
      End
  End As [Install one of these updates],
  Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned,
  GetDate())) + ' days ago' As WindowsUpdateInfoLastScanned,
  Case
    When Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned,
      GetDate())) > 3 Then
      'Windows update information may not be up to date. We recommend rescanning this machine.'
    Else ''
  End As Comment,
  Case tblAssets.AssetID
    When SubQuery1.AssetID Then '#d4f4be'
    Else '#ffadad'
  End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblOperatingsystem On tblOperatingsystem.AssetID =
    tblAssets.AssetID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
  Left Join (Select Top 1000000 tblQuickFixEngineering.AssetID
      From tblQuickFixEngineering
        Inner Join tblQuickFixEngineeringUni On tblQuickFixEngineeringUni.QFEID
          = tblQuickFixEngineering.QFEID
      Where tblQuickFixEngineeringUni.HotFixID In ('KB4556836', 'KB4556843',
        'KB4556860', 'KB4556854', 'KB4556840', 'KB4556852', 'KB4556846',
        'KB4556853', 'KB4556826', 'KB4556813', 'KB4556812', 'KB4556807',
		'KB4551853', 'KB4556799')) As SubQuery1 On tblAssets.AssetID = SubQuery1.AssetID
  Left Join tsysIPLocations On tblAssets.IPNumeric >= tsysIPLocations.StartIP
    And tblAssets.IPNumeric <= tsysIPLocations.EndIP
  Left Join (Select Distinct Top 1000000 TsysLastscan.AssetID As ID,
        TsysLastscan.Lasttime As QuickFixLastScanned
      From TsysWaittime
        Inner Join TsysLastscan On TsysWaittime.CFGCode = TsysLastscan.CFGcode
      Where TsysWaittime.CFGname = 'QUICKFIX') As QuickFixLastScanned On
    tblAssets.AssetID = QuickFixLastScanned.ID
  Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
        Max(tblErrors.Teller) As ErrorID
      From tblErrors
      Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
    ScanningError.ID
  Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
  Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
    tblErrors.ErrorType
Where tsysOS.OSname <> 'Win 2000 S' And tsysOS.OSname Not Like '%XP%' And
  tsysOS.OSname Not Like '%2003%' And (Not tsysOS.OSname Like 'Win 7%'
    Or Not tblAssets.SP = 0) And tblAssetCustom.State = 1 And
  tsysAssetTypes.AssetTypename Like 'Windows%'
Order By tblAssets.Domain,
  tblAssets.AssetName

[Bart_van_den_Bo]

dgriffiths wrote:

Bart van den Bosch wrote:
Hi,

All (87 in total) my Win 2016 servers are showing "out of date" with the https://www.lansweeper.com/report/microsoft-patch-tuesday-audit-may-2020/ report.

...

I've edited it, as below - I think this is now correct.

...

Hi dgriffiths,

Seems to be OK now. Thanks! 10 Points.
Would love to see an official LanSweeper statement on this though.

Thanks, b safe &have a nice day!

[dgriffiths]

Bart van den Bosch wrote:
Hi,

All (87 in total) my Win 2016 servers are showing "out of date" with the https://www.lansweeper.com/report/microsoft-patch-tuesday-audit-may-2020/ report.

Triple checked with WSUS and Online check and the seem up to date according to all resources.
the last updates installed are:

2020-05 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB4552926)
2020-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4556813)
Windows Malicious Software Removal Tool x64 - v5.82 (KB890830)

Thanks,
Bart

I think the report is not quite right - think the KB numbers aren't correct?