Question on Wannacry report

[Kevin_plack]

The forum post listed here
Wannacry Post

When the report says install one of these updates. Do we only need one of those updates or all of them?

[Bruce_B · Accepted solution]

The poster above me is correct, installing any one of those updates would patch the vulnerability on the computer in question. We would recommend installing the most recent cumulative update in most cases though.

Where available for the OS we added multiple KB numbers to this column to show the available options. But to reiterate, only one of these KB numbers will need to be installed. We named the column "Install one of these updates" for this reason, but perhaps we'll rename it to improve clarity.

[shsheikh]

As far as I know, you only need one of the listed patches to be protected. One would be the single patch Microsoft originally released, and the others could be superseded patches or patch rollups that also contain the fix.

If you are updating machines and Lansweeper doesn't see it, make sure you are re-scanning assets and adjust the "Quickfix" refresh interval from 7 days to 0 (Under scanning > scanned item interval) so it's updated every scan vs waiting 7 days since the last scan.

[cferguson]

I am also concern about this as i can't correctly assess where our environment stands currently. I have manually installed the fix on majority of our windows xp machine but all it does is show the one update versus showing the 4 hotfix numbers on other machines. The worst part is after getting the report after rescanning multiple times it still shows all machines as vulnerable.

So this report is no help at all. Can Lansweeper Comment here this is a very important issue. I have submitted 2 support cases already via email.