Report assets with quickfix list is null

[clepron]

Dear all

Using Wannacry or Spectre reports, we noticed that some assets have no quickfix in Config/Windows/Quickfix.
Generally , it means that there is WMI issue to fix.

I would like to report such assets, with a null quickfix list, or better with corrupted WMI to fix.

Is there a way to report that ?

Thanks

[clepron]

Thank you. You are right.

I build this query, based on lastchanged is null, and it seems to work quite well.

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tsysAssetTypes.AssetTypename,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblQuickFixEngineering.InstalledOn,
tblQuickFixEngineering.Lastchanged,
tblAssets.Domain,
tblAssets.Userdomain,
tblAssets.Username
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Left Join tblQuickFixEngineering On tblAssets.AssetID =
tblQuickFixEngineering.AssetID
Where tsysAssetTypes.AssetTypename Like 'Windows%' And tblAssets.Lastseen >=
GetDate() - 60 And tblQuickFixEngineering.Lastchanged Is Null And
tblAssetCustom.State = 1

[Esben_D]

If your finding are correct you could you create a report where you add the criteria "IS NULL" for one of the tblQuickFixEngineering fields.

Additionally, you could modify that scanning errors built-in report to only show assets with the common error related to a corrupt WMI. You can find those errors here: https://www.lansweeper.com/kb/47/How-to-repair-a-corrupt-WMI-installation.html

It might not be 100% accurate but it should catch most corrupt WMI machines.