report to find out of date windows updates

[danielm]

I'm looking for a good report to find windows machines that have not updated , ie applied a SP or KB in a long time.
Mainly because at some point in 2014 MS broke updates with kB3004394 .
So, i'd like to be able to have a report that shows the last installed ms KB and it's date for each pc I guess so I can sort them in a report .

Right now I have a report that shows ALL installed updates but sorted data out of that would be painfully manual.

Select Top 1000000 tblAssets.AssetName,
tblAssets.AssetID,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblQuickFixEngineeringUni.ServicePackInEffect,
tblQuickFixEngineeringUni.HotFixID,
tblQuickFixEngineeringUni.FixComments,
tblQuickFixEngineeringUni.Description,
tblQuickFixEngineering.InstalledOn,
tblQuickFixEngineering.Lastchanged
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tblQuickFixEngineering On tblAssets.AssetID =
tblQuickFixEngineering.AssetID
Inner Join tblQuickFixEngineeringUni On tblQuickFixEngineeringUni.QFEID =
tblQuickFixEngineering.QFEID
Where tblAssetCustom.State = 1

[Susan_A · Accepted solution]

The sample report in this thread would be a good starting point.