Windows computers that do not have a specific update installed

Susan_A · ‎12-04-2014

The report below lists Windows computers that are missing a specific hotfix (Windows update). Replace YourHotfix with the hotfix ID you would like to report on, e.g. KB2079403.

The report will only list assets that meet all of the following criteria:

The asset is a Windows computer.
The computer's state is set to "active".
The computer has been successfully scanned at least once.
The computer does not have the specified hotfix/update installed.

Select Top 1000000 tsysOS.Image As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tblAssets.IPAddress,
  tblAssets.Firstseen,
  tblAssets.Lastseen,
  tblAssets.Lasttried
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblAssets.AssetID Not In (Select Top 1000000 tblQuickFixEngineering.AssetID
From tblQuickFixEngineering
  Inner Join tblQuickFixEngineeringUni On tblQuickFixEngineeringUni.QFEID =
    tblQuickFixEngineering.QFEID
Where tblQuickFixEngineeringUni.HotFixID Like '%YourHotfix%') And
  tblAssetCustom.State = 1
Order By tblAssets.Domain,
  tblAssets.AssetName

Nick_VDB · ‎05-15-2017

The report below will give back the machines that do not have the hotfixes installed. We have updated it with a list of the different hotfixes needed to mitigate MS17-010. These hotfixes are scanned from the Win32_QuickFixEngineering WMI class. There is an interval of 7 days for scanning the Win32_QuickFixEngineering WMI class, this can be modified by going to Scanning\Scanned Item Interval and setting it to 0. You can then do a full rescan of your machines so that the quickfixengineering table is updated with any new updates. Once the rescans have been done you can then run this report. In the report it is also required that the assets be set to the 'Active' state. If

Recap:

Go to Scanning\Scanned Item Interval
Change the interval time for the 'QUICKFIX' item to 0
Rescan all your assets to update the quickfixengineering tables with the new updates
Run the report

The hotfix must be found in Win32_QuickFixEngineering for Lansweeper to be able to scan it. The following command lists all the Hotfixes that are found in the Win32_QuickFixEngineering table.

wmic path Win32_QuickFixEngineering

Select Top 1000000 tsysOS.Image As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tblAssets.IPAddress,
  tblAssets.Firstseen,
  tblAssets.Lastseen,
  tblAssets.Lasttried
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where
  tblAssets.AssetID Not In (Select Top 1000000 tblQuickFixEngineering.AssetID
  From tblQuickFixEngineering Inner Join tblQuickFixEngineeringUni
      On tblQuickFixEngineeringUni.QFEID = tblQuickFixEngineering.QFEID
  Where tblQuickFixEngineeringUni.HotFixID In ('KB4012216','KB4012215',
    'KB4012217','KB4012212','KB4012204','KB4012213', 'KB4015551', 'KB4019216', 
'KB4015550', 'KB4019215', 'KB4013429', 'KB4019472', 'KB4015217', 'KB4015438', 'KB4016635', 'KB4012598')) And
  tblAssetCustom.State = 1
Order By tblAssets.Domain,
  tblAssets.AssetName

View solution in original post

Daniel_B · ‎01-26-2015

You can list assets which are missing several hotfixes with a report like the following:


Select Top 1000000 tsysOS.Image As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tblAssets.IPAddress,
  tblAssets.Firstseen,
  tblAssets.Lastseen,
  tblAssets.Lasttried
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where
  tblAssets.AssetID Not In (Select Top 1000000 tblQuickFixEngineering.AssetID
  From tblQuickFixEngineering Inner Join tblQuickFixEngineeringUni
      On tblQuickFixEngineeringUni.QFEID = tblQuickFixEngineering.QFEID
  Where tblQuickFixEngineeringUni.HotFixID In ('KB2968292', 'KB2972098',
    'KB2979568')) And tblAssetCustom.State = 1
Order By tblAssets.Domain,
  tblAssets.AssetName

novasam · ‎01-23-2015

So I see what the poster is talking about. For example Microsoft will relase updates like MS14-057:
https://technet.microsoft.com/en-us/library/security/ms14-057.aspx

In this one Update notice there are several KB Patches. Also some of them only apply to certain software installed or OS.

So I can see where this can get complicated, and this is the reason I'm looking for an esy solution to report on these as Lansweeper seems to have the most up to date data. In the above site above you can see all the current MS updates on the Left.

chads · ‎01-09-2015

So how would you create a report like this with multiple KB's to go look at? I am not great with SQL so this is good for one how would i add an entire list of them.

Susan_A · ‎01-12-2015

chads wrote:
So how would you create a report like this with multiple KB's to go look at? I am not great with SQL so this is good for one how would i add an entire list of them.

Are you looking for computers that are missing *all* or *any* of the specified hotfixes?

Windows computers that do not have a specific update installed

New to Lansweeper?

Try Lansweeper For Free