Search whether a KB update is installed 1

[hunterdw]

Howdy--

As the rest of the world, I'm in the midst of updating all my workstations and servers and exchange and everything else to the new Daylight Saving Time rules.

I was pushing out KB928388 via WSUS - but last night during my WSUS sync the "patch tuesday" rollup came out which expired KB928388. My logging in WSUS is now all gone. I remember I had about 40 workstations left to fix, but dunno which 40.

What's an easy way to search remote workstations to see what updates are installed? I know if 928388 is installed, the regkey "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB928388" is present, but even things like registry crawler take too long to search remote registries.

I was going to use Eventcomb but I can't find where an event was placed in any log telling me that.

I also know that KB928388.log is placed in C:\Windows if it's installed, but haven't figured out how to script it to search a # of workstations.

Any ideas?

--DW

 

[LWComputingMVP]

Create a list of all your computers, one per line and save it to listofcomputers.txt. Then run this command.

for /f "tokens=1" %a in (listofcomputers.txt) do @if Not exist "\\%a\admin$\kb928388.log" echo %a>>ComputersMissingPatch.log

Note: if putting this in a batch file, you need to double the % symbols. For example, %a becomes %%a

Optionally, You can use IP Addresses and/or have the script check each IP address in a subnet. Or you can use the list of computers generated by the NET VIEW command.

 

[hunterdw]

Glory! Glory!

You win the prize today.

I'll report back how it works.

 

[hunterdw]

lwcomputing--

Thank you. As expected, found 41 computers needing the patch.

Star for you. I'd give you a cookie, but alas, there are limitations of this "interent" thingy

 

[LWComputingMVP]

I'll take a rain check on the cookie.