VeeshanVault

Is there a way to verify Remotely that a user has installed a Security patch?

http://www.sysinternals.com/Utilities/PsInfo.html

You need to have enough access to the machine to have "remote registry" access (domain admin usually), but it can tell you a *ton* of useful information, including what is installed on the machine, which then includes patches.

Anyone that has to admin/maintain windows on more than a couple of machines should get familiar w/ the sysinternals site. Awesome stuff, all freeware.

Thank you Ill look into it.


Good God Exactly what I needed I just pulled the info from 40 Machines in 20 min.


Thank you

You can also install Windows Software Update Server and then apply all patches to every system in your domain. You can edit your group policy for the domain to force everyone to get updates each day and either have the machine reboot or prompt for a reboot.

It also allows you to see each system and which updates it has installed.

I use this to cut down on bandwidth usage since all patches come from an internal server as well as to force updates on people and not rely on the lazy people to actually do something I tell them to.

We use ScriptLogic Patch Management at my office. We get the patches about 2 days after MS releases while they do some testing to make sure nothing breaks.

You can also configure what you want or may not want to install.

For instance, we can't install the recent IE fixes because the June updates to IE that change activeX will mess up our users ability to use Siebel. Until we upgrade Siebel (which I'm told should happen in the coming month or 2) we can't install and have disabled IE patches (which sucks cause most patches are IE anyhow.


If you're gonna be in a corporate environment, then forcing system patching and being able to control what goes in and what doesn't is critical.