Fully automating Windows Update works well for desktops and laptops but not necessarily for servers. You should normally test server patches before installation and install patches during scheduled outages. Configuring Windows Update to download, but not install, patches accomplishes both goals. With this process in place, now need to know which servers need patching and which don't before you can create an appropriate outage/patch schedule.

Microsoft WSUS offers excellent patch reporting and management features but, requires a fair amount of setup and can be overkill for small shops. The Windows Update patch reporting KiXtart script provides a quick, easy way to track which Windows servers need patching.

The script was written in the free KiXtart scripting language. You must download and install the KiXtart utility from http://www.kixtart.org before using the wu_check.kix script. The script is designed for use on Windows 2000 Server and Windows Server 2003.

Download and try the script:
http://techrepublic.com.com/5138-10879-5800070.html

Then, join this ongoing discussion and let us know if this list provides helpful information and if there's anything we can do to improve the document's format or content.