Windows Forum

Ask something
Discussion Locked

Detecting MS Hot Fixes in Network

0 helpful
5 replies

by jgreer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We utize Blue Ocean to manage our network assets and are wanting to use it to keep track of our hot fixes that are installed. Can anyone suggest what files we should list in the audit box so that Blue Ocean detects these patches?

5 replies

by bkinsey1

Since most patches and hotfixes simply update god-knows-how-many files (and some are only trackable by registry key), it's probably easier and more comprehensive to do it with MS's tools.

Hfnetchk (http://microsoft.com/technet/security/tools/tools/hfnetchk.asp) does this on NT and 2000 machines from a central location on your network.

The Microsoft Baseline Security Analyzer (http://microsoft.com/technet/security/tools/tools/mbsahome.asp) does the same basic thing, but also checks IIS, SQL Server, and Office.

It's not a perfect solution to hotfix and patch management, but it's better than it used to be. (And easier than trying to identify which files should be changed to which versions by which patches installed in which order and using Track-It to do your auditing.)

by joseph moore

Hotfixes all write into into the Registry, so if you could add that info to your program, then do so.
If not, I know of a good Hotfix/Patch network-wide management program, called Patchlink Update 3.0:
http://www.patchlink.com/

This discussion is closed to new replies.