Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows Server 2003Windows 2000Windows NTSmall Business ServerVirtual ServerExchange ServerIISHost Integration ServerISA ServerSMSWSUSMOMWindows Media ServerSecurityCertification
Related Topics
SQL ServerMS WindowsMS OfficePC HardwareMore Topics ...
Windows Server Forum / Security / MS Baseline Analyzer / July 2008

Tip: Looking for answers? Try searching our database.

MBSA does not always leave patch information in xml file

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Scott Hall - 17 Jul 2008 21:38 GMT
I am using mbsacli.exe with the following params.
mbsacli /xmlout /catalog c:\xxxx.cab >results.xml

I am mostly having a problem with MS08-001 I see it as installed in the
registry of the system but there is no entry for it in the xml file.  I
really need a yes or no value yes being installed or no needing a patch.  
This is happening on windows 2003 enterprise sp1 systems.  I have 25 systems
out of the 25 systems 12 have an entry in the xml file as installed and 13
don't have an entry in the xml file at all???
Reply to this Message
Doug Neal [MSFT] - 17 Jul 2008 22:35 GMT
Scott - thank you for sending this our way.

Usually, the absence of an item in the results.XML file would indicate that
the security update is not applicable to the scanned machine.  But since
MS08-001 is a TCP/IP update, I doubt that is the issue here.  I'm concerned
that your machines are not indicating the need for this update OR that after
the update is applied, it's not appearing as 'installed'.  I haven't seen
this reported by other customers, so I was hoping you could send your
WindowsUpdate.LOG file from an affected machine to my email address below
(with the "online." removed) to examine in more detail.

Signature

--

Doug Neal [MSFT]
dugn@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights.

If newsgroup discussion with experts and MVPs is unable to solve a problem
to your satisfaction, feel free to contact PSS for support on the Microsoft
Baseline Security Analyzer (MBSA). Information is available at the following
link:
http://support.microsoft.com/default.aspx

This e-mail address does not receive e-mail, but is used for newsgroup
postings only.

>I am using mbsacli.exe with the following params.
> mbsacli /xmlout /catalog c:\xxxx.cab >results.xml
[quoted text clipped - 6 lines]
> out of the 25 systems 12 have an entry in the xml file as installed and 13
> don't have an entry in the xml file at all???
Reply to this Message
Scott Hall - 18 Jul 2008 16:43 GMT
Thank you Doug, here is the offline portion of the update log.

2008-07-18    15:34:00:120    280    17a4    Misc    ===========  Logging initialized
(build: 7.0.6000.381, tz: -0000)  ===========
2008-07-18    15:34:00:120    280    17a4    Misc     = Process:
C:\WINNT\System32\svchost.exe
2008-07-18    15:34:00:120    280    17a4    Misc     = Module:
C:\WINNT\system32\wuaueng.dll
2008-07-18    15:34:00:120    280    17a4    Service    *************
2008-07-18    15:34:00:120    280    17a4    Service    ** START **  Service: Service
startup
2008-07-18    15:34:00:135    280    17a4    Service    *********
2008-07-18    15:34:00:135    280    17a4    Agent     * WU client version 7.0.6000.381
2008-07-18    15:34:00:135    280    17a4    Agent     * Base directory:
C:\WINNT\SoftwareDistribution
2008-07-18    15:34:00:135    280    17a4    Agent     * Access type: No proxy
2008-07-18    15:34:00:135    280    17a4    Agent     * Network state: Connected
2008-07-18    15:34:00:167    4744    1640    Misc    ===========  Logging initialized
(build: 7.0.6000.381, tz: -0000)  ===========
2008-07-18    15:34:00:167    4744    1640    Misc     = Process:
C:\wingather\software\mbsa\mbsacli.exe
2008-07-18    15:34:00:167    4744    1640    Misc     = Module: C:\WINNT\system32\wuapi.dll
2008-07-18    15:34:00:167    4744    1640    COMAPI    -----------  COMAPI:
IUpdateServiceManager::AddScanPackageService  -----------
2008-07-18    15:34:00:167    4744    1640    COMAPI     - ServiceName = MBSA 2.1 Offline
Scan Package
2008-07-18    15:34:00:167    4744    1640    COMAPI     - ScanFileLocation =
C:\wingather\software\mbsa\wsusscn2.cab
2008-07-18    15:34:00:385    280    13d8    Report    WARNING: Failed to query for
service properties: 80248014
2008-07-18    15:34:00:385    280    13d8    Agent    ***********  Agent: Initializing
Windows Update Agent  ***********
2008-07-18    15:34:00:385    280    13d8    Agent    ***********  Agent: Initializing
global settings cache  ***********
2008-07-18    15:34:00:385    280    13d8    Agent     * WSUS server: <NULL>
2008-07-18    15:34:00:385    280    13d8    Agent     * WSUS status server: <NULL>
2008-07-18    15:34:00:385    280    13d8    Agent     * Target group: (Unassigned
Computers)
2008-07-18    15:34:00:385    280    13d8    Agent     * Windows Update access disabled: No
2008-07-18    15:34:00:385    280    13d8    DnldMgr    Download manager restoring 0
downloads
2008-07-18    15:34:00:510    280    17a4    Report    ***********  Report: Initializing
static reporting data  ***********
2008-07-18    15:34:00:510    280    17a4    Report     * OS Version = 5.2.3790.1.0.196882
2008-07-18    15:34:00:588    280    17a4    Report     * Computer Brand = HP
2008-07-18    15:34:00:588    280    17a4    Report     * Computer Model = ProLiant
BL460c G1
2008-07-18    15:34:00:588    280    17a4    Report     * Bios Revision = I15
2008-07-18    15:34:00:588    280    17a4    Report     * Bios Name = Default System BIOS
2008-07-18    15:34:00:588    280    17a4    Report     * Bios Release Date =
2008-04-01T00:00:00
2008-07-18    15:34:00:588    280    17a4    Report     * Locale ID = 1033
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: PTError: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: Initialization failed for
Protocol Talker Context: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: PTError: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: Initialization failed for
Protocol Talker Context: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: PTError: 0x80248014
2008-07-18    15:34:01:276    280    17cc    Report    WARNING: Reporter failed to upload
events with hr = 80248014.
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: PTError: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: Initialization failed for
Protocol Talker Context: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: PTError: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: Initialization failed for
Protocol Talker Context: 0x80248014
2008-07-18    15:34:01:276    280    17cc    PT    WARNING: PTError: 0x80248014
2008-07-18    15:34:01:276    280    17cc    Report    WARNING: Reporter failed to upload
events with hr = 80248014.
2008-07-18    15:34:01:370    280    1748    Misc    Validating signature for
C:\WINNT\SoftwareDistribution\ScanFile\305dc8a7-5a54-4216-83fe-c64df1b94296\Source.cab:
2008-07-18    15:34:01:432    280    1748    Misc    Microsoft signed: Yes
2008-07-18    15:34:02:104    280    1748    DtaStor    Default service for AU is
{9482F4B4-E343-43B6-B170-9A65BC822C77}
2008-07-18    15:34:02:104    4744    1640    COMAPI     - Added scan package service,
ServiceID = {305DC8A7-5A54-4216-83FE-C64DF1B94296}
2008-07-18    15:34:02:104    4744    1640    COMAPI    -------------
2008-07-18    15:34:02:104    4744    1640    COMAPI    -- START --  COMAPI: Search
[ClientId = MBSA]
2008-07-18    15:34:02:104    4744    1640    COMAPI    ---------
2008-07-18    15:34:02:104    280    17cc    Agent    *************
2008-07-18    15:34:02:104    280    17cc    Agent    ** START **  Agent: Finding updates
[CallerId = MBSA]
2008-07-18    15:34:02:104    280    17cc    Agent    *********
2008-07-18    15:34:02:104    280    17cc    Agent     * Include potentially superseded
updates
2008-07-18    15:34:02:104    4744    1640    COMAPI    <<-- SUBMITTED -- COMAPI: Search
[ClientId = MBSA]
2008-07-18    15:34:02:104    280    17cc    Agent     * Online = Yes; Ignore download
priority = No
2008-07-18    15:34:02:104    280    17cc    Agent     * Criteria = "IsInstalled=0 or
IsInstalled=1"
2008-07-18    15:34:02:104    280    17cc    Agent     * ServiceID =
{305DC8A7-5A54-4216-83FE-C64DF1B94296}
2008-07-18    15:34:08:152    280    17cc    PT    +++++++++++  PT: Synchronizing server
updates  +++++++++++
2008-07-18    15:34:08:152    280    17cc    PT     + Offline serviceId =
{305DC8A7-5A54-4216-83FE-C64DF1B94296}
2008-07-18    15:34:08:152    280    17cc    PT    WARNING: Cached cookie has expired or
new PID is available
2008-07-18    15:34:15:277    280    17cc    PT    +++++++++++  PT: Synchronizing extended
update info  +++++++++++
2008-07-18    15:34:15:277    280    17cc    PT     + Offline serviceId =
{305DC8A7-5A54-4216-83FE-C64DF1B94296}
2008-07-18    15:34:15:277    280    17cc    OfflSnc    WARNING: Failed to add file to the
FileLocationList with 0x80240013
2008-07-18    15:34:15:277    280    17cc    OfflSnc    WARNING: Failed to add file to the
FileLocationList with 0x80240013
2008-07-18    15:34:17:105    280    17cc    OfflSnc    WARNING: Failed to add file to the
FileLocationList with 0x80240013
2008-07-18    15:34:17:105    280    17cc    OfflSnc    WARNING: Failed to add file to the
FileLocationList with 0x80240013
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{2712D106-D80B-465C-AF38-8B1C4E9023DD}.100 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{683C3208-6183-491B-A5A8-B9E451DA919D}.106 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{1B0FDF08-9BBE-40B0-A1E4-01BF9ECB2A04}.103 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{9331D00E-485A-4C71-B6FF-7828D64776FA}.104 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{CDEA1B11-FE38-4967-8402-C0F4E6293842}.102 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{4D80B811-FBE1-493E-A69B-8EED4C5F2D2C}.103 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{2542DF13-B081-4F4A-908B-11A404EE251C}.100 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{2B0B2515-192D-470A-9745-4A3FB7C02030}.105 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{AA9CCD19-2A8E-4725-908A-155F8CC341A9}.104 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{29253F1A-CE79-4430-9A1C-A46A46D031BD}.102 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{2824EC1F-3E2F-420E-A60E-06D4A5D807F1}.110 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{43AA8322-6A3C-4883-943E-29236F43E9D0}.101 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{6B4CA623-1F67-422F-9B7F-7DAB513D7C9F}.101 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{82BA1D24-9D40-4267-9613-B392B98ECE5F}.102 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{6B98C329-BC4B-48A1-A4A9-DE59836F89E7}.101 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{1A61D52C-CFA2-417A-BD93-3C7A248FB05D}.104 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{1935D72E-82F7-4B86-90D6-B858B9DEBEEF}.103 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{DE2C8030-41CF-4F64-9DC5-EE96D944E383}.107 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{D5506431-5201-4CBE-A482-D97D6710BA91}.103 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{21455A34-0669-494C-A6FD-4D1C1EDC28D2}.101 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{9452503C-05BE-4A64-99ED-9A59F7D65398}.118 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{C36EE53C-FE94-417F-BEB4-B997775A040A}.103 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{D97DC842-DDE4-44C3-851D-23E4A3BC72A1}.101 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{07609D43-D518-4E77-856E-D1B316D1B8A8}.102 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{25E4704D-AF55-427C-98A3-F724B792DE35}.104 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{E478A74F-56E3-4DF0-BB8E-4DC39222D718}.104 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{3ABBB854-9941-4B7B-8B31-DDE787A6E23C}.104 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{05AFC95C-F2CB-4644-B42E-054AC0420A7E}.102 to search result
2008-07-18    15:34:17:449    280    17cc    Agent     * Added update
{6444DB5E-AFCC-4DBF-9D3E-8172A070E2F0}.104 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{EE4FE560-4A46-47F3-B455-3283A6DEE5F7}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{3DF94561-F909-4D58-86E5-946703942CC6}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{F39ABD66-507F-419A-BB26-9F2DAC21EDE9}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{9766EE68-0156-4898-9BB8-D1BC08E0F4B1}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{28190A6C-BDE4-4B91-83BC-1F0231B694B2}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{511F4A6E-7093-4158-9A01-FDBA68FFDB2A}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{597FC574-C938-4C75-BA99-332705631B68}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{745BEB74-FCB0-4323-ADF3-470A9AF3C615}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{5ABC0778-2418-4EDF-B4A9-038B9F296DC6}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{FE886A79-D52E-4734-B808-1B808AC6848E}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{CCCE547C-EF18-4099-98D6-95C2CE1AA207}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{5B4AF580-4613-4C09-A7C8-25EA125B9DD5}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{B0A6A382-7029-4546-85E9-039DBBB800F7}.108 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{804AE385-9C76-4230-8513-C921B8E122E4}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{58313F8C-4976-48AA-9537-79E4C1BFEBE0}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{CC1DED8E-C5B0-432B-AA2D-75CAF9B26452}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{DE7E4A92-A2E8-4599-92A4-2E6EE83CB190}.106 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{7DCCD092-79D6-4A4C-B4E7-C44A419A5317}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{FE06A193-D24F-4CB5-AEA8-5E70019EA76D}.106 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{8C0EB495-47B8-4728-8E0C-26A87B7A18D9}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{1A0AA998-93C5-4188-B758-C91C029BA3B0}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{9FA84699-F763-490A-AD88-A9680DE9FF74}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{0F82679D-E4A9-42FA-A3CA-80A4A96C7967}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{4CB66EA0-2CF1-4689-B53A-730909ED3735}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{572F70A0-E520-4EB5-9781-3D09EA57F7FC}.104 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{D3918DA3-ED42-4074-83E0-6BCF89C1A8C6}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{46EA0CA5-C69C-43F7-9724-5A66D52C419C}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{13A2F5A8-2591-4AD3-A463-34B1AE4FF088}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{D3EBD5A9-454D-498A-A432-38919CEF0254}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{C114E2AA-8790-4CB9-8AAE-D38FC6E8235A}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{0B8645AF-7D19-4687-B103-3390169C50F6}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{9FE4C2B1-5280-4291-838E-D9B63B7143DA}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{A622B2B3-B819-4EE7-BB72-5D4AB5A1F768}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{175CD7B3-E077-42BB-B4D1-BF4E10A02A69}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{428D44B8-FE17-4D6B-B0B6-C845EDF30E85}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{B84407BA-00A3-4FB2-8C8B-A9C17BEAC302}.105 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{3309C6C8-9B2F-4191-A300-98D9202D48B1}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{3691F1C9-0A8E-4514-AA9F-FB4274CB2F9A}.104 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{5D2787CB-BCB5-439D-B734-3E6F1B21B2DD}.103 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{4B8C1BD1-F2E6-45B5-9211-F6AF0EEDB5A0}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{030199D7-8C9E-4715-AF4A-377A034E4847}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{63C4C1DB-DA03-4B90-8D00-FA5A834078AB}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{C9E940DD-70D3-415F-9036-F81468EFBAF4}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{7D3F20E2-1970-4675-90DD-C6F605ED3758}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{C7071AE4-9999-4B81-B963-D4AA90CA721D}.104 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{33E261E8-16A2-4A4C-A09B-15D072150112}.105 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{7E5419EF-181F-406B-820B-5850629A0DE1}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{1C82E9F0-FD03-439D-9493-7044252BFC94}.108 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{D0C919F2-15A0-4738-B0D1-B2FF6E908E21}.104 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{BA825FF2-7B5B-411A-B066-B0212DC66425}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{5716D3F3-0550-4294-B8E6-64CAC43DC876}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{A9711EF4-689B-4833-975B-0FBF38D7236A}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{36DAB2F4-990F-4FF2-9C68-E4C9935F4105}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{61C08DF5-C3EF-4C47-BB76-9A04CA4F2F86}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{1FFF7AF8-E5CF-40CE-BB8C-E156F1788EF0}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{B362BBF8-37AD-46F7-A29D-10B2337636D7}.101 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{56C460FB-3A01-4867-958B-2F4959CB899E}.100 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Added update
{F02399FB-9130-4097-8202-43DCD4A7C100}.102 to search result
2008-07-18    15:34:17:465    280    17cc    Agent     * Found 87 updates and 33
categories in search; evaluated appl. rules of 671 out of 896 deployed
entities
2008-07-18    15:34:17:559    280    17cc    Agent    *********
2008-07-18    15:34:17:559    280    17cc    Agent    **  END  **  Agent: Finding updates
[CallerId = MBSA]
2008-07-18    15:34:17:559    280    17cc    Agent    *************
2008-07-18    15:34:17:574    4744    dec    COMAPI    >>--  RESUMED  -- COMAPI: Search
[ClientId = MBSA]
2008-07-18    15:34:17:606    4744    dec    COMAPI     - Updates found = 87
2008-07-18    15:34:17:606    4744    dec    COMAPI    ---------
2008-07-18    15:34:17:606    4744    dec    COMAPI    --  END  --  COMAPI: Search
[ClientId = MBSA]
2008-07-18    15:34:17:606    4744    dec    COMAPI    -------------
2008-07-18    15:34:17:684    4744    1640    COMAPI    -----------  COMAPI:
IUpdateServiceManager::RemoveService  -----------
2008-07-18    15:34:17:684    4744    1640    COMAPI     - ServiceId =
{305dc8a7-5a54-4216-83fe-c64df1b94296}
2008-07-18    15:34:17:934    4744    1640    COMAPI    IUpdateService removing volatile
scan package service, serviceID = {305DC8A7-5A54-4216-83FE-C64DF1B94296}
2008-07-18    15:34:17:949    280    49c    Agent    WARNING: WU client fails
CClientCallRecorder::RemoveService with error 0x80248014
2008-07-18    15:34:17:949    4744    1640    COMAPI    WARNING:
ISusInternal::RemoveService failed, hr=80248014
2008-07-18    15:34:18:434    280    17a4    AU    ###########  AU: Uninitializing
Automatic Updates  ###########
2008-07-18    15:34:18:434    280    17a4    Agent    Sending shutdown notification to
client
2008-07-18    15:34:18:809    280    17a4    Service    *********
2008-07-18    15:34:18:809    280    17a4    Service    **  END  **  Service: Service exit
[Exit code = 0x240001]
2008-07-18    15:34:18:809    280    17a4    Service    *************

> Scott - thank you for sending this our way.
>
[quoted text clipped - 17 lines]
> > out of the 25 systems 12 have an entry in the xml file as installed and 13
> > don't have an entry in the xml file at all???
Reply to this Message
Scott Hall - 31 Jul 2008 18:07 GMT
Doug, I installed WSUS on a lab box on a system with the same os build
patches etc.  WSUS is saying MS08-001 is not applicable as well.  But it is
installed here is the reg key with the date of the install.

information from WSUS report:
Security Update for Windows Server 2003 (KB941644)    Security
Updates    Install    Not Applicable

regkey dump
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server
2003\SP3\KB941644]
"Description"="Security Update for Windows Server 2003 (KB941644)"
"InstalledDate"="1/15/2008"
"InstalledBy"="SYSTEM"
"UninstallCommand"="C:\\WINNT\\$NtUninstallKB941644$\\spuninst\\spuninst.exe "
"Type"="Update"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server
2003\SP3\KB941644\Filelist]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server
2003\SP3\KB941644\Filelist\0]
"FileName"="tcpip.sys"
"Version"="5.2.3790.3036"
"BuildDate"="Tue Oct 30 10:55:34 2007"
"BuildCheckSum"="59516"
"Location"="C:\\WINNT\\system32\\DRIVERS"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server
2003\SP3\KB941644\Filelist\1]
"FileName"="tcpip.sys"
"Version"="5.2.3790.3036"
"BuildDate"="Tue Oct 30 10:55:34 2007"
"BuildCheckSum"="59516"
"Location"="C:\\WINNT\\system32\\DllCache"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server
2003\SP3\KB941644\Filelist\2]
"FileName"="tcpip.sys"
"Version"="5.2.3790.3036"
"BuildDate"="Tue Oct 30 13:07:48 2007"
"BuildCheckSum"="65b34"
"Location"="c:\\winnt\\$hf_mig$\\KB941644\\SP1QFE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server
2003\SP3\KB941644\Filelist\3]
"FileName"="tcpip.sys"
"Version"="5.2.3790.4179"
"BuildDate"="Tue Oct 30 17:34:10 2007"
"BuildCheckSum"="6d915"
"Location"="c:\\winnt\\$hf_mig$\\KB941644\\SP2GDR"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server
2003\SP3\KB941644\Filelist\4]
"FileName"="tcpip.sys"
"Version"="5.2.3790.4179"
"BuildDate"="Tue Oct 30 17:33:48 2007"
"BuildCheckSum"="6587f"
"Location"="c:\\winnt\\$hf_mig$\\KB941644\\SP2QFE"

This is quickly becomming an Audit concern as our Internal Auditors have
marked this as a concern.  Any guidence or explanation would be greatly
appreciated.

> Scott - thank you for sending this our way.
>
[quoted text clipped - 17 lines]
> > out of the 25 systems 12 have an entry in the xml file as installed and 13
> > don't have an entry in the xml file at all???
Reply to this Message
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage
Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.