Solved

MBSA 2.0 CLI

Posted on 2006-07-06
3
322 Views
Last Modified: 2012-06-27
I have searched and cannot find a simple answer to this.

How can I use MBSA to give me a list of patches needed by a set of servers in a text file? I had seen some newgroup postings about parsing the xml output - but I think someone can recommend a good script to use or have a better solution (that is free).

I know how to automate scans to save the default results for a group of servers but I do not want to use the GUI to open each one.

---
cd "C:\Program Files\Microsoft Baseline Security Analyzer 2"
mbsacli.exe /listfile c:\support\mbsa\Systems.txt /n Password+IIS+OS+SQL /wi
---
That saves the results to C:\Documents and Settings\administrator\SecurityScans\

I am just trying to get a good list of patches needed so I cna approve them via WSUS. I know some patches override others and want to just approve patches that I need.

Thanks,
Mark
0
Comment
Question by:markpalinux
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 500 total points
ID: 17052242
Why do you want to do that manually? That's exactly what WSUS is there for: you can approve updates for detection only. After the client's next detection cycle, you should be able to generate a report of missing patches for the machines you want to check.
You can basically approve any hotfix (you've tested); the AU client will only install the updates the machine needs, not all updates that are approved.
Whether a patch supersedes another one is listed in the patch's details, and easily identifiable by the little tree symbol on the left. Note that a patch listed as superseding another one may well have been already superseded by another one, so always check the description, and don't go by the symbol only.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
RDP up only between 8am-13.00 pm ? 11 83
DHCP server 6 63
Windows Server 2003 Policy Preventing Updates 6 56
Questions about DHCP migration 5 103
So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question