How to get a list of hotfixes?

Hi there,

I need a list of all security and critical updates that have been released
by Microsoft. I want to compare this list with my cluster nodes and make sure
that they are all fully patched. I am using the VBScript written by Richard
McDonald and just need to populate the text file with KB IDs.
http://blogs.technet.com/richard_mac...03/879029.aspx

Can anyone help?

Thanks,
Mark.

"Mark Allison" <> wrote in message
news:1510275B-2666-4755-A36E-...
> Hi there,
>
> I need a list of all security and critical updates that have been released
> by Microsoft. I want to compare this list with my cluster nodes and make
> sure
> that they are all fully patched. I am using the VBScript written by
> Richard
> McDonald and just need to populate the text file with KB IDs.
> http://blogs.technet.com/richard_mac...03/879029.aspx
>
> Can anyone help?

You can use, of course, the online Windows Update web site to check whether
they are patched properly.

However, applying all hotfixes probably is a very bad idea since hot fixes
are not regression tested.

--
Russ Kaufmann,
MVP, MCSE: Messaging and Security, MCT, MCITP, MCTS and other stuff

ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp

> You can use, of course, the online Windows Update web site to check whether
> they are patched properly.
>
> However, applying all hotfixes probably is a very bad idea since hot fixes
> are not regression tested.
>
Thanks for your reply Russ. I don't want to apply all hotfixes, just the
security and critical updates. I do not want the cluster nodes to access the
internet - security patches in our environment are handled by WUSS 3.0. Do
you know how to obtain a text file of all critical and security updates
published since R2?

Thanks,
Mark.

> Answer: Best mathode. when your network free that time online update. If you
> online update that time all new update download and install.
>
Thanks for your reply. Two points:
1) The node is not connected to the internet, but connects to a WUSS 3.0
server.
2) I have the updates installed, I want to run a check to make sure all
nodes are patched to the same level.

> Wait a minute... if you are using WSUS, then it would handle them.
>
> I am confused as to why you want the list instead of using the tools that
> you have available. I am not trying to be a pain, I am just trying to
> understand why WSUS isn't good enough.
>

Well, I ran the script that I posted earlier and I noticed that Node 3 in my
five node cluster was missing some patches. However I'm not sure that the
patch list I'm using is complete, so there could be other patches that are
missing that I'm not aware of. WSUS does not give this information, or
rather, I don't fully trust the Windows Server team where I work to guarantee
that all nodes in the cluster are fully patched.

I'm a SQL Server DBA, but the foundation of SQL Server is the OS, and I want
to make sure that SQL is running on solid foundations. When cluster nodes are
at different patch levels, we have a problem.