Installation Date for a Security Updates

Is it possible to determine the date a security update is installed? I know
I can use either 1-Add/Remove Programs to determine if the update is
installed or B-Baseline Security Analyzer -- but how can I determine the
date/time that it was installed?

Thanks!

soccerkatie wrote:
> Is it possible to determine the date a security update is installed? I know
> I can use either 1-Add/Remove Programs to determine if the update is
> installed or B-Baseline Security Analyzer -- but how can I determine the
> date/time that it was installed?
>
> Thanks!
Hi,

Some ways I know of:

1)
If installed by Windows Update, look at the update history.

2)
Most updates creates an "InstalledDate" registry value in the structure
found under the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\

3)
Look at the creation date for the uninstall folders created in the
Windows folder.


--
torgeir, Microsoft MVP Scripting, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

"soccerkatie" <> wrote in message
news:656853BF-EE2D-41E7-88F0-...
> Is it possible to determine the date a security update is installed? I know
> I can use either 1-Add/Remove Programs to determine if the update is
> installed or B-Baseline Security Analyzer -- but how can I determine the
> date/time that it was installed?
>
> Thanks!


How was it installed? On which OS? E.g. if installed by AU on XP
look in the ReportingEvents.log (in %windir%\SoftwareDistribution)

If you have a particular update name to check you could also
search your harddrive for signs that it has been used.
In particular most updates create *.log files which are given
the update's name and they are usually timestamped inside
and give clues about whether they were successful.

If it wasn't too long ago or provided your Events log doesn't wrap
very quickly try using your Event Viewer (for its Application log).
There's probably a specific category and event code which could be
used to see just all of them but I would just do a Find for Install.
I suspect that option would work whether you installed something
manually or automatically (e.g. via WU AU or MU).

Another tool which gives timestamps is msinfo32 and its System History.
E.g. it looks as if you could get clues from it about when modules
associated with particular updates were added. (I can't see that it
specifically references any updates by name but by getting the module names
from the TechNet Bulletins you could find their history in the System History's
Software Environment view and thus infer when it was installed.)
BTW I find that tool is *extremely* slow but perhaps I just don't have
enough RAM for it to work efficiently.


HTH

Robert Aldwinckle
---

On Tue, 18 Apr 2006 09:25:01 -0700, soccerkatie
<> wrote:

>Is it possible to determine the date a security update is installed? I know
>I can use either 1-Add/Remove Programs to determine if the update is
>installed or B-Baseline Security Analyzer -- but how can I determine the
>date/time that it was installed?
>
>Thanks!

Dead easy with the latest batch of updates.

Just note the time and date when it crashes or locks up. Thats when
the latest updates were installed.

8-)

Jonah