Patches not showing as applied, what's up w/this MS

Ok here is what I'm trying to do to get ready for an audit. I'm trying to
verify that all patches for a given system are installed (W2k Adv. Srv).
What I'm running into is a few patches that I've applied that are not showing
as applied. I've run hfnetchk and MBSA and I'm using Add/Remove Programs to
verify.

1. MBSA is saying that I have not applied KB891861, hfnetchk says it's not
missing
but it doesn't show up in Add/Remove Programs either. I've applied it more
than once.

2. I've run hfnetchk and below is the output that was ported to a text file.
The patches with an * denote patches that hfnetchk says are not installed but
Add/Remove Programs says is these patches are and they are also picked up by
MBSA as applied.

* WINDOWS 2000 ADVANCED SERVER SP4

Patch NOT Installed MS02-050 Q329115
Note MS02-064 Q327522
Patch NOT Installed MS03-022 Q822343
Patch NOT Installed MS03-023 Q823559
Warning MS03-034 Q824105
Warning MS03-041 Q823182
Patch NOT Installed MS03-042 Q826232
Patch NOT Installed MS03-043 Q828035
Warning MS03-049 Q828749
Patch NOT Installed MS04-008 Q832359
Patch NOT Installed MS04-011 Q835732
Warning MS04-012 Q828741
Patch NOT Installed MS04-014 Q837001
Patch NOT Installed MS04-019 Q842526
Patch NOT Installed MS04-020 Q841872
Warning MS04-022 Q841873
Patch NOT Installed MS04-031 Q841533
Warning MS04-032 Q840987
Patch NOT Installed MS04-037 Q841356
Patch NOT Installed MS04-041 Q885836
Patch NOT Installed MS04-043 Q873339
Warning MS04-044 Q885835
Warning MS05-003 Q871250
Patch NOT Installed MS05-010 Q885834
Patch NOT Installed MS05-011 Q885250
Patch NOT Installed MS05-013 Q891781
Patch NOT Installed MS05-015 Q888113
Patch NOT Installed MS05-018 Q890859
Patch NOT Installed MS05-019 Q893066
Warning MS05-027 Q896422 *
Patch NOT Installed MS05-047 Q905749 *
Patch NOT Installed MS05-049 Q900725 *
Patch NOT Installed MS05-051 Q902400 *
Patch NOT Installed MS05-053 Q896424 *

* INTERNET EXPLORER 6 SP1

Patch NOT Installed MS05-052 Q896688 *

* MDAC 2.5 SP3

Patch NOT Installed MS02-065 Q329414
Patch NOT Installed MS04-003 Q832483

So how can I go into an audit and say well this program says it's ok but
this one says it isn't. I CAN'T!!!

Has anyone had this problem before? What can I do to verify.

Last note. I ran Windows Update again and it also said that I have not
applied the KB891861 Roll Up Security 1 for W2K SP4 so I applied it again
reboot and MBSA still says I need it.

Thanks in advance.

KB

"kb" <> wrote in message
news:3D238CD6-5EF4-49A3-BC31-...
> Ok here is what I'm trying to do to get ready for an audit. I'm trying to
> verify that all patches for a given system are installed (W2k Adv. Srv).
> What I'm running into is a few patches that I've applied that are not showing
> as applied. I've run hfnetchk and MBSA and I'm using Add/Remove Programs to
> verify.
>
> 1. MBSA is saying that I have not applied KB891861, hfnetchk says it's not
> missing
> but it doesn't show up in Add/Remove Programs either. I've applied it more
> than once.


Which MBSA? Others are finding that MBSA 1.2.1 sometimes reports
with more detail. Also, which options? mbsacli.exe from the command
line may show you more detail. Etc.


>
> 2. I've run hfnetchk and below is the output that was ported to a text file.

I think it is important to get a report on module versions.
Does hfnetchk still provide that level of detail?
E.g. the symptom you are getting could be explained
if the patch is applied as far as the registry is concerned
but not applied as far as the module versions are concerned.
That could happen if something (such as allowing security products
to be running during an update) is preventing the final copy of modules
to be made during a reboot. Etc.

For your rollup problem note that others have discovered that
there seem to be some undocumented (and unnoted) prerequisites
such as MDAC 2.8 and XML 3.0 latest service pack. On top of that
still others have undiagnosed other suspected missing prerequisites.


HTH

Robert Aldwinckle
---