"ginger" <> wrote in message
news:5ECF4779-6BB1-41FC-94E2-...
> 1) we use WSUS 3.0
> 2) we have a seperate OU for servers. When I run windows update on a local
> server, it show no any windows update but in WSUS we can see some windows
> update patches still not completed
Perhaps the status of those update installations has not been correctly
*reported* to the WSUS Server?
> 3) if we ran MBSA on a server then we found what are we missing on a local
> server.
Wait.. are you saying MBSA is also saying those updates are not installed?
The first step in this process is to determine, factually, whether the
updates are physically installed on the machine(s) or not. It is fairly
simple to enumerate the specific updates in question, and then visually
verify according to the information in the KB article whether the updates
have been installed (i.e. the correct files are physically present). You
should also check for the uninstall directories in %windir% and/or the
presence of the updates in Add/Remove Programs.
Checking the WindowsUpdate.log to verify that the WUAgent is actually
reporting to the WSUS Server (for that matter, actually detecting/installing
updates) would also be a suggested step to take.
> 4) someone told me if your servers are managed, it will not shown any
> available update patches on a local server until you run MBSA.
Pshaw. Don't take any more advice from that "someone". MBSA is an =optional=
tool for performing an analysis of machines -- and *nothing* anywhere
requires the use of MBSA.
--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)
MS WSUS Website:
http://www.microsoft.com/wsus
My MVP Profile:
http://mvp.support.microsoft.com/pro...awrence.Garvin