stickzilla Posted January 18, 2006 Share Posted January 18, 2006 I was curious if there was any short way determine if a 2000 or 2003 server machine has been receiving their windows updates ?We have found a server of ours has not been updated in a while, and during some maintenance this weekend we shall be checking other servers to see if they require updates as well. We use a SUS server, but it seems that maybe something isn't set up properly. As a precautionary measure, we want to verify that the others are getting updates since we are going to be shutting down / rebooting everything anyways.Anyways, does anybody know of a quick way to check on this ? I am going to be checking on over 100 servers, so the faster the better.Currently off the top of my head I am wondering if I should just run systeminfo and look at the last KB listed. If its the last one to be put out by our SUS servers, then that machine is fine. Link to comment Share on other sites More sharing options...
Minus Human Posted January 18, 2006 Share Posted January 18, 2006 If you go to the root of your Server under C:\windows..look for a file called WindowsUpdate.log all your SUS/WSUS information is located in this log file.I'm curious why are you using SUS when WSUS is available for free with many updated feutures?Minus Human Link to comment Share on other sites More sharing options...
fizban2 Posted January 18, 2006 Share Posted January 18, 2006 Stickzilla,Check out WSUS, it is a new and better version of SUS, Windows Software Update Services Link to comment Share on other sites More sharing options...
cluberti Posted January 18, 2006 Share Posted January 18, 2006 As Minus previously stated, you can check the Windowsupdate.log file on the server you believe to be having the issue to see the log of AU traffic on the server in question - there's likely errors being logged there. Link to comment Share on other sites More sharing options...
stickzilla Posted January 18, 2006 Author Share Posted January 18, 2006 We have a network of up to 16,000 machines across my state, so it takes a while before something that will impact everything gets distributed and put into production. We are in the process of testing WSUS now. I'll check out the .log files also, thanks. Link to comment Share on other sites More sharing options...
cluberti Posted January 19, 2006 Share Posted January 19, 2006 We have a network of up to 16,000 machines across my stateWith that many machines, you may want to consider SMS for this type of duty... Link to comment Share on other sites More sharing options...
TravisO Posted January 19, 2006 Share Posted January 19, 2006 There is an easy way to check servers remotely.... install the MS BSA (Baseline Security Analyzer) found at:http://www.microsoft.com/technet/security/...s/mbsahome.mspxIt's MS's security scanner than checks many security things in addition to listing any missing patches. It takes a couple minutes per server, but it works great. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now