Notification

Icon
Error

Microsoft Patch Tuesday Report - April 2019

Posted: Wednesday, April 10, 2019 6:36:50 AM(UTC)
Bruce.B

Bruce.B

Member Administration Original PosterPosts: 532
5
Like
The April Patch Tuesday has come so another Patch Tuesday is upon us. This report checks if assets in your network are on the latest Windows monthly roll-up (or security) update released on this patch Tuesday. If you want more information about what is included in this update, feel free to visit the related blog post.

The report is color-coded to give you an easy and quick overview which assets are already on the latest Windows update (excluding anything older than Windows 7 SP1).

If you have any suggestions which might improve the report for future use, feel free to post your suggestion. You can find the report for last month here.

Code:
Select Distinct Top 1000000 Coalesce(tsysOS.Image,
tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblState.Statename As State,
Case tblAssets.AssetID
When SubQuery1.AssetID Then 'Up to date'
Else 'Out of date'
End As [Patch status],
Case
When tblComputersystem.Domainrole > 1 Then 'Server'
Else 'Workstation'
End As [Workstation/Server],
tblAssets.Username,
tblAssets.Userdomain,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
Case
When tsysOS.OScode Like '10.0.10240%' Then '1507'
When tsysOS.OScode Like '10.0.10586%' Then '1511'
When tsysOS.OScode Like '10.0.14393%' Then '1607'
When tsysOS.OScode Like '10.0.15063%' Then '1703'
When tsysOS.OScode Like '10.0.16299%' Then '1709'
When tsysOS.OScode Like '10.0.17134%' Then '1803'
When tsysOS.OScode Like '10.0.17763%' Then '1809'
End As Version,
tblAssets.Lastseen,
tblAssets.Lasttried,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
Case
When tblAssets.AssetID = SubQuery1.AssetID Then ''
Else Case
When tsysOS.OSname = 'Win 2008' Then 'KB4493458 or KB4493471'
When tsysOS.OSname = 'Win 7' Or tsysOS.OSname = 'Win 7 RC' Or
tsysOS.OSname = 'Win 2008 R2' Then 'KB4493472 or KB4493448'
When tsysOS.OSname = 'Win 2012' Or
tsysOS.OSname = 'Win 8' Then 'KB4493451 or KB4493450'
When tsysOS.OSname = 'Win 8.1' Or
tsysOS.OSname = 'Win 2012 R2' Then 'KB4493446 or KB4493467'
When tsysOS.OScode Like '10.0.10240' Then 'KB4493475'
When tsysOS.OScode Like '10.0.10586' Then 'KB4093109'
When tsysOS.OScode Like '10.0.14393' Or
tsysOS.OSname = 'Win 2016' Then 'KB4493470'
When tsysOS.OScode Like '10.0.15063' Then 'KB4493474'
When tsysOS.OScode Like '10.0.16299' Then 'KB4493441'
When tsysOS.OScode Like '10.0.17134' Then 'KB4493464'
When tsysOS.OScode Like '10.0.17763' Or
tsysOS.OSname = 'Win 2019' Then 'KB4493509'
End
End As [Install one of these updates],
Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned,
GetDate())) + ' days ago' As WindowsUpdateInfoLastScanned,
Case
When Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned,
GetDate())) > 3 Then
'Windows update information may not be up to date. We recommend rescanning this machine.'
Else ''
End As Comment,
Case tblAssets.AssetID
When SubQuery1.AssetID Then '#d4f4be'
Else '#ffadad'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Top 1000000 tblQuickFixEngineering.AssetID
From tblQuickFixEngineering
Inner Join tblQuickFixEngineeringUni On tblQuickFixEngineeringUni.QFEID
= tblQuickFixEngineering.QFEID
Where tblQuickFixEngineeringUni.HotFixID In ('KB4493472','KB4493448','KB4493458','KB4493471','KB4493451','KB4493450','KB4493446','KB4493467','KB4493475','KB4093109','KB4493470','KB4493474','KB4493441','KB4493464','KB4493509')) As
SubQuery1 On tblAssets.AssetID = SubQuery1.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tblOperatingsystem On tblOperatingsystem.AssetID =
tblAssets.AssetID
Left Join tsysIPLocations On tblAssets.IPNumeric >= tsysIPLocations.StartIP
And tblAssets.IPNumeric <= tsysIPLocations.EndIP
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join (Select Distinct Top 1000000 tblAssets.AssetID As ID,
TsysLastscan.Lasttime As QuickFixLastScanned
From TsysWaittime
Inner Join TsysLastscan On TsysWaittime.CFGCode = TsysLastscan.CFGcode
Inner Join tblAssets On tblAssets.AssetID = TsysLastscan.AssetID
Where TsysWaittime.CFGname = 'QUICKFIX') As QuickFixLastScanned On
tblAssets.AssetID = QuickFixLastScanned.ID
Left Join (Select Distinct Top 1000000 tblAssets.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Inner Join tblAssets On tblAssets.AssetID = tblErrors.AssetID
Group By tblAssets.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
Where tblAssets.AssetID Not In (Select Top 1000000 tblAssets.AssetID
From tblAssets Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tsysOS.OSname Like 'Win 7%' And tblAssets.SP = 0) And
tsysOS.OSname != 'Win 2000 S' And tsysOS.OSname Not Like '%XP%' And
tsysOS.OSname Not Like '%2003%' And tsysAssetTypes.AssetTypename Like
'Windows%' And tblAssetCustom.State = 1
Order By tblAssets.Domain,
tblAssets.AssetName
joe_user
#1joe_user Member Posts: 11  
posted: 4/17/2019 4:24:50 PM(UTC)
Thank you for providing these reports each month!

Would like to see reports for popular Microsoft applications such as Exchange, SQL and SharePoint.

On that note and keeping in mind that Lansweeper is used by different levels (support/administrators/managers/executives) within disparate IT teams (client, network, application, and cybersecurity) where some are more customers of Lansweeper reports than keepers of assets, I feel that the "up to date" and "out of date" wording in the output is problematic since the criteria in the report only verify that a single month's OS updates are installed. I suggest referencing the month of the KB's in the output, e.g. "April 2019 OS updates installed" and "Some or all March 2019 OS updates NOT installed."

Esben.D
#2Esben.D Member Administration Posts: 1,827  
posted: 4/30/2019 4:18:33 PM(UTC)
Originally Posted by: joe_user Go to Quoted Post
I suggest referencing the month of the KB's in the output, e.g. "April 2019 OS updates installed" and "Some or all March 2019 OS updates NOT installed."


Since these reports are monthly and focus only on the month in the title, I felt it was not necessary to also mention the specific month in the column.
If you save the report without the month's name in the title I can see why it might not be as clear, but the KB numbers displayed for outdated assets should also help people pinpoint what might be missing.
doone128
#3doone128 Member Posts: 21  
posted: 5/2/2019 12:47:13 PM(UTC)
Thanks for this.

Is it possible to add a column that can be filtered on to only display those assets seen since the patch release date?
For example, according to the last report, I have roaming assets that haven't been seen on the network for 50+ days but these still show up in the report which looks bad when sent to the board. But there's not much I can do about it if the assets are not joining the network so cannot be reported on. Seems unfair to report on these assets.
Does that make sense?
The Boss
#4The Boss Member Posts: 5  
posted: 5/8/2019 5:29:22 PM(UTC)
How do I add a Column to this report for Last Patched Date to show when the system was last patched?

Thank you for this very useful information!

Active Discussions

Installer Sophos Silent Install
by  mzipperer   Go to last post Go to first unread
Last post: 9/5/2019 11:00:34 PM(UTC)
Installer Team Viewer Host update / install
by  CyberCitizen  
Go to last post Go to first unread
Last post: 8/15/2019 6:18:33 AM(UTC)
Installer Script - Reset Local Admin Password
by  Ricky Hignite   Go to last post Go to first unread
Last post: 7/26/2019 6:30:06 PM(UTC)
Installer LsAgent for Windows
by  bbeavis  
Go to last post Go to first unread
Last post: 7/15/2019 10:17:18 PM(UTC)
Installer Uninstall - Adobe Acrobat 9x
by  mzipperer   Go to last post Go to first unread
Last post: 7/12/2019 9:15:51 PM(UTC)
Installer Upgrade Windows 10 to 1803
by  Richard A  
Go to last post Go to first unread
Last post: 7/9/2019 2:05:20 PM(UTC)
Installer VLC Media Player Installer v3.0.7.1
by  Nando   Go to last post Go to first unread
Last post: 7/3/2019 12:51:23 PM(UTC)
Installer VLC 3.0.7.1 Installer - If Exists - For Exploit Patching
by  zbwalker  
Go to last post Go to first unread
Last post: 6/18/2019 3:56:41 PM(UTC)