Microsoft November 2024 Patch Tuesday Audit
Patch Tuesday Security VulnerabilityRun Our November 2024 Patch Tuesday Audit Report
Lansweeper’s audit report for the Microsoft November 2024 Patch Tuesday report provides an overview of all Windows computers and their Windows patch status. Scan your network with our report to give you a quick and easy overview that allows you to find devices that might have issues receiving Microsoft updates. Detect outdated machines, start updating or simply manage your updating process in your network. Run our audit to keep your devices safe. In this month’s Patch Tuesday Microsoft brings 88 new fixes, 4 of which are listed as critical and 2 exploited. You can read all about the changes in the Patch Tuesday November blog post.
Run the Microsoft November 2024 Patch Tuesday Audit Now!
Patch Tuesday November 2024 Lansweeper On-Prem Query
Select Distinct Top 1000000 Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon, tblAssets.AssetID, tblAssets.AssetName, tblAssets.Domain, SubQuery4.[Patch status], Case When tblComputersystem.Domainrole > 1 Then 'Server' Else 'Workstation' End As [Workstation/Server], tsysOS.OSname As OS, tblAssets.SP, tblAssets.Version, SubQuery4.Buildnumber, SubQuery1.PatchIDMax as [Highest KB Patch installed], SubQuery1.InstalledOn as [Installed On], SubQuery4.[Install one of these updates], CASE WHEN SubQuery4.[Patch status] = 'Up to date' THEN '' WHEN CONVERT(date, LatestEvent.EventTime) = CONVERT(date, SubQuery1.InstalledOn) THEN 'Reboot might be required' WHEN CONVERT(date, LatestEvent.EventTime) < CONVERT(date, SubQuery1.InstalledOn) THEN 'Reboot is required' ELSE '' END AS [Reboot Status], tblAssets.Username, tblAssets.Userdomain, tblAssets.IPAddress, tsysIPLocations.IPLocation, tblAssetCustom.Manufacturer, tblAssetCustom.Model, tblState.Statename As State, tblAssets.Lastseen, tblAssets.Lasttried, QuickFixLastScanned.QuickFixLastScanned, Case When tblErrors.ErrorText Is Not Null Or tblErrors.ErrorText != '' Then 'Scanning Error: ' + tsysasseterrortypes.ErrorMsg Else '' End As ScanningErrors, Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned, GetDate())) + ' days ago' As WindowsUpdateInfoLastScanned, Case When Convert(nvarchar,DateDiff(day, QuickFixLastScanned.QuickFixLastScanned, GetDate())) > 3 Then 'Windows update information may not be up to date. We recommend rescanning this machine.' Else '' End As Comment, Case when SubQuery4.[Patch status] = 'Up to date' then '#d4f4be' when SubQuery4.[Patch status] = 'EOL, update to a higher Windows version' then '#ffadad' else '#ffadad' end as backgroundcolor From tblAssets left join ( select tblassets.assetid, SubQuery2.Buildnumber, CASE WHEN tsysOS.OSname = 'Win 2008' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OSname IN ('Win 7', 'Win 7 RC', 'Win 2008 R2') THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OSname = 'Win 8' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OSname = 'Win 2012' and SubQuery3.AssetID = tblassets.AssetID then 'Up to date' WHEN tsysOS.OSname = 'Win 8.1' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OSname = 'Win 2012 R2' and SubQuery3.AssetID = tblassets.AssetID then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.10240%' And SubQuery2.Buildnumber >= 20826 Then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.10586%' THEN 'EOL, update to a higher Windows version' WHEN (tsysOS.OScode LIKE '10.0.14393%' OR tsysOS.OSname = 'Win 2016') And SubQuery2.Buildnumber >= 7515 Then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.15063%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.16299%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.17134%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.17763' AND tblOperatingsystem.Caption NOT LIKE '%LTSC%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.17763' AND tblOperatingsystem.Caption LIKE '%LTSC%' And SubQuery2.Buildnumber >= 6530 Then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.18362%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.18363%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.19041%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.19042%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.19043%' THEN 'EOL, update to a higher Windows version' WHEN tsysOS.OScode LIKE '10.0.19044%' And SubQuery2.Buildnumber >= 5131 Then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.19045%' And SubQuery2.Buildnumber >= 5131 Then 'Up to date' WHEN tsysOS.OSname = 'Win 2019' And SubQuery2.Buildnumber >= 6530 Then 'Up to date' WHEN tsysOS.OSname = 'Win 2022' And SubQuery2.Buildnumber >= 2819 Then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.22000%' THEN 'EOL, update to a higher Windows version' WHEN (tsysOS.OScode LIKE '10.0.22621%' OR tsysOS.OScode LIKE '10.0.22631%') And SubQuery2.Buildnumber >= 4460 Then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.25398%' And SubQuery2.Buildnumber >= 1251 Then 'Up to date' WHEN tsysOS.OScode LIKE 'Win 2025' And SubQuery2.Buildnumber >= 2314 Then 'Up to date' WHEN tsysOS.OScode LIKE '10.0.26100%' And SubQuery2.Buildnumber >= 2314 Then 'Up to date' Else 'Out of date' End As [Patch status], CASE WHEN tsysOS.OSname = 'Win 2008' THEN 'EOL' WHEN tsysOS.OSname IN ('Win 7', 'Win 7 RC', 'Win 2008 R2') THEN 'EOL' WHEN tsysOS.OSname = 'Win 8' THEN 'EOL' WHEN tsysOS.OSname = 'Win 2012' THEN CASE WHEN SubQuery3.AssetID IS NULL then 'KB5046697' When SubQuery3.AssetID IS NOT NULL AND SubQuery3.AssetID <> tblassets.AssetID THEN 'KB5046697' END WHEN tsysOS.OSname = 'Win 8.1' THEN 'EOL' WHEN tsysOS.OSname = 'Win 2012 R2' THEN CASE WHEN SubQuery3.AssetID IS NULL then 'KB5046682' When SubQuery3.AssetID IS NOT NULL AND SubQuery3.AssetID <> tblassets.AssetID THEN 'KB5046682' END WHEN tsysOS.OScode LIKE '10.0.10240%' AND SubQuery2.Buildnumber < 20826 THEN 'KB5046665' WHEN tsysOS.OScode LIKE '10.0.10586%' THEN 'EOL' WHEN (tsysOS.OScode LIKE '10.0.14393%' OR tsysOS.OSname = 'Win 2016') AND SubQuery2.Buildnumber < 7515 THEN 'KB5046612' WHEN tsysOS.OScode LIKE '10.0.15063%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.16299%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.17134%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.17763' AND tblOperatingsystem.Caption NOT LIKE '%LTSC%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.17763' AND tblOperatingsystem.Caption LIKE '%LTSC%' AND SubQuery2.Buildnumber < 6530 THEN 'KB5046615' WHEN tsysOS.OScode LIKE '10.0.18362%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.18363%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.19041%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.19042%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.19043%' THEN 'EOL' WHEN tsysOS.OScode LIKE '10.0.19044%' AND SubQuery2.Buildnumber < 5131 THEN 'KB5046613' WHEN tsysOS.OScode LIKE '10.0.19045%' AND SubQuery2.Buildnumber < 5131 THEN 'KB5046613' WHEN tsysOS.OScode LIKE '10.0.19045%' AND SubQuery2.Buildnumber >= 5131 THEN '' WHEN tsysOS.OSname = 'Win 2019' AND SubQuery2.Buildnumber < 6530 THEN 'KB5046615' WHEN tsysOS.OSname = 'Win 2022' AND SubQuery2.Buildnumber < 2819 THEN 'KB5046616 or KB5046698 (Azure)' WHEN tsysOS.OScode LIKE '10.0.22000%' THEN 'EOL' WHEN (tsysOS.OScode LIKE '10.0.22621%' OR tsysOS.OScode LIKE '10.0.22631%') AND SubQuery2.Buildnumber < 4460 THEN 'KB5046633' WHEN tsysOS.OScode LIKE '10.0.25398%' AND SubQuery2.Buildnumber < 1251 THEN 'KB5046618' WHEN tsysOS.OSname = 'Win 2025' AND SubQuery2.Buildnumber < 2314 THEN 'KB5046617' WHEN tsysOS.OScode LIKE '10.0.26100%' AND SubQuery2.Buildnumber < 2314 THEN 'KB5046617' ELSE '' END AS [Install one of these updates] from tblassets Left Join tsysOS On tsysOS.OScode = tblAssets.OScode Inner Join tblOperatingsystem On tblOperatingsystem.AssetID = tblAssets.AssetID left Join (select tblassets.AssetID, CASE WHEN ISNUMERIC(tblAssets.BuildNumber) = 1 THEN CONVERT(bigint, tblAssets.BuildNumber) ELSE NULL END as Buildnumber from tblAssets where Assettype = -1) As SubQuery2 On tblAssets.AssetID = SubQuery2.AssetID Left Join (Select Top 1000000 tblQuickFixEngineering.AssetID From tblQuickFixEngineering Inner Join tblQuickFixEngineeringUni On tblQuickFixEngineeringUni.QFEID = tblQuickFixEngineering.QFEID Where tblQuickFixEngineeringUni.HotFixID In ('KB5046697','KB5046682')) As SubQuery3 On tblAssets.AssetID = SubQuery3.AssetID ) As SubQuery4 On tblAssets.AssetID = SubQuery4.AssetID Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype Inner Join tblOperatingsystem On tblOperatingsystem.AssetID = tblAssets.AssetID left JOIN ( SELECT AssetId, EventTime FROM ( SELECT AssetId, EventTime, ROW_NUMBER() OVER (PARTITION BY AssetId ORDER BY EventTime DESC) AS rn FROM tblUptime WHERE EventType = 1 AND ISDATE(EventTime) = 1 ) AS rankedEvents WHERE rn = 1) AS LatestEvent ON tblAssets.AssetID = LatestEvent.AssetId Left JOIN tblQuickFixEngineering ON tblAssets.AssetID = tblQuickFixEngineering.AssetID Left Join (Select Top 1000000 tblQuickFixEngineering.AssetID, CASE WHEN ISNUMERIC(Max(Right(tblQuickFixEngineeringUni.HotFixID, 7))) = 1 THEN Max(Cast(Right(tblQuickFixEngineeringUni.HotFixID, 7) As bigint)) ELSE NULL END as PatchIDMax, MAX(CAST(installedon AS date)) AS InstalledOn From tblQuickFixEngineering Inner Join tblQuickFixEngineeringUni On tblQuickFixEngineeringUni.QFEID = tblQuickFixEngineering.QFEID Where Right(tblQuickFixEngineeringUni.HotFixID, 7) Not Like '%[^0-9]%' and ISDATE(installedon) = 1 Group By tblQuickFixEngineering.AssetID) As SubQuery1 On tblAssets.AssetID = SubQuery1.AssetID Inner Join tblState On tblState.State = tblAssetCustom.State Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID Left Join tsysOS On tsysOS.OScode = tblAssets.OScode Left Join tsysIPLocations On tblAssets.IPNumeric >= tsysIPLocations.StartIP And tblAssets.IPNumeric <= tsysIPLocations.EndIP Left Join (Select Distinct Top 1000000 TsysLastscan.AssetID As ID, TsysLastscan.Lasttime As QuickFixLastScanned From TsysWaittime Inner Join TsysLastscan On TsysWaittime.CFGCode = TsysLastscan.CFGcode Where TsysWaittime.CFGname = 'QUICKFIX') As QuickFixLastScanned On tblAssets.AssetID = QuickFixLastScanned.ID Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID, Max(tblErrors.Teller) As ErrorID From tblErrors Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID = ScanningError.ID Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype = tblErrors.ErrorType Where tsysOS.OSname <> 'Win 2000 S' And tsysOS.OSname Not Like '%XP%' And tsysOS.OSname Not Like '%2003%' And tblAssetCustom.State = 1 And tsysAssetTypes.AssetTypename Like 'Windows%' Order By tblAssets.Domain, tblAssets.AssetName