SMS 2003 vs SUS

From: Rob Stevens (empty_at_address.com)
Date: 10/12/04


Date: Tue, 12 Oct 2004 20:36:25 GMT

Hi All,

I have a client that has been actively using SUS server to deploy patches.
We are installing SMS 2003 and they would prefer to use the SUS server for
general patch management since they are used to it / it's easier to just
click on the updates etc..

My questions are:

A: Is there a way to add all the updates into SMS that show up in SUS using
syncxml.exe or is it just a fact that syncxml.exe only discovers
vulnerabilities and not general windows update type items. (This is a big
reason they want to stick with SUS) I understand that they can download them
manually and distribute them as regular packages but they do not want to do
this.

B: If they do stick with SUS, they would like to use SMS to report on the
patch installation status for all the machines. What I'd like to be able to
leave them with is a report that shows "Computers WITHOUT specific software
registered in Add Remove Programs" so they can simply enter in the patch
number or any other software title into the prompt, and display all the
machines that do not have the patch / software installed.

I'm having a hard time wrapping my head around how to reverse the built in
report that shows computers with specific software registered.

This SQL query below is obviously broken since it retrieves every
DisplayName0 instance that is not like my example patch. How would I limit
the query to just retrieve the machines that do not have the software
installed without listing every single item?

Thanks in advance for any help or thoughts!

-Rob
----------------------------------------------------------------------------
--------
Select sys.Netbios_Name0, fcm.SiteCode, sys.User_Domain0,
sys.User_Name0, sys.Operating_System_Name_and0, arp.DisplayName0

FROM v_R_System sys

JOIN v_GS_ADD_REMOVE_PROGRAMS arp
ON sys.ResourceID = arp.ResourceID

JOIN v_FullCollectionMembership fcm
on sys.ResourceID=fcm.ResourceID

WHERE DisplayName0 not like 'Windows XP Hotfix - KB885523'

and fcm.CollectionID = 'ABC00025'



Relevant Pages

  • Re: Microsoft Security Bulletin MS03-049 - Installation problems?
    ... I am applying patches using SUS Feature Pack for SMS. ... choose to install the patch, it will install, but the next day it will be ... code "NT1003" when registering to take the TICSA exam at www.2test.com. ...
    (NT-Bugtraq)
  • Re: SMS Feature Pack
    ... #1 - Doesn't matter at all, but I sugest installing SP5 first because of the ... Looking to get more involved in the SMS community? ... > 1 Would it be better to install SMS SP5 before or after installing SUS? ...
    (microsoft.public.sms.admin)
  • Re: Patch management and SMS 2003
    ... Depends which "SUS package" you are referring to, ... Sms currently can not get its updates from a SUS server. ... you to reuse your patch packages. ...
    (microsoft.public.sms.admin)
  • MS04-15 not beeing detected by MSBA nor SMS 2.0+SUS!!!
    ... SMS 2.0 + SUS. ... I detected that the update was in the xml patch ... Why does this happend? ...
    (microsoft.public.sms.tools)
  • MS04-15 not beeing detected by MSBA nor SMS 2.0+SUS!!!
    ... SMS 2.0 + SUS. ... I detected that the update was in the xml patch ... Why does this happend? ...
    (microsoft.public.sms.swdist)