PENDING Windows 7 Query Statement for KB Check

[dprd7]

Hello Everyone

Is it possible to do a query statement to check if a certain KB is installed on a Windows 7 PC using SCCM and if so does anybody have the query statement. Any help would be great.

Thank You

 

[Garth]

Have you looked at the built-in reports for this?

 

[dprd7]

Well I am kinda a newbie to SCCM and was trying to figure a way doing a query instead of a report. I also wasn't sure if you can do a report given the updates were done by a WSUS server and not SCCM. Any help would be great. Also thanks for the quick response.

 

[Gokul]

Hi , we have an inbuilt report for fetching report for your query. Navigate to below path
Monitoring||reports|| select compliance 2 specific software update then select your collection and input Kb number

 

[Garth]

Well I am kinda a newbie to SCCM and was trying to figure a way doing a query instead of a report. I also wasn't sure if you can do a report given the updates were done by a WSUS server and not SCCM. Any help would be great. Also thanks for the quick response.

if you are NOT using ConfigMgr SUP then neither collection queries nor reports will help you.

 

[dprd7]

Wow. Thanks for the quick responses and help.

So let me get this straight. There is no way for me to use SCCM to detect a KB on a machine that is manged by SCCM if the update was never pushed by it.

I can't do a report or a query.

The reason I am asking is because we have a wsus server that does updates and a SCCM server that pushes out apps. We have been having an issue with the WSUS server and the reports so I wanted to try to use SCCM to find out which specific windows 7 updates have been installed or not. I figured the hardware inventory would collect that data either way even if sccm is not used for updates.

 

[Garth]

The reason I am asking is because we have a wsus server that does updates and a SCCM server that pushes out apps. We have been having an issue with the WSUS server and the reports so I wanted to try to use SCCM to find out which specific windows 7 updates have been installed or not. I figured the hardware inventory would collect that data either way even if sccm is not used for updates.

Since you are using WSUS only and NOT CM. There you can't find ALL SU that get installed on a computer. At best you can extend the HW inv. to see those SU that update the QFE details on a computer. Again keep in mind that NOT all SU update the QFE details, so it can be hit or miss if the SW are listed.

 

[dprd7]

So I extended HW inv. to do all QFE and tried running this.

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_QUICK_FIX_ENGINEERING on SMS_G_System_QUICK_FIX_ENGINEERING.ResourceId = SMS_R_System.ResourceId where SMS_G_System_QUICK_FIX_ENGINEERING.HotFixID = "KB4490628"

Not sure if this is correct or not but it didn't work.

 

[Garth]

So again not all SU are listed within QFE. Next if you want to ensure that the collection is right then look at the HW inventory and make a collection based on one of the QFE that are listed for that computer, then this will tell you if you have done things right or not.

 

[dprd7]

So I ran this on the client so I could get a list of hotfix. wmic qfe get hotfixid
I tried doing a query based off one but no results when I know that has installed.

Not sure what I have wrong in the query above.

 

[Garth]

Did you look at HW inventory? There is no point in trying to create a collection until it show up there.

 

[dprd7]

I think it is working now. I do know see what you mean with HotFix IDs and not everything using it. Thank you for all the help. Great site, Great forum, and Great Help. Stay Safe Everyone