Using CIM to Check Windows Patches?

[mike prest]

Since Survey.txt has patch info is there any way to run a report which would list servers and their patches? This would be really handy.

The hotfix info can be found in the Survey utility report under...
SOFTWARE\Microsoft\Windows NT\CurrentVersion\HOTFIX

Thanks

[James Kennedy_4]

You'd probably have to script something in SIM to use the HFNETCHK, the command line tool from Microsoft.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/hfnetchk.asp

Its a bit of added work, I'd say you're better off just using another 3rd party tool that is designed to do that job.

[David Claypool]

The output from Survey is not dragged back to the database, so the idea of a 'report' can't be done. However, Survey outputs a file SURVEY.TXT on each server when a configuration is captured. You could use the distributed task function to manipulate the text file at each server and then echo to the screen all of the patches. hpSIM will collect the output from each job and you can display a report from all the systems.

[Rob Buxton]

I do this in a similar way to which James has proposed.
I use the CCL version of the MS Baseline Security Analyzer. It's all in a perl script which extracts a list of Servers from IM and runs the Utility for each server creating a number of reports. I then use perl to search those reports. It relies on me manually downloading the latest Baseline file.

But I haven't found an easy way of being able to run a similar report for the HP Drivers etc.
I don't know of a way of achieving what you want from within HPSIM or CIM 7.