Report installed patches "skip" <shofmann[ at ]kbb.com> 12/10/2008 5:05:53 PM Hello all I recently setup wsus 3.0 sp1 on windows 2008. How can i get a report using wsus on the installed patches on a group of servers? I dont want to install patches i just want to get a report on what has already been installed. If i can do this it will save me the trouble of having to copy over the old wsus 2.0 database from our old server and importing into our new 3.0 sp1 wsus server. Basically when go live with the new wsus 3.0 sp1 box we need to know what patches have already been installed, so i am thinking i will either need to copy the information from he old wsus box or run a report using the new wsus box, (if its possible to do so) Many thanks

Re: Report installed patches "Lawrence Garvin \(MVP\)" <lawrence[ at ]news.postalias> 12/10/2008 7:06:20 PM "skip" <shofmann[ at ]kbb.com> wrote in message news:D48F5F7C-E5C2-417B-AB3A-7C186EB8929D[ at ]microsoft.com... [Quoted Text] > Hello all > > I recently setup wsus 3.0 sp1 on windows 2008. How can i get a report > using wsus on the installed patches on a group of servers? I dont want to > install patches i just want to get a report on what has already been > installed. If i can do this it will save me the trouble of having to copy > over the old wsus 2.0 database from our old server and importing into our > new 3.0 sp1 wsus server. Well, the first thing you're going to have to do is reconfigure those client systems to detect from/report to the new WSUS 3.0 server; and before that will be useful you're going to need to configure the new WSUS 3.0 server to synchronize the needed product categories and update classifications, so those clients can execute detections against the new server. At that point, the old database will be totally irrelevant anyway! Just approve the needed updates as reported to the WSUS 3.0 server and press on with life. Retire the WSUS 2.0 server and don't worry about it. > Basically when go live with the new wsus 3.0 sp1 box we need to know what > patches have already been installed, so i am thinking i will either need > to copy the information from he old wsus box or run a report using the new > wsus box, (if its possible to do so) I would think you would already *know* what patches have been installed, if you've been using WSUS v2 for any period of time. Presumably you already have all of your servers patched up-to-date on the WSUS 2.0 box. The needed updates aren't going to magically change just because you've changed versions of WSUS. Every update published via WSUS 2.0 is published via WSUS 3.0, and if your machines are patched now, they'll be patched on WSUS 3.0. If they NEED updates now, they're still going to need updates from the WSUS 3.0 server. -- Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP Principal/CTO, Onsite Technology Solutions, Houston, Texas Microsoft MVP - Software Distribution (2005-2009) MS WSUS Website: http://www.microsoft.com/wsus My Websites: http://www.onsitechsolutions.com; http://wsusinfo.onsitechsolutions.com My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

Re: Report installed patches "skip" <shofmann[ at ]kbb.com> 12/10/2008 7:15:53 PM Thanks for the info it does help me understand the product a bit better. Can i target servers using GPO so they report into the new WSUS 3.0 server but dont install or push out any patches? I basically want to get all the computers reporting into the new wsus box but i dont want to install patches at this point Thanks "Lawrence Garvin (MVP)" <lawrence[ at ]news.postalias> wrote in message news:%23zLZkpvWJHA.2372[ at ]TK2MSFTNGP03.phx.gbl... [Quoted Text] > "skip" <shofmann[ at ]kbb.com> wrote in message > news:D48F5F7C-E5C2-417B-AB3A-7C186EB8929D[ at ]microsoft.com... >> Hello all >> >> I recently setup wsus 3.0 sp1 on windows 2008. How can i get a report >> using wsus on the installed patches on a group of servers? I dont want to >> install patches i just want to get a report on what has already been >> installed. If i can do this it will save me the trouble of having to copy >> over the old wsus 2.0 database from our old server and importing into our >> new 3.0 sp1 wsus server. > > Well, the first thing you're going to have to do is reconfigure those > client systems to detect from/report to the new WSUS 3.0 server; and > before that will be useful you're going to need to configure the new WSUS > 3.0 server to synchronize the needed product categories and update > classifications, so those clients can execute detections against the new > server. > > At that point, the old database will be totally irrelevant anyway! > > Just approve the needed updates as reported to the WSUS 3.0 server and > press on with life. Retire the WSUS 2.0 server and don't worry about it. > >> Basically when go live with the new wsus 3.0 sp1 box we need to know what >> patches have already been installed, so i am thinking i will either need >> to copy the information from he old wsus box or run a report using the >> new wsus box, (if its possible to do so) > > I would think you would already *know* what patches have been installed, > if you've been using WSUS v2 for any period of time. Presumably you > already have all of your servers patched up-to-date on the WSUS 2.0 box. > The needed updates aren't going to magically change just because you've > changed versions of WSUS. Every update published via WSUS 2.0 is published > via WSUS 3.0, and if your machines are patched now, they'll be patched on > WSUS 3.0. If they NEED updates now, they're still going to need updates > from the WSUS 3.0 server. > > > -- > Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP > Principal/CTO, Onsite Technology Solutions, Houston, Texas > Microsoft MVP - Software Distribution (2005-2009) > > MS WSUS Website: http://www.microsoft.com/wsus > My Websites: http://www.onsitechsolutions.com; > http://wsusinfo.onsitechsolutions.com > My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin >

Re: Report installed patches DaveMills <DaveMills[ at ]newsgroup.nospam> 12/10/2008 7:41:24 PM On Wed, 10 Dec 2008 11:15:53 -0800, "skip" <shofmann[ at ]kbb.com> wrote: [Quoted Text] >Thanks for the info it does help me understand the product a bit better. Can >i target servers using GPO so they report into the new WSUS 3.0 server but >dont install or push out any patches? > >I basically want to get all the computers reporting into the new wsus box >but i dont want to install patches at this point That's the default behavior. If the update are not approved for install that will not install just detect. -- Dave Mills There are 10 types of people, those that understand binary and those that don't.

Re: Report installed patches "Lawrence Garvin \(MVP\)" <lawrence[ at ]news.postalias> 12/10/2008 7:50:16 PM "skip" <shofmann[ at ]kbb.com> wrote in message news:7AE2438A-4BEF-4167-AB50-E52C5B5587BE[ at ]microsoft.com... [Quoted Text] > Thanks for the info it does help me understand the product a bit better. > Can i target servers using GPO so they report into the new WSUS 3.0 server > but dont install or push out any patches? As long as you have not marked any updates as "APPROVED", then the clients will only report the status of the updates (Needed, Not Applicable). > I basically want to get all the computers reporting into the new wsus box > but i dont want to install patches at this point That's all that's required. Point the systems at the new WSUS Server, and leave all updates at Not Approved until you've completed your reporting requirements. -- Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP Principal/CTO, Onsite Technology Solutions, Houston, Texas Microsoft MVP - Software Distribution (2005-2009) MS WSUS Website: http://www.microsoft.com/wsus My Websites: http://www.onsitechsolutions.com; http://wsusinfo.onsitechsolutions.com My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin