Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Inconsistencies between Windows Updates and AU/SUS |
|---|---|
| Date: | Fri, 24 Sep 2004 07:27:02 -0700 |
[My previous email had an inaccuracy in it which I've fixed in this version.] RE: WU versus SUS, I would use MBSA in HFNETCHK mode to get more detailed information about what patches AU thinks is missing. You can run it as many times as you want to compare what patches are listed as missing. This might help you figure out what is going on. mbsacli.exe /hf -v mbsacli.exe /hf -v -sus http://yoursusserver Unless I'm mistaken, SUS 1.x uses the HFNETCHK-style of checking for patches by checking many files and registry values, whereas WU currently uses a different and less rigorous method primarily checking registry values, I believe as a way to solve performance issues. I think WU also caches the results in a local CAB file that can become corrupt. SUS 2.x unfortunately is supposed to go over to the WU method of checking. I would tend to trust SUS 1.x over WU. Also, because WU mainly checks registry values to see whether a patch has been installed, I'm not sure WU necessarily notifies you when patches have been revised, whereas SUS definitely does. Regarding the other questions, I might search or ask at the relevant microsoft.public.* newsgroups and/or www.susserver.com. - Karl Levinson __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ----- NTBugtraq Editor's Note: Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field. -----
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | FW: Office Viewers vulnerable to gdiplus.dll issue [sr], jlawson-bugtraq |
|---|---|
| Next by Date: | Automatically passing NTLM authentication credentials on XP, urity |
| Previous by Thread: | Re: Inconsistencies between Windows Updates and AU/SUS, Mark Boyum |
| Next by Thread: | Changed Firewall Policy in XP SP2, Joe Dance |
| Indexes: | [Date] [Thread] [Top] [All Lists] |