Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security NTBugtraq
[Top] [All Lists]

Re: Inconsistencies between Windows Updates and AU/SUS

Subject: Re: Inconsistencies between Windows Updates and AU/SUS
Date: Fri, 24 Sep 2004 07:27:02 -0700
[My previous email had an inaccuracy in it which I've
fixed in this version.]


RE: WU versus SUS, I would use MBSA in HFNETCHK mode
to get more detailed information about what patches AU
thinks is missing.  You can run it as many times as
you want to compare what patches are listed as
missing.  This might help you figure out what is going
on.

mbsacli.exe /hf -v
mbsacli.exe /hf -v -sus http://yoursusserver

Unless I'm mistaken, SUS 1.x uses the HFNETCHK-style
of checking for patches by checking many files and
registry values, whereas WU currently uses a different
and less rigorous method primarily checking registry
values, I believe as a way to solve performance
issues.  I think WU also caches the results in a local
CAB file that can become corrupt.  SUS 2.x
unfortunately is supposed to go over to the WU method
of checking.  I would tend to trust SUS 1.x over WU.

Also, because WU mainly checks registry values to see
whether a patch has been installed, I'm not sure WU
necessarily notifies you when patches have been
revised, whereas SUS definitely does.

Regarding the other questions, I might search or ask
at the relevant microsoft.public.* newsgroups and/or
www.susserver.com.

- Karl Levinson



__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

-----
NTBugtraq Editor's Note:

Want to reply to the person who sent this message? This list is configured such 
that just hitting reply is going to result in the message coming to the list, 
not to the individual who sent the message. This was done to help reduce the 
number of Out of Office messages posters received. So if you want to send a 
reply just to the poster, you'll have to copy their email address out of the 
message and place it in your TO: field.
-----

<Prev in Thread] Current Thread [Next in Thread>