Blog Posts tagged with Announcements

Ask a question

KACE SMA (K1000) | Spectre & Meltdown Analysis

01/09/2018 update: added a Report and another CIR.
01/12/2018 update: added a screenshot of my device after installing the MS Patches.
                                updated the script to use the current script version of today (1.0.4)  > Download
                                Scriptchangelog from Microsoft:
                                        Added message directing users to explanation of output
                                        Addressed feedback regarding multiple CPUs when setting $cpu 

For an official statement from quest please visit:

Hi all, 

here a quick blog to check the hardware vulnarabilities CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 or better known as Spectre and Meltdown.
I am using the Microsoft security guidance ADV180002 as base script with KACE modifications. 

The outcome of this blog will be that you can easily see, filter, report and label all your Windows clients higher than Windows 7 SP1 or Server 2012 R2 which are vulnerable or secure against Spectre and / or Meltdown. To archive this we first need a script. 

The script looks like this and can be downloaded here
If you need assistance to import it to your KACE SMA (K1000) please feel free to contact me. 

The script will create the logfile: "C:\Windows\Logs\KACE_CPU_Check.log" and rewrite it every time. 

To have the posibility to search, label and report these date we would need a CustomInventory.
Here you have a screenshot and can find the export as a download here.
ShellCommandTextReturn(cmd /c type ""C:\Windows\Logs\KACE_CPU_Check.log"")

After that you should be able to filter everything like you know to do it. 
Enabled protections appear in the output as "true".

Example for filtering for vulnerable devices:
If you go to the details you would see that this device is vulnerable against both.

Now you want to check with one klick which devices are vulnerable and compatible to get patches through Patching. To do that we first need again a custom inventory which checks if the compatibility registry key is available. You can download the ready to use package here.

RegistryValueReturn(HKEY_LOCAL_MACHINE64\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat, cadca5fe-87d3-4b96-b7fb-a231484277cc, REG_DWORD) 

The next step is to import the report which can be downloaded here

       mc.LAST_INVENTORY AS Inventory,
       mc.OS_NAME AS Operating_System,
       mc.USER_FULLNAME AS Username,
       mc.BIOS_MANUFACTURER AS 'Bios Manufacturer',
       mc.BIOS_VERSION AS 'BIOS Version'
WHERE mci.STR_FIELD_VALUE LIKE '%false%' AND mci.SOFTWARE_ID = (SELECT sw.ID FROM SOFTWARE sw WHERE (sw.DISPLAY_NAME = 'Inventory: Spectre & Meltdown Analysis'))
AND mci1.SOFTWARE_ID = (SELECT sw1.ID FROM SOFTWARE sw1 WHERE (sw1.DISPLAY_NAME = 'Inventory: Spectre & Meltdown QualityCompat'))

You can modify / add / delete everything wihtin the scripts, custom inventories or SQL-Reports. 
If you rename your custom inventory rules change the names in the SQL query too.

The report should look like this:

Little Update after the installation of the Microsoft Patch for my system (KB4056890).

Cheers Timo

View comments (9)

KACE MDM updates available

The Quest KACE team is happy to announce the public release of the Q4FY18 updates to KACE Cloud Mobile Device Manager (MDM). New features added to KACE MDM in Q4 include:

·       Personal vs. company devices: treat devices differently while still maintain control over whatever bring-your-own-device (BYOD) policy you may have.

·       Improved roll management: restrict enrollment and protect preset configurations.

·       Device policies and restrictions: set passcode and device restrictions to improve security while maintain effective management and control.

·       Application management for iOS: deploy and remove managed applications on iOS devices.

·       Device configuration: allow for centralized configurations for corporate email and VPN access.


     Need additional information

KACE Cloud MDM product page.

KACE Cloud MDM datasheet.

Information on each product update can be found in the MDM Release Notes from the Support Portal or directly from the MDM product.

Be the first to comment

ScriptLogic and Realtimepublishers Launch Windows Desktop Administration eBook

Definitive Guide is a Must Read for Every Network Administrator

Pompano Beach, FL – January 28, 2003 – ScriptLogic Corporation (, the leader in desktop administration software for Windows-based networks, and, Inc., the worldwide leader in corporate sponsored e-publishing, today announced the release of The Definitive Guide to Windows Desktop Administration. This new eBook, sponsored by ScriptLogic and authored by Bob Kelly, one of the industry’s top Windows management experts, provides valuable guidance and real-world examples for creating an efficient desktop administration plan.

“We are very excited to sponsor The Definitive Guide to Windows Desktop Administration,” said Jason Judge, CEO of ScriptLogic Corporation. “This eBook provides its readers with great, practical information about how to lower the total cost of ownership of their Windows-based networks-- something we know a lot about. The eBook complements our goal of helping customers reduce the time and money spent maintaining their networks.”

The Definitive Guide to Windows Desktop Administration examines the life cycle of Windows desktop administration from the initial OS deployment to change management through best practices. Topics included in this eBook will help readers learn how to do the following:

Reduce Help desk and administration costs and increase user productivity

Define and automate administration tasks using the latest tools and technologies

Manage security with Group Policy and desktop lockdown

Manage user profiles and map network resources

Embrace ‘best practices’ and script custom solutions

Exclusive to ScriptLogic, The Definitive Guide to Windows Desktop Administration will be published on a chapter-by-chapter basis, as it is written, providing an in-depth look at how to manage the Windows desktop. Registered readers will receive email notification when each chapter of the eBook is made available for download. Readers can register now for the eBook at

“ScriptLogic is a well established leader in the Windows desktop administration arena and we are very excited to be partnering with them to make The Definitive Guide to Windows Desktop Administration available to our readers,” said Sean Daily, CEO of Realtimepublishers. “In these challenging economic times, it is even more important for enterprises to reduce TCO through efficient desktop administration and we know our readers will appreciate this free resource.”

The Definitive Guide Series

The Definitive Guide eBook series provides timely IT content written for technical professionals, including system administrators, senior IT personnel, advanced users, and consultants. The titles in this series provide a wealth of information that goes beyond whatÂ’s found in product manuals and white papers, and are written by expert authors who are veterans in their respective fields. The Definitive Guide series, like all RealtimepublishersÂ’ series, are high-quality eBooks that are free to readers on the Web sites of industry-leading, high-tech companies around the world.

About The Author

Bob Kelly is the founder of and author of an upcoming book about the KiXtart scripting language. Bob is recognized as an industry expert in the area of application and OS deployment—writing, speaking and consulting on these and other related topics. With 13 years of experience in engineering and support, he currently works as the principal consultant in the support of several enterprise networks providing scripting, repackaging, migration, and implementation services at Integrated Data Systems in Chantilly, VA

About ScriptLogic

ScriptLogic Corporation is the leader in desktop administration software for Microsoft Windows-based networks. ScriptLogic, its award-winning, patent-pending, flagship product is the first commercial software to combine logon scripting, group policies and user profile management – into an intuitive graphical management console supporting all 32-bit Windows platforms (95, 98, Me, NT, 2000 and XP). An innovative, multi-functional solution, ScriptLogic eliminates redundant tasks, repeated trips to each desktop, maintaining multiple batch files and many other time consuming, labor-intensive activities – leaving IT staff free to concentrate on more critical issues. With deployments ranging from 10 to over 40,000 seats, ScriptLogic offers significant benefits to any size network. ScriptLogic, a privately held company, is headquartered in Pompano Beach, Florida and can be reached at (954) 861-2300 and on the web at

About is the worldwide leader in corporate-sponsored e-publishing. The company is revolutionizing the publishing industry through its unique approach of creating high-quality titles and publishing them at no charge to readers on the Web sites of industry-leading companies around the world. Current Realtimepublishers eBook sponsors include Citrix Systems, Microsoft, NetIQ, New Moon Systems, Quest Software, Aelita, and more. For information about Realtimepublishers and available eBooks, please visit

Be the first to comment

NetPoint Beta 1.1 Released!

June 14, 2006 – System administrators have always been faced with the complexities of tracking hardware and software installed on their networks. Neutex Systems today announces the release of NetPoint Beta 1.1, a complete hardware and software inventory system available for free to the general public at

“Conventional network inventory systems have amplified the complexities system administrators face in day to day operations. These systems typically require agents on remote systems, training, hours to implement, and are not cost effective. NetPoint addresses these problems by offering a web based network inventory system equipped with automated system discovery, agentless polling, and can be implemented in minutes. This simplified approach will appeal to many system administrators seeking to simplify their network operations.” says Shannon Ma, Founder of Neutex Systems.

NetPoint tracks 18 different hardware and software components that have been installed and uninstalled. These components consist of: BIOS, CDROM Drive, Disk Drive, Floppy Drive, Logical Disk, Memory, Modem, Monitor, Network Adapter, Operating System, Patch, Printer, Processor, Program, Sound Device, System, Video Controller, and Windows Service.

For more information please visit

Be the first to comment

A solution to remotely deploy the Office 2007 Compatibility Pack

IS Decisions ( announces the availability of software enabling instant remote deployment of MicrosoftÂ’s Compatibility Pack for Office 2007.


All Word, Excel or PowerPoint files created with Office 2007 will not be accessible to users running older versions of MicrosoftÂ’s office suite (Office 2000, XP, 2003).

In the near future this incompatibility can potentially generate serious communication problems for organizations as Office 2007 slowly gets rolled out worldwide.

Thus a Word 2003 user receiving by email a file in Word 2007 format will not be able to open it, modify it or save it.


To help their clients resolve the issue, Microsoft has made available a free “Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats”.

This free download, available in several languages including French, effectively allows users who have installed it on their desktop to open, modify and save files in the new Word, Excel and PowerPoint 2007 formats.

The Compatibility Pack can also be used with Microsoft Office Word Viewer 2003, Excel Viewer 2003 and PowerPoint Viewer 2003 to display files saved in the new formats.

However, the application needs installing on all relevant desktops and laptops.


In order to allow organizations using Office 2000, XP or 2003 to rapidly and cost effectively deploy the Office 2007 Compatibility Pack, IS Decisions is offering 15 day temporary RemoteExec licenses at an exceptional rate (pricing starting at $0.22 per target system).

RemoteExec will deploy the Office 2007 Compatibility Pack within minutes on all the systems present in an environment, regardless of size.

RemoteExec will execute the deployment remotely without requiring an agent or any prior manual intervention whatsoever on targeted systems. RemoteExec will log any systems on which the operation failed. The log can then be directly injected as a target list for a subsequent pass.


IS Decisions supplies a fully detailed reference guide explaining the installation of the Microsoft Office 2007 Compatibility Pack using a “15 day” RemoteExec license. The licenses can be purchased online via a secure payment center.

Also, clients will be able to convert their “15 day” licenses to permanent licenses with a 10% discount off RemoteExec’s pricelist.

Full details on IS Decisions site:


Without requiring an agent or any prior manual intervention whatsoever on targeted systems RemoteExec allows you to instantly and remotely execute programs (.exe, .bat, .cmd), scripts (.vbs, .js), program associated file types (.txt, .doc, .wav, .reg, .inf, .msi, ...), to copy folder(s)/file(s), ...

Using RemoteExec an administrator can:

- Add/Modify/Delete registry keys and/or values

- Install patches, Service Packs and hotfixes.

- Deploy Windows Installer packages (MSI) in silent mode

- Close down a custom selection of servers and desktops

- Close a custom selection of user sessions

- Reboot distant computers

- Deploy and regularly synchronize data files and folders on remote systems

- Modify the local administrator passwords on all workstations

- Â…

Full details about RemoteExec:


IS Decisions, founded in 2000 and based in Biarritz (France), specializes in editing security and change management solutions for Microsoft® Windows® infrastructures.

The software developed by IS Decisions cover both domains with the following features:

Security, by providing network administrators with the tools necessary for

- proactive system auditing and analysis,

- enhanced patch / application / data deployment and system action,

- network access security, management and reporting,

- sensitive data and process monitoring and enhanced alert triggering.

Change Management, by giving network administrators the ways and means to easily and rapidly generate and maintain an updated, comprehensive knowledgebase of all managed resources, and by providing the technology to analyze, monitor and intervene instantly on these resources.

Be the first to comment
Showing 1 - 5 of 417 results

Top Contributors

Talk About Microsoft App-V