Systems Management Question

how to check in K1000 this patch MS17-010 is installed on machines

05/15/2017 3330 views
how to check in K1000   this  patch MS17-010   is  installed  on machines ?

Devices missing patches: 0
3 Comments   [ + ] Show comments


  • When I search for the ID, I cannot find it in the catalog, comes back with "no patches found". How do I force KACE to download this patch?
    • http://i.cubeupload.com/yz1XF9.jpg
  • my patches are not downloading, file size is 0 for all MS17-010 patches
  • Mine are not even displaying... have these patches been superseded? I have opened a support ticket with Quest.
    • I was able to fix this. Turns out I had a label filtering out "superseded" patches. The patch I was looking for was already superseded and my patch label was filtering it out.

All Answers

I created a report for our environment that we used to detect deployment of the patches. I would love to know if it works for you too. http://www.itninja.com/question/does-this-ms17-010-compliance-report-work-for-anyone-else
Answered 06/01/2017 by: designworks
Orange Belt

From https://support.quest.com/kace-systems-management-appliance/kb/229420

It is not possible to browse the K1000 Patch Catalog directly for MS17-010

  1. In order to find the proper package for your target device, go to MS17-010
  2. Look for the OS's operated in the environment and copy the Update ID
  3. Go to the K1000 Security | Catalog
  4. Select Individual Updates and 2017 in the drop down on the top right
  5. Paste the Update ID and hit Enter
  6. A Patch will be displayed, click on the Name
  7. If the Patch is disabled as Superseeded, go to the bottom of the screen
  8. Search for Superseded By: and click on the Patch with the Highest version number
  9. This will bring you to the proper latest version
  10. Add this to your Patch Label and repeat for all OS's

Answered 05/15/2017 by: gwir
Brown Belt

  • This is helpful for creating a detect/deploy job which targets the selected patches. What's being asked that is not answered is how to create a report of which computers are not patched (that is, do not have at least one of the required patches.)
I was trying this query


 order by DISPLAY_NAME

and i found this info online

Windows 7

See if the patch is already installed. Click Start > Control Panel > System and Security. Under Windows Update click the View installed updates link. Scan the list (which can be alphabetized by clicking the box marked Name, or sorted by date) to see if you have ANY of these patches:

2017-05 Security Monthly Quality Rollup for Windows 7 (KB4019264)
April, 2017 Preview of Monthly Quality Rollup for Windows 7 (KB4015552)
April, 2017 Security Monthly Quality Rollup for Windows 7 (KB4015549)
March, 2017 Security Monthly Quality Rollup for Windows 7 (KB4012215)
March, 2017 Security Only Quality Update for Windows 7 (KB4012212)

I replace SOFTWARE.DISPLAY_NAME LINK '%KB4019264%' with each KB#######

I don't know how to do a IN list query but it work

If you have any of those patches already installed, then you are good to go and you can sleep well at night. Don’t be confused.

click here for full website

Answered 05/16/2017 by: armasmike
Senior White Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ