Best Practices Question

Verify machines have MS17-010 related patches installed

05/14/2017 3215 views
We are trying to verify all of our machines to make sure all MS17-010 related patches are installed. As we found that under installed patches detection this security update will show the KB number of this patches that is different in different OS. So is there a way to list out all machines that missed this update?
3 Comments   [ + ] Show comments


  • https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

    MS17-010 is this available in KACE now?
  • It seems to be missing in the catalog for all Windows OS systems other than Win 8 and Win Server 2003 for me. Are the other OS versions still being tested by 3rd party company?
  • When I search for the ID (for windows 10), I cannot find it in the catalog, comes back with "no patches found". How do I force KACE to download this patch?

Community Chosen Answer

From https://support.quest.com/kace-systems-management-appliance/kb/229420

It is not possible to browse the K1000 Patch Catalog directly for MS17-010

    In order to find the proper package for your target device, go to MS17-010
    Look for the OS's operated in the environment and copy the Update ID
    Go to the K1000 Security | Catalog
    Select Individual Updates and 2017 in the drop down on the top right
    Paste the Update ID and hit Enter
    A Patch will be displayed, click on the Name
    If the Patch is disabled as Superseeded, go to the bottom of the screen
    Search for Superseded By: and click on the Patch with the Highest version number
    This will bring you to the proper latest version
    Add this to your Patch Label and repeat for all OS's
Answered 05/15/2017 by: gwir
Brown Belt

  • When I do that, I only see the patches listed for Server 2003 and Win8. All other OS versions are missing: http://i.imgur.com/VePvN3G.png

    How do I get the Win7 and Server 2012 patch? Thanks!
    • My copy/paste eat the link. Go to https://technet.microsoft.com/en-us/library/security/ms17-010.aspx and Look for the OS's operated in the environment and copy the Update ID. For Win7 SP1 x64 it's 4012212

All Answers

this doesn't exactly address your request but does this report that shows compliant machines work for you? http://www.itninja.com/question/does-this-ms17-010-compliance-report-work-for-anyone-else
Answered 06/01/2017 by: designworks
Orange Belt

This content is currently hidden from public view.
Reason: Removed by member request For more information, visit our FAQ's.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ