Use Mbsacli.exe to Get Patch Requirements from Remote Servers

 Executive Summary:

When existing solutions don't work, you sometimes need to come up with your own. That exactly what a Windows engineer did when he couldn't use Microsoft Systems Management Server (SMS) 2003 or Windows Server Update Services (WSUS) for managing patches on the servers in the Active Directory (AD) environment. Part of that solution, MBSA_Scan.vbs, scans servers for updates and creates a file that lists the Windows patches (as prescribed by Microsoft TechNet) needed on those servers.

Sometimes in an Active Directory (AD) environment the architecture isn't optimal and products aren't being used for the tasks for which they're best suited. For example, at my company, Microsoft Systems Management Server (SMS) 2003 servers are being used for workstation management, leaving the servers out in the cold when it comes to patch management. . . .