SMS and Windows Updates

[rnak]

Just wondering how the rest of the world addresses the discrepency between SMS' Available Updates, MBSA scans and Microsoft's Windowsupdate site. If I push out whatever is available through SMS to either XP or 2K clients, and then do either an MBSA scan or go to the update site, I'm usually missing between 10 and 20 patches (sync tool runs every day). Does everyone else Qchain the missing patches in a script and push that out? Or is it normal to create individual packages for each missing patch? And if either of these methods are used, how do you know the correct order to apply them in? Do I have to research the release dates and go by that? Just wondering if there's a conventional solution.

Thanks.

 

[skclark]

SMS Extended Security update Inventory Tool should get you where you want to be:

"

http://www.microsoft.com/downloads/...D-48A0-4E5C-991F-87E08954F61B&displaylang=en"

 

[rnak]

Thanks for the reply SMSadict. However, I do run the Extended Tool as well which only has 6 or 7 available updates. Those are patches for Media Player, IE, and .NET none of which are the ones that are detected as missing by Windows Update or running MBSA scans.