SMS Query for Internet Explorer Patches

[Chkaotic]

I have created several builds of IE5.5 sp2 with the IEAK, and have 3 inparticular, one with no patches, one with the 15 MAY 02 cumulative patch, and one with the 22 AUG 02 cumulative patch.

I have found out that I can check the version of the urlmon.dll file to determine which patch level the PC is at, and figured that I could just set SMS to inventory .dll files and then query for those that where urlmon.dll's version didnt equal the newest patched version.

Everything works fine, with one problem: The software inventory seems to keep a history of previous software scans, hence, a machine running IE55 w/o any patches is scanned, then is upgraded and rescanned, there are two entries for the urlmon.dll in SMS.

I tried creating a query for urlmon.dll = current version (to list only pc's that had the up-to-date version) and then creating another query and had it subselect values, but it still listed the duplicate version numbers.

Anyone have any other ideas?

 

[RodTrent]

The only true way to get patched builds is by modifying your SMS_DEF.MOF file and retrieving the patch information from the computer's registry.

You'll want to grab the MOF Editing Guide, which walks you through this. And, also the Monster MOF which includes the IE additions.

MOF Editing Guide:

http://www.myitforum.com/articles/1/view.asp?id=2169

Monster MOF:

http://www.myitforum.com/articles/1/view.asp?id=2188

Rod Trent
Microsoft.MVP.SMS
=======================================
Main site:

http://www.myITforum.com

=======================================

 

[Beelzel]

We use a Kix script

$IEVersion = READVALUE("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer","Version&quot
If $IEVersion < 5.50.4807.2300 shell &quot;cmd /c net send bowmanrl %computername% old IExplorer here&quot;

which is in my logon script. It them &quot;net sends&quot; a popup to me ... make sense??