Windows 2008 server MBSA vs Windows Updates

[ankitvasi]

Hi guys,

I had small doubt about this issue...

we are updating windows server by running MBSA tool and installing the updates all is fine.

But when i run windows updates in same server i can see more updates different than what MBSA toll had scan...Is there any issue with tool or anything else.


Thanks in advance

Regards,
Ankit Vasi

 

[kmcferrin]

MBSA is not an updating tool, all it does is identify missing updates. The problem is that it needs to be updated itself to get the latest list of available updates or else it will not detect everything that is missing. Additionally, there are most likely some products or components that MBSA doesn't check for updates which could cause the discrepancy that you are seeing.

If you want to use a tool to install updates, your options are:

1. Get a full-fledged patch management tool.
2. Install a WSUS server.
3. Just use Windows Update.

Options 2 and 3 are variations on a theme. Both are driven by Windows Update but having a local WSUS server allows you to only download required patches once and then centrally manage their approval and installation.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator

 

[ankitvasi]

Thanks for your information .....

Thanks in advance

Regards,
Ankit Vasi