The Extended Security Update Inventory Tool is available for environments that use Systems Management Server 2003 or Systems Management Server 2.0 (894154)


The information in this article applies to:

  • Microsoft Systems Management Server 2003
  • Microsoft Systems Management Server 2.0

INTRODUCTION

On April 12, 2005, Microsoft released the Extended Security Update Inventory Tool. This tool helps detect and deploy Microsoft Systems Management Server (SMS) security updates that the Microsoft Baseline Security Analyzer (MBSA) does not support. These security updates affect several products. MBSA is included in the SMS 2003 Software Update Scanning Tools download. MBSA is also included in the Microsoft Systems Management Server 2.0 Software Update Services (SUS) Feature Pack. For more information about a tool that you can use to deploy these security updates in a non-SMS environment, click the following article number to view the article in the Microsoft Knowledge Base:

894193 How to obtain and use the Enterprise Update Scan Tool

For more information about Microsoft security updates, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/

MORE INFORMATION

SMS 2003 and the SMS 2.0 SUS Feature Pack use MBSA 1.2 and the Microsoft Office Inventory Tool to detect security updates on SMS client computers. The SMS hardware inventory process returns security update information to the SMS site server. Then, SMS administrators can use the Distribute Software Updates Wizard (DSUW) to deploy critical updates. The DSUW is included in SMS 2003 and in the SMS 2.0 SUS Feature Pack.

Because of limitations in the products that MBSA 1.2 supports, SMS 2003 and the SMS 2.0 SUS Feature Pack cannot detect all the security updates that are released. Therefore, Microsoft has released the Extended Security Update Inventory Tool to help SMS 2003 and SMS 2.0 administrators detect security updates that MBSA does not detect. This tool also helps deploy these updates by using the DSUW. At the time this article was written, the following security updates were included in the Extended Security Update Inventory Tool:
  • 833987 (MS04-028)
  • 887219 (MS05-004)
  • 887981 (MS05-006)
  • 890261 (MS05-009)
  • 896597 (MS05-022)
  • 904706 (MS05-050)
You can detect security updates that are not mentioned in this article by using the scanning tools that SMS and MBSA offer.

Download information

To download the Extended Security Update Inventory Tool, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=2C93DA1D-48A0-4E5C-991F-87E08954F61B&displaylang=en

The download package includes a document that describes how to install the tool.

Note The SMS Extended Security Update Inventory Tool Setup program may not work correctly on an SMS 2.0 server that is running Windows NT 4.0 with Service Pack 6a (SP6a). If the Setup program does not succeed, see the advanced installation steps in the user guide that is included with the inventory tool download package.

Important Before you install the Extended Security Update Inventory Tool, make sure that the latest versions of the software update scanning tools for SMS are installed.

REFERENCES

For more information about how to obtain and use the Enterprise Update Scanning Tool for non-SMS deployments, click the following article number to view the article in the Microsoft Knowledge Base:

894193 How to obtain and use the Enterprise Update Scanning Tool

Modification Type:MinorLast Reviewed:12/8/2005
Keywords:kbSecurity kbinfo kbhowto KB894154 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.