 |
Newsgroups: microsoft.public.security.baseline_analyzer
From: Andrew Aronoff <NOSPAM_WRONG.ADDR...@yahoo.com>
Date: Thu, 07 Jul 2005 03:07:06 +0200
Local: Thurs 7 July 2005 02:07
Subject: MBSACLI 2.0 /xmlout Parsing Script
I have written a VBS script that runs MBSACLI 2.0 with the /xmlout
option and parses the XML output file to produce a readable text file. The script can be downloaded here: The MD5 hash is: E2EE397BC540EC23D901018EC033890E The script is free, but is provided with no warranty, expressed or Please note: 1. The script must be located in the same directory as MBSACLI.EXE and 2. The output text file will be placed in the same directory as the 3. The script can be run with a single command line parameter that 4. The script can only be run under Windows 2000 and Windows XP, since 5. The script must be run under an Administrator account. Running 6. The script will only report uninstalled hotfixes. The report format Sequence number. Hotfix title A typical entry might be: #. Some alarmiing hotfix title here 7. Microsoft Update Agent 2.0 is required for MBSACLI 2.0. Once it's 8. The script is written for use on workgroup PC's. Revisions are 9. The script will hang if MBSACLI.EXE cannot download its .CAB file. 10. If the script throws an error, please let me know and I'll fix the 11. If you have an XML parsing suggestion, please let me know and I'll 12. If you need customization assistance to get the script to work 13. MS will, of course, provide their own scripts. I have no idea what regards, Andy Please send e-mail to: usenet (dot) post (at) aaronoff (dot) com To identify everything that starts up with Windows, download ********** You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "Rob Wickham [msft]" <rwick...@microsoft.com>
Date: Thu, 7 Jul 2005 09:51:58 -0700
Local: Thurs 7 July 2005 17:51
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
Andrew, this is excellent. There is a recent post from another user looking
for something like this. Slightly OT: Does anyone have existing scripts that can generate a list of -- You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "SixDoubleO" <SixDoub...@discussions.microsoft.com>
Date: Thu, 7 Jul 2005 15:22:01 -0700
Local: Thurs 7 July 2005 23:22
Subject: RE: MBSACLI 2.0 /xmlout Parsing Script
Andy,
Thanks for the script. I am in the middle of writing something similar, One question, though. How do I deploy Window Update Agent to all my PS - Is it just me, or is this newest MBSA a complete step in the wrong You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "Nelson Araujo [MSFT], CISSP, MCAD" <nels...@online.microsoft.com>
Date: Thu, 7 Jul 2005 17:32:49 -0700
Local: Fri 8 July 2005 01:32
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
Andy,
To deploy Windows Update Agent on your computers just scan them with MBSA Let me know if I can help more. Nelson Araujo, CISSP, MCAD This posting is provided "AS IS" with no warranties, and confers no rights. You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: Andrew Aronoff <NOSPAM_WRONG.ADDR...@yahoo.com>
Date: Fri, 08 Jul 2005 03:00:52 +0200
Local: Fri 8 July 2005 02:00
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
>How do I deploy Window Update Agent to all my workstations? When you run my script on a workstation that doesn't have Windows Update Agent 2.0, MBSACLI.EXE will fail to download the .CAB file, the script will detect a tiny .XML file and it will offer to send the default browser to the Update Agent 2.0 download location. That's one way to get it. The other way is to download it here: >Is it just me, or is this newest MBSA a complete step in the wrong That makes two of us. >direction? regards, Andy Please send e-mail to: usenet (dot) post (at) aaronoff (dot) com To identify everything that starts up with Windows, download ********** You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "Rob Wickham [msft]" <rwick...@microsoft.com>
Date: Thu, 7 Jul 2005 21:29:56 -0700
Local: Fri 8 July 2005 05:29
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
Regarding a "step in the wrong direction", can you be specific about your
concerns? Is it the fact that there is now a client-side component required for update scanning, or something else? -- You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "SixDoubleO" <SixDoub...@discussions.microsoft.com>
Date: Thu, 7 Jul 2005 22:13:02 -0700
Local: Fri 8 July 2005 06:13
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
Sure!
To get full functionality from the mbsacli.exe utility, it must be The new tool seems to focus around an administrator running it The new tools relies on the WUA component and MSI 3.1. So I have to deploy It just seemed that HFNetChk/MBSA 1.2 was better suited to scripted On the bright side, I think the XML output will open up many more Like I said above, the tools seems geared toward interactive/manual scanning Nonetheless, those are some of my concerns. I appreciate you taking the You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "Rob Wickham [msft]" <rwick...@microsoft.com>
Date: Fri, 8 Jul 2005 13:15:12 -0700
Local: Fri 8 July 2005 21:15
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
Thanks for expressing these issues. MBSA 2.0 is a next-generation tool
using the next-generation scanning of WSUS. The bonus is that a WSUS server or connection to Microsoft Update is not required, and we've kept in the /HF scenario of not needing to fully install the MBSA setup package just to scan for updates. The ability to extend detection for new products without the need to change the detection engine on the client was also a significant point of interest for our users. Next we needed to deliver a new scanning engine that can go all the way back to Windows 2000 SP3, and still use a common, public client API and backend catalog of detection logic was a challenge. We think it was the best tradeoff we could make however, and we made MBSA Finally, even older versions of MBSA required components like remote The RestartRequired='true' | 'false' attribute is interesting because it If you have more questions about the xml attributes, please don't hesitate -- You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "Mike Chan [MSFT]" <mc...@online.microsoft.com>
Date: Sun, 10 Jul 2005 11:16:41 -0700
Local: Sun 10 July 2005 19:16
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
just to add a little more color as well...
the agent upgrade that MBSA attempts it not specific to MBSA. It is a also, if you have the latest agents on the clients, you should be able to -- You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||
|
Newsgroups: microsoft.public.security.baseline_analyzer
From: "Torgeir Bakken \(MVP\)" <Torgeir.Bakken-s...@hydro.com>
Date: Tue, 12 Jul 2005 16:51:01 +0200
Local: Tues 12 July 2005 15:51
Subject: Re: MBSACLI 2.0 /xmlout Parsing Script
Rob Wickham [msft] wrote: Hi, > (snip) > If you have more questions about the xml attributes, please > don't hesitate to ask. I would like to see more documentation on the "Check ID" and it's And a specific question for those: When running Mbsacli.exe /xmlout on a computer that is connected Check ID="500" Grade="5" Type="5" Cat="1" Rank="1" Name="Windows and Check ID="500" Grade="2" Type="5" Cat="1" Rank="1" Name="Windows where the Grade="5" version lists the WSUS related patches, while it So am I correct to say that Check ID="500"/Grade="5" is WSUS relevant -- You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
| |||||||||||||