 Re: Wsus under Integrity
I don't know that much about WSUS unfortunately. If there is a process, you could check for that, but this would be circumstantial. Just because the client side service is running, doesn't mean that it's successfully updated the patches.
My suggestion is to use the sandbagging approach. Enter checks for your most significant patches. This shouldn't be too often, and you could consider the MS critical update notifications as your guideline.
Otherwise, if you have the resources, you might try doing registry snap-shots of clients that are updated vs. those that aren't and try to isolate any regkeys that indicate the WSUS is happy.
Good luck. |