Microsoft KB Archive/894154

= The Extended Security Update Inventory Tool is available for environments that use Systems Management Server 2003 or Systems Management Server 2.0 =

Article ID: 894154

Article Last Modified on 9/27/2007

-

APPLIES TO


 * Microsoft Systems Management Server 2003
 * Microsoft Systems Management Server 2.0 Standard Edition

-



INTRODUCTION
On April 12, 2005, Microsoft released the Extended Security Update Inventory Tool. This tool helps detect and deploy Microsoft Systems Management Server (SMS) security updates that the Microsoft Baseline Security Analyzer (MBSA) does not support. These security updates affect several products. MBSA is included in the SMS 2003 Software Update Scanning Tools download. MBSA is also included in the Microsoft Systems Management Server 2.0 Software Update Services (SUS) Feature Pack. For more information about a tool that you can use to deploy these security updates in a non-SMS environment, click the following article number to view the article in the Microsoft Knowledge Base:

894193 How to obtain and use the Enterprise Update Scan Tool

For more information about Microsoft security updates, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/



MORE INFORMATION
SMS 2003 and the SMS 2.0 SUS Feature Pack use MBSA 1.2 and the Microsoft Office Inventory Tool to detect security updates on SMS client computers. The SMS hardware inventory process returns security update information to the SMS site server. Then, SMS administrators can use the Distribute Software Updates Wizard (DSUW) to deploy critical updates. The DSUW is included in SMS 2003 and in the SMS 2.0 SUS Feature Pack.

Because of limitations in the products that MBSA 1.2 supports, SMS 2003 and the SMS 2.0 SUS Feature Pack cannot detect all the security updates that are released. Therefore, Microsoft has released the Extended Security Update Inventory Tool to help SMS 2003 and SMS 2.0 administrators detect security updates that MBSA does not detect. This tool also helps deploy these updates by using the DSUW. At the time this article was written, the following security updates were included in the Extended Security Update Inventory Tool:
 * 833987 (MS04-028)
 * 887219 (MS05-004)
 * 887981 (MS05-006)
 * 890261 (MS05-009)
 * 896597 (MS05-022)
 * 904706 (MS05-050)

You can detect security updates that are not mentioned in this article by using the scanning tools that SMS and MBSA offer.

Download information
To download the Extended Security Update Inventory Tool, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=2C93DA1D-48A0-4E5C-991F-87E08954F61B&displaylang=en

The download package includes a document that describes how to install the tool.

Note The SMS Extended Security Update Inventory Tool Setup program may not work correctly on an SMS 2.0 server that is running Windows NT 4.0 with Service Pack 6a (SP6a). If the Setup program does not succeed, see the advanced installation steps in the user guide that is included with the inventory tool download package.

Important Before you install the Extended Security Update Inventory Tool, make sure that the latest versions of the software update scanning tools for SMS are installed.  To download the latest software update scanning tools for SMS 2003, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/sms/bb676786.aspx

Note You do not have to have SMS 2003 Service Pack 1 installed to install the updated scanning tools. To obtain latest software update scanning tools for SMS 2.0, download the SMS 2.0 Software Update Services Feature Pack. To do this, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/sms/bb676802.aspx



