MBSACLI /xmlout /catalog c:\temp\wsusscn2.cab /unicode >results.xml
MBSACLI /l /rd c:\scanreports
Localizations
MBSA releases are available for German, Japanese, and French.
The WSUSSCN2.CAB file is localized to all supported languages and is
automatically downloaded and used by the tool for any client language or locale
being scanned. Results are stored in the report based on the MBSA installation
language.
Issues
Problems discovered during the scoping of this project:
Microsoft is not supporting the Nobackup feature for WES 7 Security Updates.
•
This is a crucial and impacting change, as the addition of monthly Security
Updates expands the Image footprint from month to month.
The current catalog files must be downloaded from the Internet before an OFF-
•
line mode scan. It is strongly recommended that these files be downloaded on
a weekly basis to ensure that the current security database is being used for
scanning.
Installation history (explicitly installed/effectively installed) no longer reflects
•
those updates that have been superseded by another update. The behavior of
this feature follows the behavior for missing updates, where only the most
recent non-superseded update is shown.
Workaround: Refer to the bulletin, fixlist, or TechNet search page to identify
•
each previous bulletin that has been included in the update in question from the
Current Update Compliance listing.
Using Windows Update on WES 7
Introduction
This section discusses the pros and cons of enabling Windows Update on
HP Windows Embedded Standard 7 (WES 7) images.
The section also covers the level of support Microsoft and HP have for Windows
Update and what the customer can expect if Windows Update is enabled on
HP thin clients.
It concludes with some special notes regarding installing WES 7 QFEs with a write
filter enabled.
18